Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202260.roa
File: AS202260.roa (raw, json)
Hash identifier: QoFUWMjiHh2GJvbj3u+NUUdf9mSkajES7GpIH3u0ZWc=
Subject key identifier: C4:41:B5:0E:B7:C7:5B:27:31:F4:CD:8E:45:57:93:13:19:9A:51:AB
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 72DCEBF77F01CB1D39E12CCA318F05879A951C72
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202260.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 202260
IP address blocks: 2a06:a005:1d00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:dc:eb:f7:7f:01:cb:1d:39:e1:2c:ca:31:8f:05:87:9a:95:1c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=C441B50EB7C75B2731F4CD8E45579313199A51AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:2f:8b:40:9b:92:8d:3c:ed:f4:39:be:11:
5a:65:e9:de:c9:05:1b:5b:62:92:9e:75:b1:11:f1:
e6:56:16:2b:7c:d9:dd:e9:1a:b6:21:24:8d:28:11:
01:f4:52:e2:f8:fc:c5:00:1c:dd:82:c6:79:5d:62:
1b:c0:f4:ac:93:57:5e:2e:b7:eb:c6:da:cb:a1:94:
da:3d:98:77:c8:92:b4:8c:ae:1e:d0:19:ca:4e:52:
a6:68:1a:9e:c8:32:59:fc:1a:64:ef:97:d5:a4:04:
64:87:c2:c4:6e:f0:f2:4e:a3:e6:df:64:a6:da:bc:
04:d0:6f:e9:da:0e:19:8e:c2:23:d1:e1:18:3f:e3:
2b:f0:41:d4:8f:5f:43:02:62:d3:5e:3b:3b:f3:8d:
11:16:e0:a3:7b:88:4a:e9:61:85:c4:c9:d8:0e:6d:
ea:e7:cb:9d:34:79:e9:6d:97:43:5b:83:41:1a:0c:
16:92:7c:2b:20:8f:ac:9b:9c:00:b0:f7:53:a1:aa:
de:63:87:22:64:91:2c:9f:a1:62:8c:b1:b4:3d:1d:
ad:43:90:64:54:37:6f:93:bf:e6:d6:27:c4:a6:47:
05:14:d8:36:43:1c:a4:39:ac:dd:2d:d5:a6:44:34:
a0:53:9a:bc:9f:b7:e3:7f:b0:32:82:d8:57:63:f7:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:B5:0E:B7:C7:5B:27:31:F4:CD:8E:45:57:93:13:19:9A:51:AB
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d00::/44
Signature Algorithm: sha256WithRSAEncryption
4e:a7:cc:ef:34:43:95:ab:c8:53:88:31:0e:2d:99:cd:96:12:
a0:0c:19:8b:11:ab:dc:34:6a:be:c6:03:4e:8a:dc:11:50:e1:
ba:c2:f7:ef:42:7c:31:aa:1e:3c:54:eb:2c:5e:c0:28:d8:0f:
83:5b:37:fd:87:72:15:fb:7b:30:93:d3:b9:25:e9:23:6e:35:
91:2b:4f:72:ba:8e:3e:d7:0f:5b:84:67:52:f6:70:7b:5e:ac:
a8:1a:58:b1:79:1e:e0:5d:1b:58:a7:53:4b:78:c8:44:0b:23:
23:01:3f:e8:41:c2:01:00:74:7e:38:9a:a6:dc:59:0a:4e:b0:
73:7e:32:c4:14:32:41:ef:7c:17:99:89:67:d2:bc:ee:f8:aa:
23:e4:80:35:78:17:54:be:bb:56:c6:d6:84:50:0a:0e:c7:7d:
72:a7:24:fc:60:a6:7f:0e:14:d6:5c:e9:6f:f0:ce:44:80:1f:
2b:c0:17:ab:ea:a3:34:59:6f:a8:77:2c:e3:52:15:19:d7:a6:
a1:df:84:e3:5e:53:e9:4c:a2:2f:20:2d:f7:b8:31:2e:b4:74:
4c:40:8e:d9:34:fe:9c:df:8e:79:27:4b:4a:6c:42:ab:2b:88:
90:b5:ab:ca:35:e5:e0:05:65:b3:a2:83:8a:7c:50:41:58:fb:
1c:1e:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:14:42 2025 by rpki-client