Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201818.roa
File: AS201818.roa (raw, json)
Hash identifier: CEqGL5/Vl0jFHpl9iODP9AG91Tyv3jeDsD8jB4DgCTQ=
Subject key identifier: 37:0D:C5:EF:23:2E:21:D0:AC:4B:E2:EC:EC:64:CE:71:6E:24:70:9A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 473967F7D5A2586F9D67DC9B8F3AB1CD2AFBA2C8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201818.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 201818
IP address blocks: 2a06:a005:2010::/44 maxlen: 48
2a06:a005:20f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:39:67:f7:d5:a2:58:6f:9d:67:dc:9b:8f:3a:b1:cd:2a:fb:a2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=370DC5EF232E21D0AC4BE2ECEC64CE716E24709A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:80:b3:e8:6a:e9:7c:db:cd:b9:a0:5e:f0:
71:f1:05:f0:00:d2:03:e7:bb:74:74:48:ff:01:6b:
53:3e:37:47:70:95:89:d7:93:e0:94:08:cb:15:3f:
dc:ad:59:f9:fa:58:df:06:d9:96:dd:60:fc:46:34:
2c:71:6d:f2:ee:ad:39:8e:bd:7e:d5:af:50:64:4c:
8b:a6:7c:78:40:f5:e5:71:4f:85:6b:74:1e:55:cb:
08:99:4a:aa:ac:50:a9:89:41:8c:6a:19:b6:96:c0:
8f:0d:f4:51:53:57:ec:73:43:52:f6:aa:ca:88:86:
bb:d8:ae:8e:1b:eb:a3:d2:94:63:fc:85:80:4e:4e:
b6:08:f1:c6:59:f1:6e:be:2d:ca:bc:d3:9f:6d:80:
b6:30:2c:01:0d:22:ea:de:b5:b8:af:37:df:e4:ce:
b1:4c:6a:55:eb:c1:fc:93:07:77:a2:71:91:ca:bd:
1e:63:65:6f:a7:f9:3d:81:12:e0:19:88:76:e5:b3:
bb:94:ce:ba:08:47:49:57:d1:2b:03:58:7c:fd:9c:
4f:a1:7f:8a:2b:c3:d4:f5:f8:c9:55:53:15:f8:41:
33:17:4d:6d:e2:4a:29:77:3e:0e:9b:f2:cf:0c:5a:
56:4f:66:49:3e:4b:e0:d6:89:a1:3e:6a:67:32:a3:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0D:C5:EF:23:2E:21:D0:AC:4B:E2:EC:EC:64:CE:71:6E:24:70:9A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2010::/44
2a06:a005:20f0::/44
Signature Algorithm: sha256WithRSAEncryption
e3:08:d4:12:82:d1:2c:7d:f2:11:4a:28:69:d0:52:26:45:8f:
51:65:f7:30:c3:bd:a3:b1:97:d9:d9:ad:5f:3d:21:15:9f:08:
99:a3:fd:71:fd:ad:5f:1c:8a:1d:8d:91:89:bb:6f:e3:1d:fa:
a3:06:74:21:80:8d:c2:40:f9:8a:c0:d8:40:f6:fc:8a:7f:86:
8a:23:e8:b5:43:7d:da:34:0d:1f:c7:c9:d0:d3:2d:6e:6e:2a:
c3:4b:a6:86:4a:1f:54:22:bb:56:77:b9:12:f9:a4:c7:71:db:
b8:62:69:0c:29:3a:44:1d:dd:87:fa:45:e2:aa:20:46:a4:8b:
97:5e:28:84:93:88:62:e3:ec:50:77:75:90:9b:03:45:9c:49:
b2:0b:54:cf:07:63:29:40:74:1a:df:f8:3c:3e:51:0e:51:6d:
9e:9c:58:9d:a9:bc:63:f7:f4:90:82:ba:f5:55:29:05:37:8a:
47:99:f7:04:a4:17:d7:00:f8:cc:07:72:94:92:3a:bd:a8:e3:
0f:25:36:4a:89:28:2e:4c:7e:fd:9e:cd:81:24:4d:b2:57:26:
a7:6f:33:52:00:d8:58:06:c3:58:6d:6c:40:91:39:6f:7b:17:
dc:e3:a6:3c:b6:2e:ca:43:59:40:6e:68:5b:2f:42:86:f1:de:
25:5d:54:fe
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIURzln99WiWG+dZ9ybjzqxzSr7osgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDRaFw0yMzEyMjAxNjU2NDRaMDMxMTAvBgNV
BAMTKDM3MERDNUVGMjMyRTIxRDBBQzRCRTJFQ0VDNjRDRTcxNkUyNDcwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWo4Cz6GrpfNvNuaBe8HHxBfAA
0gPnu3R0SP8Ba1M+N0dwlYnXk+CUCMsVP9ytWfn6WN8G2ZbdYPxGNCxxbfLurTmO
vX7Vr1BkTIumfHhA9eVxT4VrdB5VywiZSqqsUKmJQYxqGbaWwI8N9FFTV+xzQ1L2
qsqIhrvYro4b66PSlGP8hYBOTrYI8cZZ8W6+Lcq8059tgLYwLAENIuretbivN9/k
zrFMalXrwfyTB3eicZHKvR5jZW+n+T2BEuAZiHbls7uUzroIR0lX0SsDWHz9nE+h
f4orw9T1+MlVUxX4QTMXTW3iSil3Pg6b8s8MWlZPZkk+S+DWiaE+amcyo5prAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUNw3F7yMuIdCsS+Ls7GTOcW4kcJowHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAx
ODE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcEKgagBSAQAwcEKgagBSDwMA0GCSqGSIb3DQEBCwUAA4IB
AQDjCNQSgtEsffIRSihp0FImRY9RZfcww72jsZfZ2a1fPSEVnwiZo/1x/a1fHIod
jZGJu2/jHfqjBnQhgI3CQPmKwNhA9vyKf4aKI+i1Q33aNA0fx8nQ0y1ubirDS6aG
Sh9UIrtWd7kS+aTHcdu4YmkMKTpEHd2H+kXiqiBGpIuXXiiEk4hi4+xQd3WQmwNF
nEmyC1TPB2MpQHQa3/g8PlEOUW2enFidqbxj9/SQgrr1VSkFN4pHmfcEpBfXAPjM
B3KUkjq9qOMPJTZKiSguTH79ns2BJE2yVyanbzNSANhYBsNYbWxAkTlvexfc46Y8
ti7KQ1lAbmhbL0KG8d4lXVT+
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:49 2025 by rpki-client