Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202002.roa
File: AS202002.roa (raw, json)
Hash identifier: osV4rUES1c51d7uq/BCfQ1Xe6YOAz81IGOlGybj/Ql0=
Subject key identifier: F3:C2:17:AE:C7:C0:E5:50:DF:EA:B9:02:3E:92:35:83:F6:0E:A6:84
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2D4EA652C6FEEFF73E68068BA406DFF3DF29D716
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202002.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 202002
IP address blocks: 2a06:a005:2090::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4e:a6:52:c6:fe:ef:f7:3e:68:06:8b:a4:06:df:f3:df:29:d7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=F3C217AEC7C0E550DFEAB9023E923583F60EA684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:41:01:c4:94:38:c8:1f:d6:b9:42:f9:c7:
16:9d:d5:e4:16:96:47:89:e3:e4:bf:f2:73:1e:73:
ed:de:c6:35:bc:c8:29:23:3d:3c:98:20:29:b9:c8:
8b:24:8b:ce:f3:25:69:cb:cf:32:3c:59:25:f0:49:
6e:ed:78:39:a5:31:f5:f4:df:f5:79:78:cb:96:7f:
8b:4b:b4:1c:39:2d:4b:3e:22:2c:ae:31:03:9b:84:
74:39:7c:9c:d6:27:d9:b0:4a:73:9e:20:2e:00:01:
42:5c:93:95:b4:c1:3b:7d:bf:fc:1f:31:d0:07:a1:
c7:eb:94:ee:ae:e8:7e:14:46:de:7f:74:13:ee:7c:
ed:42:2a:78:d0:e3:7c:45:03:5c:df:61:0d:3b:40:
88:19:92:8b:3d:45:5f:14:d8:9f:4b:d2:84:0b:8d:
05:17:db:7d:cb:c0:55:d0:27:90:f1:de:76:0b:22:
5c:ac:cb:c8:c2:bb:b6:06:0e:86:b8:97:d8:4a:ac:
b0:1a:12:c5:56:78:b4:35:ce:88:1f:5f:12:a0:20:
12:6d:a8:cd:13:8c:b5:f8:dc:2a:81:72:02:40:1e:
d7:16:d4:4d:a9:d0:25:dd:53:a1:83:6e:86:6f:64:
64:1e:c7:89:14:f0:e7:72:41:3d:e7:05:7c:36:8b:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:17:AE:C7:C0:E5:50:DF:EA:B9:02:3E:92:35:83:F6:0E:A6:84
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2090::/44
Signature Algorithm: sha256WithRSAEncryption
48:1d:04:44:da:5e:1b:04:d6:73:08:e4:dd:f6:fd:c7:38:12:
9e:4f:57:22:77:80:6b:88:41:56:32:58:3e:2a:0d:4a:3b:d6:
9f:2a:f6:1b:16:bd:b7:b2:0a:bc:e0:6a:b7:dd:f8:ce:8c:32:
e7:72:05:02:20:81:a5:b5:35:b4:20:91:13:8a:b1:76:5b:d5:
c4:d1:9a:9c:d8:d2:38:81:5b:73:1c:73:b4:da:87:1c:df:10:
b2:eb:cc:4e:74:50:fa:58:7e:e7:18:b7:ca:d1:aa:c7:f4:29:
4b:ff:8e:f8:88:37:a2:a7:5a:6c:83:de:c1:cd:81:24:37:9a:
99:9a:23:67:16:58:e3:9e:ad:b5:2a:ab:58:8b:02:aa:f8:85:
53:fa:73:8a:e4:7b:57:ca:98:84:c4:45:f5:9c:d4:48:e0:f6:
c8:e7:5b:fe:e5:70:48:e7:6c:83:84:59:e2:84:67:d7:85:8f:
b0:0d:97:94:53:43:fa:82:08:d2:a0:0b:9b:63:b5:42:8e:d2:
4c:95:9b:e3:c2:5e:53:6d:75:d8:ee:93:b7:58:e8:f8:06:58:
cb:5d:c2:37:32:e1:7e:b8:4b:5e:51:2d:ae:ab:e1:e4:25:f4:
80:2e:3e:bd:3c:ba:05:2e:26:2c:16:90:92:c6:a0:93:0b:ff:
40:64:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:04 2025 by rpki-client