Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202218.roa
File: AS202218.roa (raw, json)
Hash identifier: vjtXvhbAZzLb+rRZlW1eDNRyP5PsNTH9chdTIkUqZUk=
Subject key identifier: 0A:E5:44:00:8B:62:1E:79:B9:04:F3:AC:55:78:32:73:2F:10:00:56
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 660608F62E8A91C1273AB746E0B54260258187CD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202218.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 202218
IP address blocks: 2a06:a005:1c7b::/48 maxlen: 48
2a06:a005:23b0::/44 maxlen: 48
2a06:a005:23d0::/44 maxlen: 48
2a06:a005:23e0::/44 maxlen: 48
2a06:a005:23f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:06:08:f6:2e:8a:91:c1:27:3a:b7:46:e0:b5:42:60:25:81:87:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=0AE544008B621E79B904F3AC557832732F100056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:00:36:08:b2:e8:49:ff:f3:c9:c7:3c:e1:
f0:7c:92:2d:c4:34:c6:00:df:fb:e8:61:cc:83:fb:
ca:a9:1e:03:ed:80:b7:29:e2:50:12:c9:c4:68:9d:
3c:2b:f6:a1:eb:fe:65:40:62:5f:31:b5:53:8a:87:
bd:c5:94:b6:8a:df:bc:db:ea:7d:2d:55:b2:3e:b6:
a7:fe:0e:2b:08:f9:fc:3f:e4:22:83:6d:ef:64:10:
56:32:95:e9:46:2a:17:ed:c2:79:ad:74:12:fc:7e:
67:40:e4:93:ed:f3:63:98:04:14:15:d8:55:74:72:
25:60:63:a0:cc:6b:59:04:f3:da:e0:81:7d:93:ac:
5e:70:5c:01:27:ca:d8:db:8d:f8:c1:2c:65:02:fa:
db:ed:1c:75:bc:62:35:a7:e2:71:01:e4:45:df:cb:
a1:76:5c:92:43:6b:2d:8d:01:23:f8:3d:81:98:9b:
e9:9c:ed:d9:95:87:c9:96:2f:9e:b7:7d:24:e4:77:
20:eb:45:05:34:a0:2e:d8:57:38:51:ab:9c:50:46:
63:bd:7f:6a:f0:13:75:e3:34:44:9a:9a:51:cd:ca:
ed:67:a2:d0:31:6f:80:14:5e:35:18:e4:e7:a8:50:
64:7b:20:e3:be:81:20:38:1b:49:3f:eb:45:da:2c:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:44:00:8B:62:1E:79:B9:04:F3:AC:55:78:32:73:2F:10:00:56
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7b::/48
2a06:a005:23b0::/44
2a06:a005:23d0::-2a06:a005:23ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:b0:4d:4e:01:3a:23:0e:68:0a:56:f4:47:86:d7:ad:4b:b7:
a2:31:ce:1b:80:31:85:3e:3b:c9:d0:45:c8:9a:fc:30:79:9e:
fe:d4:5d:e8:47:da:a1:49:fc:52:83:d1:33:a6:82:e2:21:8f:
60:83:94:45:55:70:6a:c0:48:19:62:d2:3b:0d:0e:43:31:b9:
ae:a1:2f:16:ed:cf:ae:9e:e9:55:89:6e:dd:ff:65:f2:da:58:
a4:64:92:73:86:11:c5:3f:dd:69:1c:38:9b:83:c3:36:04:29:
e9:2f:3d:5e:fd:64:16:1b:86:7f:fd:a9:56:9c:94:e1:16:f5:
36:e7:d4:f2:30:80:27:3e:22:8f:db:ea:1e:f7:65:c0:f9:1a:
a7:ee:8d:ae:ae:91:47:57:f2:0d:07:ce:a1:22:a3:f6:42:04:
bd:63:52:11:41:f6:55:4c:1d:04:0d:88:83:68:33:d1:c3:d0:
0e:22:20:63:c0:b7:a9:db:18:42:4d:bc:b2:da:95:a7:e5:5e:
90:2b:35:2a:e1:e2:8b:6c:75:1a:33:2b:cd:c1:58:ca:3f:aa:
ed:23:43:ee:0c:de:2a:d8:5b:76:af:cb:5f:f6:60:46:ef:fd:
78:3e:16:8a:58:40:d0:0a:04:4d:1e:ff:d1:60:fc:9a:70:28:
05:72:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:56 2025 by rpki-client