Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202222.roa
File: AS202222.roa (raw, json)
Hash identifier: HkiWGgKRZmVQfkV8D+Ai+098EXn1HN6pHcIgkFNItdw=
Subject key identifier: B9:3B:40:BD:77:07:1C:A0:35:A4:A2:6E:2D:E3:71:44:15:9F:A2:05
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6410A27F8F8CFACE3FD87FD28B8A55934F2AB513
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202222.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 202222
IP address blocks: 2a06:a005:d2c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:10:a2:7f:8f:8c:fa:ce:3f:d8:7f:d2:8b:8a:55:93:4f:2a:b5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=B93B40BD77071CA035A4A26E2DE37144159FA205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:f8:2b:fd:ff:09:5f:f2:b6:8f:4c:45:52:
2e:58:00:06:3b:eb:39:1d:a0:5c:4a:c5:99:2b:30:
da:a8:d2:62:4b:64:cb:f7:f8:99:ab:2d:38:54:ef:
b0:11:8e:c5:e4:5e:9d:af:e8:84:3f:24:80:76:b1:
42:5d:fb:15:e4:6d:d1:6b:08:f4:c3:67:f7:5e:36:
d0:a8:06:79:fe:14:c8:04:43:1b:72:2f:7d:a2:08:
4d:a5:9c:a3:56:d7:02:15:1b:f7:e3:ac:06:5f:5d:
60:ee:9a:bb:7a:78:0f:36:d2:d0:86:3f:2d:d0:8e:
c1:51:26:8d:38:ab:2f:75:f2:be:15:58:6c:47:8c:
28:a7:eb:43:f1:52:17:9e:89:7c:9d:5b:49:08:ab:
3a:74:5c:49:46:74:9d:fe:f5:f8:b0:ca:19:5f:c0:
ca:d6:f3:79:a7:29:46:11:f2:07:de:2e:69:03:43:
04:52:cd:ee:ee:c9:27:f7:17:5a:b9:56:a6:d6:20:
0a:cc:e0:b0:a9:72:98:b6:de:d6:fb:88:16:71:0b:
1b:e8:01:6b:98:23:19:91:a7:3c:f2:f7:b5:d9:bb:
8f:8e:f1:c2:9f:88:8e:56:70:3f:5a:74:bc:7c:df:
26:29:7d:fc:02:8f:89:61:6b:3d:25:cc:7d:a6:62:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:40:BD:77:07:1C:A0:35:A4:A2:6E:2D:E3:71:44:15:9F:A2:05
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202222.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2c::/48
Signature Algorithm: sha256WithRSAEncryption
05:82:57:5f:4b:a4:0f:6a:75:7b:32:95:11:c3:e1:ce:cb:ad:
70:3a:60:b9:21:a4:d2:21:9d:6c:fe:3b:13:e7:13:79:79:83:
c6:46:72:44:d5:89:40:05:e7:cb:47:c6:9e:6e:ea:e9:95:4c:
5c:61:1c:ce:f7:7b:84:08:5a:28:15:69:38:99:76:ef:c4:89:
d2:75:f6:f1:35:7a:0d:d9:58:de:b2:2a:22:ed:f8:79:9a:b8:
7d:ff:84:21:14:9d:68:42:b8:0b:40:40:95:fe:8e:7f:71:68:
80:81:e8:1f:24:bc:2e:77:60:e1:6e:09:03:d8:39:0c:1d:3c:
34:01:42:2b:81:c1:e8:81:d1:2e:10:1e:88:a2:bb:a6:3d:16:
9a:5a:a3:5f:59:e6:cf:da:36:94:53:03:00:ac:3c:4d:ad:56:
ec:92:ab:84:7b:8f:40:0f:be:6b:7e:3e:d8:b9:43:b7:b7:0f:
5e:90:76:dd:9a:1f:7c:7e:de:da:54:b1:6a:49:69:b1:59:0b:
cd:66:cc:70:f1:54:33:e6:52:a2:e2:e3:f6:56:21:f7:b4:d3:
dc:5e:11:58:17:77:14:8b:2a:c9:61:80:cf:79:f4:ce:71:6d:
a2:91:d6:58:74:d7:bf:09:31:6c:63:d1:d9:47:9f:6e:f9:49:
57:95:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:05 2025 by rpki-client