Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201517.roa
File: AS201517.roa (raw, json)
Hash identifier: QfGNd7uHy3bD8an4Izmh2kHRHCF6FLoV1QnfFzdVgKA=
Subject key identifier: 6E:FB:91:69:8E:AB:BC:A3:B7:5A:B7:8D:4C:BD:23:D3:35:37:C8:53
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6A9FAA7E3C9DCEA904D49D1E150444A543A4DE31
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201517.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 201517
IP address blocks: 2a06:a005:1550::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9f:aa:7e:3c:9d:ce:a9:04:d4:9d:1e:15:04:44:a5:43:a4:de:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=6EFB91698EABBCA3B75AB78D4CBD23D33537C853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:cf:46:e1:58:02:c4:74:7c:d1:29:dd:39:
35:c9:03:9e:9d:03:f8:36:2d:16:25:6c:63:97:6c:
ac:2c:ea:01:35:bd:85:65:44:22:47:e1:4d:3a:d0:
ad:43:70:3c:68:50:e4:a7:2f:46:c3:dc:ce:f9:f8:
94:48:9d:aa:9f:d8:2e:ac:da:5d:6e:e4:1b:e6:f5:
df:b4:1b:3e:e2:e3:0a:26:28:a9:01:85:50:77:f6:
49:96:d4:a0:8d:3a:39:c4:48:43:3a:e4:53:e8:86:
cc:f6:56:71:ce:2e:c9:94:7b:5d:a2:9d:00:03:eb:
e2:cb:8f:17:0b:4e:a9:c4:0f:15:fe:81:9c:aa:60:
b1:b8:97:bf:f6:58:b5:2c:c1:19:32:b8:68:fd:2e:
28:79:0f:1d:e1:f6:24:63:d2:ab:5b:87:f8:40:86:
17:f5:d6:28:b4:cc:b3:eb:e6:ca:1a:ea:0b:26:d6:
5d:e5:a1:d5:fe:84:71:58:74:34:37:fc:2f:24:06:
43:00:8f:f4:57:07:85:db:ac:4e:2c:d7:22:59:48:
b8:57:81:56:0f:51:f3:da:f0:f3:86:14:69:c9:0c:
ed:18:f2:5e:14:e7:70:46:ef:b0:7e:32:dc:8d:d5:
86:0f:62:ec:09:be:eb:f7:54:09:bc:6f:86:5c:8f:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:91:69:8E:AB:BC:A3:B7:5A:B7:8D:4C:BD:23:D3:35:37:C8:53
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1550::/44
Signature Algorithm: sha256WithRSAEncryption
96:8c:b0:14:fb:1d:d0:b9:47:c8:f5:1f:dd:c0:af:71:cb:ef:
d4:40:2a:e0:19:ca:30:3e:4f:de:36:be:84:92:ad:c8:e2:8e:
fc:10:ef:28:b9:dd:8c:22:52:07:57:28:23:66:ef:3d:2e:1b:
ae:dd:b1:ac:ae:8d:5e:c0:3f:be:f3:93:61:88:b3:3c:4b:55:
48:e0:6a:86:3e:3a:4f:fc:ec:79:4d:28:2b:85:66:a8:c8:49:
f3:af:0b:92:0e:c6:24:cb:4e:72:c0:5c:f8:a0:6d:57:62:a4:
fc:4a:aa:9f:2b:f4:da:20:15:99:26:45:08:ca:2e:8e:ab:d5:
c8:84:3d:cb:ae:b7:65:67:2f:15:6c:77:b3:73:5e:cd:d1:f8:
3b:77:8d:3d:3a:a1:ef:87:c7:27:15:ae:01:e8:e3:e3:d7:60:
09:22:5a:e4:bf:5c:33:1c:d9:ef:08:6d:fc:6d:24:c1:77:2e:
fe:86:77:b3:cd:2c:43:8a:2f:05:23:5e:bd:e7:7d:b8:fe:a8:
7c:30:60:9f:09:7b:49:fd:c0:65:2b:7f:53:8a:64:52:50:80:
45:ff:89:e9:d3:f4:19:21:c7:17:12:20:ba:88:0d:1d:61:0c:
43:e2:12:69:fd:50:dd:12:fd:b6:9f:88:6f:b5:38:af:ab:13:
15:0d:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:55 2025 by rpki-client