Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202427.roa
File: AS202427.roa (raw, json)
Hash identifier: WAELVgeUgD92GdO1vmp5RUFngsJ7tu1yDPbJK4M5eNM=
Subject key identifier: BE:BC:9E:AC:86:E5:7A:61:FC:70:8C:2E:1D:24:96:01:3E:52:B7:30
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 445105060147A07FDF36B03A7A619B2884A1C023
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202427.roa
Signing time: Tue 27 Dec 2022 20:40:54 +0000
ROA not before: Tue 27 Dec 2022 20:35:54 +0000
ROA not after: Tue 26 Dec 2023 20:40:54 +0000
asID: 202427
IP address blocks: 2a06:a005:28e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:51:05:06:01:47:a0:7f:df:36:b0:3a:7a:61:9b:28:84:a1:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 27 20:35:54 2022 GMT
Not After : Dec 26 20:40:54 2023 GMT
Subject: CN=BEBC9EAC86E57A61FC708C2E1D2496013E52B730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:25:3b:56:bb:55:24:27:67:e5:ce:06:13:
01:ca:0e:ec:5a:02:36:ff:d0:7a:af:59:b3:e7:7a:
c4:aa:ae:0b:f5:e4:c6:e9:be:c2:f0:e4:0a:d4:e8:
f4:93:de:18:e9:eb:cf:0c:5e:0d:66:5a:0e:80:c0:
70:b9:dc:76:ce:8f:e1:e4:ec:e9:65:66:63:a3:e3:
02:ed:ac:7c:1e:c3:9e:86:fc:84:94:82:1a:e5:a0:
87:01:d7:3c:11:85:d3:2e:93:0c:87:09:9b:85:35:
16:e5:eb:f0:4b:ef:7f:89:89:25:ee:e1:19:57:b3:
b6:23:7e:7e:da:e1:4d:13:a2:ae:24:b1:79:2d:4b:
7c:d8:54:78:4e:06:ca:34:8c:6d:2e:a4:a1:b7:69:
2d:8d:c1:71:4a:f3:18:db:8d:61:84:ab:30:08:0c:
eb:d2:d0:fa:01:5b:ee:d8:29:2e:17:1f:9c:12:9b:
a3:99:6d:86:e6:b2:d1:45:70:cf:85:19:43:75:f8:
1d:90:a4:47:c6:e8:33:38:83:50:92:7c:fe:3e:d0:
4f:f5:90:7f:19:93:5c:bb:71:99:f5:db:41:fe:68:
64:6b:43:f9:34:97:4b:b8:c5:53:d0:ea:2b:ef:f7:
db:89:b3:c3:c3:cc:2f:06:0b:f1:70:ee:c1:1e:54:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:9E:AC:86:E5:7A:61:FC:70:8C:2E:1D:24:96:01:3E:52:B7:30
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:28e0::/44
Signature Algorithm: sha256WithRSAEncryption
03:bf:67:b1:c8:b6:b5:ae:fe:24:69:aa:f4:88:09:0a:67:aa:
5c:d0:9f:98:09:cc:f9:25:3b:98:a6:60:73:d6:1e:b6:42:75:
0d:8b:e4:f6:3e:b7:92:9e:c7:a4:0d:ef:d7:28:ab:65:d3:24:
87:11:b3:c4:a9:0b:5e:07:5b:9c:45:1e:f4:06:b4:2d:45:ed:
00:4c:09:60:ca:70:a4:ab:83:b3:a2:a4:87:6d:26:c6:27:a0:
89:e7:f0:af:12:04:43:9a:95:f2:9d:e2:0d:e0:b9:b9:0e:37:
ae:a4:bd:b6:2d:a9:f4:a1:2b:c1:e1:0b:87:c8:c0:57:2c:16:
a1:49:21:2a:b3:07:4c:67:f8:d8:cf:c3:cf:77:80:ca:4f:3c:
65:23:9e:c5:a9:58:e7:81:84:3d:42:ba:c4:11:93:02:fd:ff:
b6:b6:42:41:8f:57:b5:a4:b6:24:1e:74:e4:d0:e5:b4:e2:63:
b3:13:ea:24:49:8e:2e:b6:75:6d:e4:8f:c2:fc:bf:c5:1e:2f:
4f:b9:92:ad:24:d6:be:a2:2f:53:60:b8:57:90:fc:fd:75:8d:
60:57:c6:f0:e5:87:9c:e7:d7:b2:bf:f8:df:ac:cd:a4:8f:0c:
4b:6f:ae:47:6f:22:a8:14:02:d5:41:da:35:f9:7e:ad:43:a1:
03:4c:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:46 2025 by rpki-client