Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202338.roa
File: AS202338.roa (raw, json)
Hash identifier: 8CuA2z86b+xJ5I3ud+1PfsZlrrcHyaHpS3yRh0ZDZ2M=
Subject key identifier: 1C:97:FA:2A:54:C6:76:D6:28:8E:7F:AE:63:04:A6:7D:7E:CE:E8:31
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 177C94012A5328435F1057373B9C857FBE45B7C1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202338.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 202338
IP address blocks: 2a06:a005:bac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7c:94:01:2a:53:28:43:5f:10:57:37:3b:9c:85:7f:be:45:b7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=1C97FA2A54C676D6288E7FAE6304A67D7ECEE831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:d8:a3:29:ff:25:32:66:03:1a:68:bd:0c:
70:ff:87:27:4a:81:a6:20:6f:4e:c6:99:e1:58:1e:
1c:be:b5:68:dd:46:c1:70:09:8d:ba:43:e6:5e:78:
cd:5a:d7:ca:91:1f:38:19:7b:d6:8a:94:e0:1d:95:
2e:5b:5c:ae:27:6f:c5:35:ef:d0:47:f1:c1:96:a6:
77:a0:13:0c:8d:b7:8c:91:b6:e6:af:ec:68:9a:d2:
b0:77:07:12:db:ce:a5:70:c5:7c:5d:0c:bd:bb:dd:
82:11:b0:ed:92:34:29:78:27:2b:ff:11:df:ef:f2:
47:4d:e0:e7:c7:75:f8:80:01:42:cc:6d:97:e5:b5:
57:05:ed:f0:a8:7e:4a:59:9b:8b:00:25:f7:aa:af:
8d:01:1c:37:61:c9:15:35:76:06:3b:a6:04:b4:93:
be:06:a9:c5:bc:66:c6:53:e8:87:ec:2d:a4:eb:e1:
ac:ec:92:86:c3:05:a4:ce:94:1d:3d:b2:a4:f8:45:
c2:8e:2b:80:a4:d8:c5:57:f6:c1:76:95:64:c3:a6:
63:30:80:a6:92:54:e0:e4:c3:53:65:db:b0:fb:13:
b7:a8:8b:93:f7:52:3e:53:08:f5:10:7a:62:57:d0:
b7:fc:48:a4:bd:e6:df:5c:39:45:bd:ca:8a:cb:3c:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:FA:2A:54:C6:76:D6:28:8E:7F:AE:63:04:A6:7D:7E:CE:E8:31
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:bac::/48
Signature Algorithm: sha256WithRSAEncryption
3c:67:c3:74:e1:9c:88:5f:e5:c2:50:d9:7e:39:d7:55:34:58:
b1:ea:f2:74:b0:ba:b2:a9:21:d0:03:ab:87:a1:0e:b4:98:21:
70:f5:33:37:03:f0:84:51:c9:13:89:98:dc:c8:5a:ef:b0:3f:
6f:f6:69:bd:7d:64:7d:c8:b9:3a:ee:16:89:e3:8d:4b:c3:ad:
73:ae:01:1a:9e:e4:fc:66:60:4e:1b:ed:86:55:63:df:bd:74:
3b:18:dc:6a:35:85:fe:64:c3:22:45:f1:e2:a7:32:cf:44:d8:
fc:7b:ac:f2:75:53:5a:65:a5:49:8d:11:da:a9:a8:b1:3a:ea:
14:6c:9e:66:7f:7d:bc:ad:c1:d9:02:b8:4b:3a:34:e5:f3:c1:
72:a9:90:2b:0a:06:83:36:61:12:52:25:ab:42:80:f1:f0:d9:
2e:fe:c7:3b:60:3c:a7:f5:d6:46:cd:e9:25:a8:28:9f:3d:62:
7d:52:31:e5:61:e0:53:fd:93:ec:fc:f8:7c:ab:3c:af:6e:f5:
98:57:bc:0c:28:cd:14:07:ca:9e:16:27:dd:ab:26:6f:f9:f4:
14:f7:1c:7a:42:28:af:74:1e:d7:97:4c:a7:7c:70:13:77:6e:
dc:29:5b:7c:5d:4b:8e:90:de:1a:e9:1d:ee:a4:42:c9:01:f8:
fd:1b:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:19 2025 by rpki-client