Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201733.roa
File: AS201733.roa (raw, json)
Hash identifier: /y09RTSkcTi5kFV3CuPT2XD1ql8V+RfraqGUqupy07I=
Subject key identifier: E6:0B:4B:80:2E:ED:5E:42:B5:75:08:96:9D:BC:CA:3F:00:F7:6B:24
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 04808296E4B24D0E4B52BDAAEECA16ED21B5B916
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201733.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 201733
IP address blocks: 2a06:a005:2360::/44 maxlen: 48
2a06:a005:23c0::/44 maxlen: 48
2a06:a005:2460::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:80:82:96:e4:b2:4d:0e:4b:52:bd:aa:ee:ca:16:ed:21:b5:b9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=E60B4B802EED5E42B57508969DBCCA3F00F76B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:de:79:21:fe:b9:91:4d:45:98:cf:2d:09:
f5:15:5d:ed:95:41:d9:94:69:89:ce:e2:70:b8:9a:
20:4b:34:fc:3f:0a:52:93:c0:6a:26:c5:3b:1c:9b:
c0:7c:10:ea:1d:9b:c5:6b:2a:65:52:ad:a4:3f:22:
c0:2f:e4:f4:a6:04:b9:af:ef:b6:02:5d:fc:9a:c7:
3d:ab:f7:73:c1:5a:3c:92:84:77:ab:3f:28:a6:8d:
d6:03:0b:a9:1a:0a:df:a6:13:2f:85:98:f8:83:31:
77:74:24:49:2a:dd:1a:2c:fa:bb:10:4d:3b:0f:77:
9e:7c:76:0f:d1:e7:54:81:22:3e:a4:42:42:71:f8:
39:ef:2e:80:b3:b1:cf:9a:c3:35:b5:c6:ae:1c:85:
f6:91:2c:02:7e:40:82:4c:d5:fb:04:d6:79:ee:e3:
5c:5f:60:29:7d:bc:a8:55:0f:0e:fb:18:f0:14:e4:
ab:76:09:1c:ed:fa:f0:72:ed:a6:0d:19:f4:6f:62:
b3:22:ef:fa:e1:7d:fa:ff:29:c6:88:30:ca:26:46:
f4:ca:4c:51:c1:3e:bd:b7:1d:26:17:3d:d5:58:81:
41:f8:5f:f2:d3:dd:bf:8e:15:6e:c4:e5:94:d2:b1:
2e:0c:73:34:cb:34:e4:c4:f7:de:90:9e:fa:44:4d:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:4B:80:2E:ED:5E:42:B5:75:08:96:9D:BC:CA:3F:00:F7:6B:24
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2360::/44
2a06:a005:23c0::/44
2a06:a005:2460::/44
Signature Algorithm: sha256WithRSAEncryption
a8:50:86:a1:a7:e2:2c:30:5a:9a:65:3d:ce:4d:f3:c2:54:20:
f2:ff:e0:87:f9:f4:bd:8f:4c:b9:62:e2:a3:de:87:fb:b9:9f:
44:ee:b8:b9:82:21:4e:b1:fe:b5:45:b9:f4:74:27:51:8f:44:
42:a7:21:1c:e1:8d:b5:db:18:1c:2b:f2:ee:c7:f6:7c:5b:42:
9a:60:b4:04:47:f1:8a:6f:41:e6:82:fb:68:b7:fa:1c:8a:d1:
79:6a:c2:33:76:b4:b4:bb:f7:e1:08:22:9a:e6:46:3b:d2:d7:
06:e7:3f:cb:76:79:8d:23:20:cc:52:3b:8e:ea:46:f5:fe:e0:
3c:2d:8c:70:98:4b:23:bb:1d:08:b2:73:55:17:3e:7d:f1:fe:
83:e7:1b:f7:18:ce:1f:0d:5c:13:65:f7:6f:bb:06:55:20:94:
fb:0b:d1:cf:a7:5a:67:d1:67:5d:63:d3:c7:83:05:a5:04:e5:
fa:aa:62:ee:9a:e5:fd:2c:d0:a2:7f:bc:87:18:ef:4f:34:45:
59:fe:ac:90:6a:8b:94:10:ec:b8:bc:e7:2e:35:e5:08:a8:c8:
fe:d1:ca:85:93:d4:4a:0c:11:a5:30:ea:11:ff:1b:e2:a8:fc:
30:49:95:43:52:7e:8b:ec:a3:44:ec:9d:50:50:9b:b8:34:b2:
60:58:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:44 2025 by rpki-client