Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201445.roa
File: AS201445.roa (raw, json)
Hash identifier: gXgXv9UIXLN+FrCCkmfzxgyzTxBaQMO8unu5CaeikbU=
Subject key identifier: 4F:7F:9C:BE:DA:6B:3C:34:5D:FF:F9:28:62:D5:EA:09:49:47:93:00
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 11225885F93745C6A15D3D01D9BDDE362000C1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201445.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 201445
IP address blocks: 2a06:a005:150f::/48 maxlen: 48
2a06:a005:1c79::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:22:58:85:f9:37:45:c6:a1:5d:3d:01:d9:bd:de:36:20:00:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=4F7F9CBEDA6B3C345DFFF92862D5EA0949479300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:8f:11:b6:61:88:8d:7d:7d:2b:e5:04:98:
54:b2:97:b8:13:6f:68:8c:15:94:94:8b:e6:52:da:
b0:10:09:af:8a:ac:8f:6a:2e:54:1b:92:3a:f2:56:
37:81:60:76:18:f6:08:55:ae:52:b4:49:fe:09:20:
d2:77:3c:9c:72:99:38:35:97:b7:8a:b4:a7:77:50:
b2:0b:ce:22:82:14:51:3b:9f:e5:f5:24:ab:70:c1:
a3:6e:0d:b8:e9:53:ee:a2:77:0a:b7:da:e5:aa:cd:
84:e5:b0:ae:1d:4b:01:ca:96:cb:03:9c:79:43:81:
0a:5e:42:ec:71:de:e7:c0:fb:58:b2:fe:b2:b4:6c:
58:7c:ba:5f:cc:08:60:25:49:8b:0a:77:43:ac:0a:
fd:b7:51:bc:1e:39:a9:ef:7c:fb:1c:be:d6:51:14:
42:d9:23:42:3c:3d:ab:c9:18:f7:e6:cf:07:40:a7:
33:ec:d1:cf:59:b8:e9:b7:a2:b9:9a:c6:1b:5b:1f:
24:75:f4:0d:43:fd:94:7a:3d:fd:4a:8b:5c:96:4f:
67:9e:9a:a8:d5:67:9f:6f:ab:2c:bd:35:06:cc:73:
03:d1:08:26:bb:31:07:09:c5:fc:1a:08:fb:c8:a8:
d6:ca:7e:f9:22:77:05:52:75:85:25:ba:79:65:d3:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:9C:BE:DA:6B:3C:34:5D:FF:F9:28:62:D5:EA:09:49:47:93:00
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150f::/48
2a06:a005:1c79::/48
Signature Algorithm: sha256WithRSAEncryption
9a:14:71:49:4c:69:57:41:4a:1a:f8:c6:e7:84:3c:67:8d:b6:
ac:04:dd:56:a4:ef:7b:4d:ff:71:1e:66:5c:42:ac:db:46:f4:
54:2f:e4:b2:7e:ad:ca:94:06:00:ff:74:e6:cc:22:fa:94:93:
39:23:83:a9:51:60:c6:2a:6f:5d:48:9d:09:43:39:f1:d2:6b:
d4:cf:10:83:6b:4f:5e:61:b0:ff:26:d0:69:b4:f1:b9:ec:45:
7c:e3:df:8d:b3:b0:bb:da:f4:32:e5:87:98:7e:b8:70:32:8b:
e1:ee:c3:d8:35:b2:b3:db:6f:28:1d:15:e4:b0:8d:59:28:33:
67:c5:9b:05:f8:47:3e:ad:2c:8d:fc:03:ca:e6:86:00:9e:26:
cd:06:77:03:81:1b:cf:57:bb:ec:bc:fc:36:a9:ae:0a:0f:54:
ad:49:43:c1:dd:d7:7b:bd:f7:5c:e3:43:f5:19:3c:5c:65:b2:
3e:af:cb:d0:51:aa:35:40:fc:98:1e:7c:66:e9:ec:89:4a:79:
d9:13:d3:f3:3b:23:16:07:e0:be:f8:f7:85:d9:59:1c:f6:17:
1a:ec:88:e0:d4:6d:75:20:8a:10:28:6b:1b:56:43:76:11:f1:
a4:9a:ef:46:aa:00:65:ff:68:4c:79:4f:7b:53:a4:3b:ce:98:
5f:d7:18:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:26 2025 by rpki-client