Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201938.roa
File: AS201938.roa (raw, json)
Hash identifier: 5UzdGW6XUTPzth4/CbCAooZpjT7T06/XF2ldf5sC7YE=
Subject key identifier: B0:B2:4C:6A:80:DD:73:F2:34:DF:9D:7C:5C:93:AF:FE:31:F7:B2:AE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 68C1AFAE1D3193F4D4ECC731CA74D0A5FF6BB775
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201938.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 201938
IP address blocks: 2a06:a005:2110::/44 maxlen: 48
2a06:a005:2120::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c1:af:ae:1d:31:93:f4:d4:ec:c7:31:ca:74:d0:a5:ff:6b:b7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=B0B24C6A80DD73F234DF9D7C5C93AFFE31F7B2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:0e:10:01:27:11:a1:7a:a9:10:3c:c8:28:
b3:39:81:94:a1:2b:7f:c1:50:2a:98:44:6b:1d:57:
94:3b:53:97:6a:91:82:c4:0a:02:a4:c6:6c:ad:2d:
d7:9e:69:65:79:ec:84:01:0a:6d:dc:ac:09:44:36:
99:cf:7d:10:d6:b0:5e:7c:da:81:b4:49:e8:d3:f4:
09:62:09:42:ec:27:8c:db:4a:02:6c:13:61:fb:d5:
c0:fc:ec:59:4b:d9:70:e2:0a:51:59:8e:43:3b:dd:
54:2d:a2:e7:67:24:0f:9b:c4:f1:fb:b7:03:0e:8f:
0b:02:77:fd:78:e9:73:70:91:c2:7d:81:d6:81:bd:
8c:74:09:6d:7c:31:a5:1b:23:e5:fb:bf:26:ec:04:
1e:9e:7a:ec:b9:9b:c2:f5:8e:be:94:89:aa:2c:9d:
67:a4:3f:26:66:fa:35:d6:96:d1:0d:7c:49:ef:57:
94:de:5a:de:8a:06:93:1f:26:db:b3:ca:6c:17:eb:
73:e5:7f:ea:dc:0b:1d:81:95:13:b0:9a:2b:fc:6f:
fd:4e:fc:87:b4:d2:54:61:13:ca:14:1f:12:26:14:
00:9b:df:5a:c9:c6:4e:df:21:31:c0:8b:29:58:2f:
da:ff:88:d9:40:44:63:ac:a2:67:cb:73:e4:e3:4e:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:4C:6A:80:DD:73:F2:34:DF:9D:7C:5C:93:AF:FE:31:F7:B2:AE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2110::-2a06:a005:212f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:02:b8:2b:d3:39:61:62:8b:f9:58:5d:2b:94:2c:b1:02:22:
20:4e:14:19:3d:c5:23:e1:a0:f0:29:1d:8b:8b:bb:8e:70:c9:
cd:35:df:ae:cf:e0:b1:09:b1:d7:5b:2d:fb:7d:4c:80:5b:e7:
be:df:a5:b9:0d:62:06:8a:a4:d7:2a:e6:f9:aa:77:b9:da:bd:
3e:e3:56:c6:a4:99:a7:44:65:08:ef:85:10:ff:c2:48:7f:bf:
92:d8:3b:57:27:22:54:ad:91:8c:9b:38:60:bc:71:71:a0:1f:
90:2a:14:56:e4:16:1e:b6:f6:c9:7c:88:b4:b2:99:9a:9d:46:
b6:ae:cc:93:4e:07:e1:c5:d1:d9:a9:63:20:49:05:5f:f9:37:
4e:f7:83:c6:6f:52:d1:fd:0f:1c:22:85:4d:30:f6:c4:a6:99:
03:a7:06:c9:70:d6:d3:7c:b9:73:b5:65:fd:b9:fe:ad:f9:a8:
32:2d:70:e9:08:ea:9d:5c:e2:4a:5a:e4:1c:de:02:f1:98:2c:
1c:f0:bd:76:16:01:5b:f2:bc:36:b5:4b:83:4f:07:f3:e2:69:
67:94:05:96:9a:08:9e:77:46:01:0b:dc:59:94:17:d3:a2:a8:
e1:4c:d2:6b:7d:4d:11:3c:9b:8d:6e:8f:8a:e6:28:af:8a:b4:
73:b9:48:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:17 2025 by rpki-client