Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201865.roa
File: AS201865.roa (raw, json)
Hash identifier: VU4b68MAOGk51r+HeFOrgP8AmREOyTM4fdGdZ92DHlg=
Subject key identifier: 3C:5B:0F:9F:7A:7D:9B:16:DD:55:88:C6:D7:59:5A:15:1D:32:C9:B7
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 117C41DB22CFCEF23ABFAE5EE13F236DD2EB29BC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201865.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 201865
IP address blocks: 2a06:a005:5a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:7c:41:db:22:cf:ce:f2:3a:bf:ae:5e:e1:3f:23:6d:d2:eb:29:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=3C5B0F9F7A7D9B16DD5588C6D7595A151D32C9B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:93:3b:56:e9:c7:00:1f:16:0f:ff:60:7d:
31:f2:57:5a:23:5b:f2:2c:2e:dd:32:e7:98:a7:17:
23:7d:32:cd:9d:ad:0a:fb:77:7f:56:e9:79:62:3b:
f1:25:58:bb:9a:a2:f2:74:d1:4c:98:e9:7d:db:03:
e0:e1:05:1e:bc:c8:a0:82:8e:57:9e:a7:a2:5c:38:
6b:45:5a:35:3a:c2:67:bc:db:55:95:f7:6d:08:7b:
eb:7c:eb:e9:9c:1e:ab:d3:73:b6:08:a3:2e:7d:95:
6f:1b:48:09:f1:76:1e:66:5c:ee:59:7f:aa:7d:b4:
7d:7a:e5:75:c7:57:b0:c4:b8:05:18:23:8b:3a:88:
ec:f9:21:81:b3:5c:26:55:37:9e:33:4e:6b:5f:e3:
c8:ea:33:4a:04:8f:fd:54:6b:70:cd:ba:70:6e:be:
dd:9f:ba:3f:b0:b0:7c:63:d9:93:4d:1e:d2:84:84:
21:18:c3:df:a7:61:43:03:19:fd:6e:3f:7d:9b:3c:
f3:eb:ea:1d:79:cc:cd:b1:bd:67:6a:cd:b0:73:d3:
12:fe:49:d5:45:b4:cc:1e:74:b3:52:4d:cb:a8:3b:
56:4d:68:92:46:67:03:08:13:0a:99:ef:20:05:e7:
ca:8a:a2:3f:cf:1a:01:b5:9f:77:38:69:31:80:18:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5B:0F:9F:7A:7D:9B:16:DD:55:88:C6:D7:59:5A:15:1D:32:C9:B7
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a6::/48
Signature Algorithm: sha256WithRSAEncryption
0c:23:47:79:48:cd:61:54:37:23:c8:86:84:82:94:c5:8a:33:
67:b6:6c:d7:6f:16:ea:96:b2:58:c8:07:b2:d3:22:00:ac:8d:
0d:15:25:3a:4a:16:5d:f1:1d:25:27:5d:59:66:05:26:a2:4f:
20:4a:3d:b8:4f:29:36:d4:a9:d8:b7:01:e8:81:8d:c8:bf:0a:
c2:44:74:8a:15:af:e1:8d:14:31:06:f2:6e:a7:54:cb:ea:47:
37:0f:4d:9e:c8:1a:1b:79:3d:99:5a:50:f0:0f:7c:4e:a2:71:
b1:02:81:4d:ec:80:4a:d3:22:05:20:9f:f9:77:6c:5e:25:49:
7e:15:79:da:28:73:ac:5b:1d:36:06:1a:01:ff:15:3d:5f:e7:
88:18:d0:9f:9a:16:a7:ed:3b:85:4a:4d:76:f3:f3:28:66:c9:
91:7a:25:65:32:45:da:4a:48:76:8a:2d:f3:84:df:92:91:8e:
18:cf:37:e3:0a:81:cf:6c:a7:8b:42:bf:f8:62:dd:02:53:26:
92:ab:8e:35:43:5a:c9:ad:5c:61:5c:67:e6:43:77:ea:9c:e4:
7b:e4:d1:1e:49:ec:c8:96:a3:d7:3c:ec:bc:eb:c2:3c:2f:33:
81:d0:68:cf:c0:6e:74:c1:9f:07:3d:d2:3c:23:ef:09:05:82:
13:7e:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:23 2025 by rpki-client