Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202197.roa
File: AS202197.roa (raw, json)
Hash identifier: gsmJWZWtmtH7VPyCkljYnRjwpgdz666Bucp03UzK5qw=
Subject key identifier: AE:ED:E5:3A:4F:C3:DA:AF:32:CE:F1:71:67:E4:13:05:E7:04:EB:8C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6FFE869EACEE2F881A6F11012BE9F01974AED652
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202197.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 202197
IP address blocks: 2a06:a005:1fc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fe:86:9e:ac:ee:2f:88:1a:6f:11:01:2b:e9:f0:19:74:ae:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=AEEDE53A4FC3DAAF32CEF17167E41305E704EB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:5e:08:1e:5b:ca:4e:71:82:3c:27:78:61:
8d:ae:2e:bb:d9:16:8c:b5:ed:06:8a:87:fc:3d:7d:
fd:c2:d5:eb:13:c4:3d:f4:e1:81:5a:8c:75:11:63:
b9:30:24:1a:ef:bf:c7:c6:1d:4a:f1:43:98:7d:1f:
82:ea:e3:4e:f3:b2:c1:53:9a:96:9a:f9:99:7b:78:
d7:47:7e:c9:01:03:1e:0c:5d:d1:9c:3e:ec:e7:e0:
f2:82:4c:07:1e:2b:0e:28:be:9e:fa:8f:89:25:38:
cb:6c:ea:10:3a:be:22:ec:25:2c:98:cf:ab:7d:6c:
3c:77:ab:c3:e5:fb:23:48:62:40:68:9e:ca:a4:02:
0c:68:86:29:c4:b9:f8:14:e7:03:c3:ac:98:08:49:
72:59:73:bb:af:04:ce:45:22:62:df:1c:25:c8:56:
86:74:ae:1f:e5:e0:55:68:cd:64:b6:b6:a7:68:a3:
f4:5c:90:fb:8f:95:59:6e:d1:22:d5:9e:eb:e1:b0:
6a:ab:e7:af:bf:9c:e2:92:2c:64:6e:59:0d:a8:60:
23:81:e0:23:33:ce:7c:ad:f7:84:bc:3d:3e:0f:18:
f1:ba:45:85:1d:55:d9:85:dd:d5:9c:31:02:b2:71:
79:1d:55:d7:f2:9a:5f:8c:e1:5c:c6:ca:b2:ef:09:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:E5:3A:4F:C3:DA:AF:32:CE:F1:71:67:E4:13:05:E7:04:EB:8C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202197.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1fc0::/44
Signature Algorithm: sha256WithRSAEncryption
bd:56:12:36:12:8b:fa:9c:47:da:82:9d:c5:b1:e6:40:b4:45:
ea:ab:35:a2:f9:e0:a9:08:01:f0:cb:2c:03:86:e8:c5:fa:34:
5d:cc:d7:bc:b4:7b:6f:e1:b8:97:68:df:7a:f4:b3:12:76:a4:
74:f5:0f:e4:b2:1c:53:f0:e4:80:37:e7:e8:20:34:d7:a5:51:
7e:9d:67:8d:5a:8d:43:27:cb:0c:e2:90:08:41:aa:ef:e5:b5:
5d:fb:88:b5:1b:bd:1e:55:9a:66:47:fb:2a:4b:03:d6:74:9d:
28:98:70:68:c2:cf:de:6d:4d:f9:81:92:c6:d5:6a:af:2d:6d:
c7:2d:d5:68:b5:18:26:46:23:55:01:07:25:65:6f:67:f0:15:
42:8e:6b:30:58:96:b9:29:34:50:bf:19:d3:d0:aa:95:5d:8b:
ca:e8:57:0c:d3:3e:44:a1:00:bb:26:85:9e:50:a5:28:c9:a2:
b4:8f:95:e4:6d:41:03:25:d8:3b:00:5a:82:8f:a3:c4:11:d9:
6e:47:5f:de:f6:b9:19:33:f2:78:66:1c:83:29:1e:0e:c3:8c:
72:69:a4:60:23:fd:cf:7b:6d:02:ee:27:72:fd:d9:78:8d:61:
01:1d:df:32:57:e5:c1:b7:64:7c:b3:ef:f1:cc:78:98:ce:9c:
e6:8e:86:63
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUb/6GnqzuL4gabxEBK+nwGXSu1lIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDlaFw0yMzEyMjAxNjU2NDlaMDMxMTAvBgNV
BAMTKEFFRURFNTNBNEZDM0RBQUYzMkNFRjE3MTY3RTQxMzA1RTcwNEVCOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73l4IHlvKTnGCPCd4YY2uLrvZ
Foy17QaKh/w9ff3C1esTxD304YFajHURY7kwJBrvv8fGHUrxQ5h9H4Lq407zssFT
mpaa+Zl7eNdHfskBAx4MXdGcPuzn4PKCTAceKw4ovp76j4klOMts6hA6viLsJSyY
z6t9bDx3q8Pl+yNIYkBonsqkAgxohinEufgU5wPDrJgISXJZc7uvBM5FImLfHCXI
VoZ0rh/l4FVozWS2tqdoo/RckPuPlVlu0SLVnuvhsGqr56+/nOKSLGRuWQ2oYCOB
4CMzznyt94S8PT4PGPG6RYUdVdmF3dWcMQKycXkdVdfyml+M4VzGyrLvCdXZAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUru3lOk/D2q8yzvFxZ+QTBecE64wwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAy
MTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBR/AMA0GCSqGSIb3DQEBCwUAA4IBAQC9VhI2Eov6
nEfagp3FseZAtEXqqzWi+eCpCAHwyywDhujF+jRdzNe8tHtv4biXaN969LMSdqR0
9Q/kshxT8OSAN+foIDTXpVF+nWeNWo1DJ8sM4pAIQarv5bVd+4i1G70eVZpmR/sq
SwPWdJ0omHBows/ebU35gZLG1WqvLW3HLdVotRgmRiNVAQclZW9n8BVCjmswWJa5
KTRQvxnT0KqVXYvK6FcM0z5EoQC7JoWeUKUoyaK0j5XkbUEDJdg7AFqCj6PEEdlu
R1/e9rkZM/J4ZhyDKR4Ow4xyaaRgI/3Pe20C7idy/dl4jWEBHd8yV+XBt2R8s+/x
zHiYzpzmjoZj
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:46 2025 by rpki-client