Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201760.roa
File: AS201760.roa (raw, json)
Hash identifier: foaI8e18yTV2SP6yIaWEsfa7WFATEQbGlsUgtR8UQJo=
Subject key identifier: 25:CE:32:D5:5A:47:A6:2C:46:E6:3A:B9:1A:CA:2B:A2:3C:94:0C:AB
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0FA772C885B2766DBDC56B5AE2842DD3325698F1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201760.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 201760
IP address blocks: 2a06:a005:1080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a7:72:c8:85:b2:76:6d:bd:c5:6b:5a:e2:84:2d:d3:32:56:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=25CE32D55A47A62C46E63AB91ACA2BA23C940CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:56:07:e2:a8:f7:f6:4f:f4:ea:17:c2:df:
fb:90:32:97:1f:39:69:ff:53:8c:0b:91:d5:66:1c:
dd:35:20:b7:00:57:3a:7f:41:68:20:7e:9e:36:11:
2b:db:28:ab:45:32:77:0b:74:b8:79:ef:ea:90:2b:
73:5c:0a:30:e9:37:6d:dc:d8:4e:ce:77:1e:28:1b:
39:54:55:fb:9b:09:ef:63:d3:78:bb:6a:4f:44:08:
40:16:15:78:2a:6d:77:c2:e2:e9:c2:ef:58:40:ab:
b0:59:ed:11:6a:8a:88:52:30:70:46:95:b6:97:33:
91:f4:9d:53:ba:c0:6d:d6:98:bd:75:2e:50:92:28:
53:c2:8f:b8:67:f4:69:13:b9:2d:c7:a0:8e:61:b1:
19:0f:2f:ec:83:ff:d1:76:77:a4:ed:dc:a1:89:54:
90:e5:66:9d:36:41:b6:7c:63:49:43:11:80:44:32:
df:4d:06:7d:56:cf:5d:d4:5e:39:a8:b8:70:81:51:
6e:4d:be:6d:f7:8b:92:a4:be:5b:cf:cd:a0:f6:80:
e3:61:08:31:5d:7b:59:4d:0e:38:d5:b5:a1:25:51:
aa:7f:24:7b:c4:c3:50:72:85:de:08:c8:88:e6:e1:
99:8c:cc:e2:b5:d8:44:98:6f:f1:ee:27:21:2b:93:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:32:D5:5A:47:A6:2C:46:E6:3A:B9:1A:CA:2B:A2:3C:94:0C:AB
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1080::/48
Signature Algorithm: sha256WithRSAEncryption
40:11:1d:59:f9:e5:bb:70:cf:a3:7f:0a:d5:31:a7:a3:a3:bf:
79:e7:2a:11:f5:07:e7:c5:75:8d:20:c9:9b:58:bb:f5:9a:b7:
54:ba:85:7f:9f:8a:eb:35:b0:6b:04:00:57:bf:4b:88:8a:0a:
e4:ee:e3:8c:b6:5d:a9:ad:04:3c:c7:ee:71:9a:26:47:ee:c1:
a3:22:00:30:3c:35:10:2f:1f:ab:92:4b:da:23:5c:ff:90:67:
7a:b3:59:ae:a1:07:a8:6c:12:40:2c:18:ea:ce:fe:4b:6c:90:
83:70:87:0d:38:ac:e0:ab:20:d8:19:01:d0:46:aa:fa:c9:a0:
9e:da:18:27:31:8c:5d:35:7f:67:17:d6:f6:3d:0e:f8:d6:dd:
11:1b:da:ae:da:7b:b3:dc:1c:9d:c4:71:1c:b9:45:90:25:1a:
1f:be:dc:ce:38:ef:9c:83:c4:da:4a:2f:94:dc:77:75:63:3b:
7e:ec:30:00:85:1e:19:e6:d5:fe:5f:29:cf:db:1d:42:f3:c2:
93:f7:fb:fc:a6:bc:99:e6:a8:19:be:ed:57:e3:fe:16:59:5d:
51:9d:5a:be:8f:ae:07:db:d2:c0:56:cb:14:4b:dc:cb:61:74:
83:81:0d:07:01:c7:26:ff:bc:7a:ad:f6:3c:b9:e6:b2:ae:a3:
c2:8a:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:23 2025 by rpki-client