Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202255.roa
File: AS202255.roa (raw, json)
Hash identifier: GK2jExemCivGdkTopiVDNSi5Ko/gneoDeE0bcBpxW1Y=
Subject key identifier: 0B:00:FC:6C:06:98:F6:B7:46:EF:A3:C6:CC:69:3D:4B:71:87:79:14
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 34C2D1ADC08C8B0408090519E1EB9CF65FCAEE1B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202255.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 202255
IP address blocks: 2a06:a005:1503::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c2:d1:ad:c0:8c:8b:04:08:09:05:19:e1:eb:9c:f6:5f:ca:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=0B00FC6C0698F6B746EFA3C6CC693D4B71877914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:98:ea:ff:90:55:a8:f4:fe:4e:00:01:98:
7d:0f:a1:90:d2:05:a3:b7:28:76:ca:18:0e:ba:c8:
ad:5d:af:72:da:9a:ca:f8:77:6c:33:05:23:62:19:
7e:ce:37:03:a6:4f:ef:96:5a:99:61:25:1b:77:4e:
00:ca:0a:69:ce:ff:f6:24:e9:c8:ae:cf:ee:c4:7c:
d6:0e:5e:08:ba:6b:bd:2f:ff:29:fa:b3:46:00:77:
72:80:3b:4f:18:0d:a8:be:fa:e9:88:1c:74:31:aa:
d2:94:d3:4d:35:b1:fb:e4:ee:49:34:89:b9:c2:11:
60:6f:f8:b3:a7:92:00:26:70:89:56:8b:f6:65:59:
69:2d:16:7c:7a:5b:ea:23:e9:7f:f9:34:ac:44:3b:
e1:2d:63:c5:ee:17:ec:ac:21:97:8d:3c:b4:19:3c:
95:91:b2:2e:41:f4:5a:5e:c3:cb:fd:03:aa:6c:a2:
19:91:8e:24:02:94:f9:49:10:eb:be:46:52:71:51:
47:1f:df:06:48:3d:8d:68:92:79:9f:6e:f4:71:69:
c7:e7:40:94:76:9c:05:66:06:1d:16:6e:45:9c:06:
33:a7:02:3c:f7:f2:48:b4:d3:e8:f1:97:18:7f:e2:
be:71:41:eb:4a:b2:23:ba:5f:d5:05:ea:d7:70:ba:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:FC:6C:06:98:F6:B7:46:EF:A3:C6:CC:69:3D:4B:71:87:79:14
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1503::/48
Signature Algorithm: sha256WithRSAEncryption
86:f6:7a:c4:33:11:53:8d:ca:0e:6c:db:87:73:1d:a3:ec:f6:
8f:62:82:97:bc:75:a9:34:b8:d2:0f:f9:a8:35:63:ab:81:79:
db:76:45:d1:06:1e:1e:df:94:ba:72:32:0b:0f:90:e5:86:25:
aa:2a:d3:7c:f5:8c:5d:fa:94:15:b3:fd:73:e7:89:ec:9f:05:
e0:ff:76:12:83:47:fa:d3:4f:ef:80:7c:0f:ce:77:9b:54:06:
d5:d7:25:ae:44:e2:79:e1:d6:fb:25:e5:93:79:aa:49:2a:b8:
0a:93:8c:fb:b6:b9:d8:13:3f:97:52:75:d5:93:80:2a:18:83:
7b:64:77:71:57:3e:16:e4:7c:1e:d7:e7:95:56:b0:f5:ec:d2:
be:69:78:9f:b4:4c:35:43:0f:af:d2:17:5a:fe:1b:08:26:8a:
6e:31:16:dc:55:e9:f2:6d:42:35:12:cb:97:58:bf:75:a5:af:
51:88:52:cb:f6:db:66:af:72:d5:6c:06:d1:1c:a9:84:7d:70:
ea:7a:88:19:7a:b7:b2:d9:03:3a:eb:37:5b:d8:35:49:75:96:
ff:59:78:be:c4:00:71:1e:2c:76:b9:eb:57:dc:f0:06:10:fa:
7c:86:a0:c1:11:63:f9:10:4c:15:5f:60:23:47:e2:85:10:24:
13:b9:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:04 2025 by rpki-client