Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201763.roa
File: AS201763.roa (raw, json)
Hash identifier: gCZmdW1OTSxnVqctd3eU9xpzxvJKpVaJ7Ew2lMrr2iU=
Subject key identifier: 1B:95:9A:65:05:54:44:3D:FF:5A:5E:3C:B2:0A:38:DA:9C:C6:02:95
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0C69239867F79D53DD9075F46D0FF99FA392AF17
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201763.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 201763
IP address blocks: 2a06:a005:27f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:69:23:98:67:f7:9d:53:dd:90:75:f4:6d:0f:f9:9f:a3:92:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=1B959A650554443DFF5A5E3CB20A38DA9CC60295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:42:29:aa:48:f9:bc:f6:0c:a6:34:5c:35:
e7:7b:20:5a:b6:27:d4:08:01:09:e5:05:e3:89:f4:
54:9d:33:10:45:4e:a1:2f:47:d9:7e:fa:07:02:ab:
01:15:de:cc:2d:04:58:01:89:cc:49:b2:4e:26:4b:
59:00:60:57:84:81:cd:d7:17:c1:d9:08:49:d1:b5:
5e:8b:09:57:4f:2f:e8:50:a3:27:56:83:ab:7d:f3:
2d:0b:45:6b:93:17:8d:73:16:2f:ca:62:a0:9b:93:
9d:48:3a:9a:c1:39:8b:3d:16:8e:8f:85:94:b3:11:
f8:02:4a:81:b6:fe:24:53:5e:72:f7:ce:f7:37:a5:
bc:62:ea:38:0c:03:5a:3e:03:02:f1:f2:7d:5c:1a:
cf:43:aa:c7:e8:3b:4f:80:84:bb:b5:4f:7b:f9:13:
d9:f0:7f:99:25:cd:c0:67:41:f9:c1:eb:9e:28:56:
21:b8:7c:a2:f6:d1:34:a9:ce:ae:43:fe:88:75:b2:
ac:57:24:63:5e:3e:55:7b:fa:f6:5b:24:9a:e3:6d:
68:43:36:e8:67:a1:c0:3e:25:c1:a8:d3:e6:94:e8:
2e:70:32:f0:13:58:e1:1c:65:b1:e7:23:f0:9e:b0:
85:10:1c:54:29:18:b4:df:d6:63:d4:1d:b4:47:e9:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:9A:65:05:54:44:3D:FF:5A:5E:3C:B2:0A:38:DA:9C:C6:02:95
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201763.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:27f0::/44
Signature Algorithm: sha256WithRSAEncryption
95:b4:8f:55:3d:51:ee:e1:a1:9c:3e:a2:56:b6:c9:fd:5e:a8:
39:f3:fd:34:18:f0:b8:d0:1f:ab:56:d7:24:db:35:ba:58:a4:
e7:93:77:64:6d:7f:c1:f1:8b:6c:46:2c:f8:e9:0e:75:90:f9:
88:a1:96:41:ad:b9:4e:1d:a5:40:92:40:80:94:e2:e1:a2:c8:
dd:da:0a:a1:33:2d:6e:28:c2:39:99:57:65:a5:33:fb:c8:29:
d0:dc:1a:2b:77:bf:4d:61:82:9b:ee:d4:8c:ca:75:dd:03:c1:
e7:f7:55:0f:22:ea:cd:15:d4:8a:b1:0b:a4:67:43:e6:ff:3d:
7f:da:a3:4e:29:26:27:43:f0:86:c4:aa:5c:8b:12:5d:65:de:
c0:44:88:04:63:80:3b:20:d6:ae:db:23:2b:33:bb:92:9b:60:
8b:42:df:79:09:78:5e:19:9d:ae:db:fc:63:4c:87:f3:e6:5a:
49:34:aa:71:ee:28:4e:72:55:95:c8:0b:17:6d:18:a0:37:96:
9d:21:c9:71:af:1d:31:a6:90:63:37:7d:1f:26:79:22:7f:ab:
55:b6:f2:40:4e:c9:33:4b:62:bc:9f:c4:55:cb:21:ce:43:91:
27:5f:e8:ce:07:5e:a5:1b:f2:f8:24:88:d6:4d:11:d9:e3:1c:
b2:24:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:37 2025 by rpki-client