Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202224.roa
File: AS202224.roa (raw, json)
Hash identifier: 9MA8SCWCL954GDrRoEiyjVrG0e7tXzg+ad9oMC6JBgI=
Subject key identifier: 56:17:C0:1D:DC:0E:0B:2E:33:4B:49:C5:60:C4:48:E3:EA:34:45:D1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6B8EA453943A9EEC4DF61108B05C2B7992EED5FA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202224.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 202224
IP address blocks: 2a06:a005:108d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8e:a4:53:94:3a:9e:ec:4d:f6:11:08:b0:5c:2b:79:92:ee:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=5617C01DDC0E0B2E334B49C560C448E3EA3445D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:ee:b3:de:8b:57:b8:2d:43:6d:77:d5:7e:
7d:84:04:ef:a2:03:e0:7e:92:ba:8f:36:df:a4:dc:
5d:16:10:ed:4a:ff:dd:e5:09:71:dd:e8:6d:29:9a:
3d:da:62:ef:5d:e2:9d:85:ad:ca:40:97:30:ee:a8:
34:92:75:e3:44:94:ef:c9:91:8e:e5:10:80:fa:77:
0e:61:31:e9:2b:de:a5:3c:65:02:20:05:b9:42:35:
27:5d:e2:e0:6c:b2:91:de:a3:58:34:81:61:f8:d8:
9c:6a:44:33:08:33:b4:fa:14:02:d2:c9:9c:64:5c:
01:76:2a:94:1e:59:24:5b:75:a9:f0:8a:c9:ed:23:
89:be:e8:94:a1:4c:81:ec:3c:8d:e2:99:57:df:5f:
17:76:f6:e0:1b:22:a5:03:16:78:86:d5:4f:60:fa:
6c:79:a0:25:65:46:6a:b9:4f:49:9c:ec:7c:8f:5c:
0b:0a:5e:25:3e:c4:ef:23:94:44:a5:4e:dc:ad:b4:
6a:b0:36:b5:62:04:1a:b1:60:9e:5d:b2:e9:c8:8d:
c8:d5:cd:40:72:42:7e:f4:65:33:d2:c0:24:86:17:
ba:0b:02:40:0a:d6:1c:75:0d:1f:2d:60:c3:d1:eb:
2e:55:f0:a7:a6:0d:4a:11:3c:0a:ee:94:db:89:f6:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:C0:1D:DC:0E:0B:2E:33:4B:49:C5:60:C4:48:E3:EA:34:45:D1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108d::/48
Signature Algorithm: sha256WithRSAEncryption
89:9a:ba:5f:a2:ab:dc:8f:28:d6:2d:b3:9d:d6:ee:bd:14:37:
1b:f0:43:2f:b0:c7:1e:dc:b9:17:59:87:5a:7a:60:ab:7e:66:
93:f2:c0:6d:e7:04:1c:be:b5:77:16:ce:d0:a1:29:46:51:69:
65:95:ae:e9:1e:8c:a3:fb:9a:72:8f:01:15:e7:43:e1:0c:45:
79:67:0f:b7:51:cb:dc:7b:da:6a:0b:ee:12:2e:7c:b3:84:ca:
cd:bc:2d:39:d4:d4:04:0e:4a:25:d9:4f:e6:0a:02:49:93:7f:
91:65:d7:68:d4:24:f3:03:60:2a:43:8a:9a:51:90:f5:4c:2a:
d4:80:0a:68:c8:86:7a:bd:93:24:ba:16:e2:89:29:e1:bd:be:
6a:aa:63:3c:03:61:dd:aa:ae:e0:1c:3d:32:41:9f:d8:11:d3:
f1:a2:c5:b6:f2:0e:0a:7b:be:60:6f:82:fd:87:e4:d0:f3:23:
a4:1b:56:3e:43:68:9d:d8:03:a8:ab:bb:8b:93:c1:6a:3e:94:
73:88:b9:c9:05:8b:72:7a:b6:af:3d:db:8a:2f:72:95:b2:2a:
8e:b4:98:d3:90:a1:09:d4:85:ad:83:03:55:00:73:1b:f0:d8:
31:5b:fc:4e:30:91:78:37:e9:48:25:cd:b1:62:62:82:fa:b8:
0b:42:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:03 2025 by rpki-client