Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201432.roa
File: AS201432.roa (raw, json)
Hash identifier: h7fU47RN3UZJzHG489SGkTGaRD94RYDPTGtCM+BDksk=
Subject key identifier: 39:0F:2A:A4:B1:22:1C:48:C6:9F:D1:1B:16:F8:0F:88:8A:0E:0F:D7
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 200ECB7D055817820646A4F288DCB9B54F0C9A25
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201432.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 201432
IP address blocks: 2a06:a005:c40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0e:cb:7d:05:58:17:82:06:46:a4:f2:88:dc:b9:b5:4f:0c:9a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=390F2AA4B1221C48C69FD11B16F80F888A0E0FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:ca:82:0f:2f:36:a4:f4:af:dd:e2:f4:11:
e0:02:88:5b:31:6d:02:4f:f2:6b:4d:fe:b1:66:28:
b3:96:1f:63:98:62:5a:9e:91:52:2e:ae:e2:ad:61:
58:36:f1:e3:31:91:ec:ba:34:43:77:3c:10:a4:25:
8a:08:ee:3a:c5:8a:fc:c2:29:2f:12:7d:03:b1:e2:
ed:5b:47:ce:19:4d:9a:17:2b:81:b4:da:aa:0e:a1:
2c:b3:ec:b3:0a:a7:d6:a4:37:32:cb:31:56:f4:56:
64:3b:c2:ff:c0:c4:f6:be:cc:e9:7a:7a:54:93:10:
6e:97:37:c1:53:18:91:b0:b2:28:78:dc:07:28:d6:
c4:66:36:c9:e3:48:59:a9:4d:12:4d:72:01:7f:51:
5b:0e:02:66:af:5f:25:3e:5c:a5:7f:fd:5c:07:d7:
80:d5:8c:0b:71:eb:4b:0f:68:2b:06:cb:21:ec:c7:
c3:9a:72:ae:bc:61:f1:0f:0b:dd:7c:00:8b:a9:40:
38:d3:1f:e9:4d:91:23:9b:c9:5f:10:3c:d0:0b:c0:
53:3c:01:15:81:2a:c7:0c:26:b6:6a:1f:d9:f1:c7:
d6:f5:4f:fd:2c:34:0d:a9:84:39:aa:56:11:78:2e:
22:e6:bb:bf:16:54:31:95:98:cf:1b:5a:5c:a4:b1:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:2A:A4:B1:22:1C:48:C6:9F:D1:1B:16:F8:0F:88:8A:0E:0F:D7
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c40::/44
Signature Algorithm: sha256WithRSAEncryption
4f:24:f7:ad:96:b7:77:e2:cc:8d:e1:2b:91:d9:13:a6:67:d1:
5b:81:e1:54:31:68:8e:e1:ff:25:fb:49:97:e8:7d:83:2e:07:
d3:cd:77:b8:d6:02:75:d4:bc:1e:13:8e:11:ac:47:3f:2b:46:
35:e7:9a:2e:9b:3f:d9:25:77:79:67:ce:c4:4a:8e:e5:3f:1c:
92:93:60:74:9e:30:18:3f:4e:bd:ab:1c:70:27:ed:9d:f9:a3:
6e:46:10:d2:9b:26:92:93:54:74:b6:e9:2d:76:78:83:9a:a3:
cf:50:0e:86:b2:de:d6:c0:a9:a0:4f:fd:67:49:14:0b:94:1d:
48:db:f7:01:b8:b9:f0:64:5e:cc:ff:ab:69:75:b8:46:a0:b9:
7b:e7:55:a6:f0:7c:50:da:d0:7c:2c:0d:8e:f3:65:3f:43:ea:
fb:f5:64:77:25:1a:4d:39:56:e3:e2:75:a6:1d:34:d3:da:e2:
7e:24:cd:53:47:9f:be:69:bc:69:80:f6:64:73:a5:21:63:ab:
82:2c:f2:fa:73:82:f6:70:56:4e:e0:10:1a:a3:51:9a:86:1a:
39:47:25:4d:84:c4:10:15:a0:38:44:ad:1c:f1:da:29:4d:47:
74:11:dc:46:86:7d:c4:3c:cf:56:fc:7e:82:2b:01:26:c1:50:
87:6a:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:44 2025 by rpki-client