Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202467.roa
File: AS202467.roa (raw, json)
Hash identifier: I5VvRPSo/5s0UkSjFODhNAuZOUeK28Z6gxKXH/pducU=
Subject key identifier: 02:73:B7:C5:BA:97:80:99:20:68:10:68:F7:26:70:29:4B:AD:6A:59
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 124737581C73C462D793398712A9B54489DD1B85
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202467.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 202467
IP address blocks: 2a06:a005:1162::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:47:37:58:1c:73:c4:62:d7:93:39:87:12:a9:b5:44:89:dd:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=0273B7C5BA97809920681068F72670294BAD6A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:25:27:97:9e:18:ad:cc:ea:2c:c9:52:84:
fd:b7:b7:d6:5f:08:d8:41:95:bd:a4:a0:fc:1b:f2:
3d:30:e0:58:41:5d:3b:c0:f5:af:e7:5b:69:2a:3b:
c3:98:8e:c3:68:84:97:c8:40:6b:b8:07:09:9e:ab:
ef:35:71:7c:7a:28:6d:47:75:98:ed:b2:69:56:ae:
a9:1f:03:73:e1:7d:06:4c:4c:31:43:03:d4:27:72:
28:4f:38:fc:23:f9:3b:64:31:13:c5:c4:45:e9:19:
42:e9:a9:cc:90:cb:8f:e1:f8:34:31:47:d1:04:ba:
58:65:52:11:1c:bd:0a:e2:f9:1f:da:82:4e:0f:39:
35:23:1f:56:05:db:f3:6d:6e:31:a9:35:d8:07:05:
c9:dd:75:24:f3:58:96:ab:ff:d7:cb:9b:8d:0a:56:
e8:ff:39:12:6c:a2:a6:c6:ca:f4:a3:56:36:c9:42:
ef:c8:f1:3a:1a:ff:f3:75:89:33:56:86:80:56:6c:
ef:a8:03:9f:ef:de:d1:5d:4f:19:e0:c0:c4:80:c8:
64:a1:63:92:e3:61:8c:e7:c7:34:1a:94:c7:47:ca:
92:29:5c:23:05:09:66:4a:67:65:55:e6:0a:c6:3d:
9b:da:b3:7c:99:ce:f3:13:17:cb:46:f4:5e:28:7f:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:B7:C5:BA:97:80:99:20:68:10:68:F7:26:70:29:4B:AD:6A:59
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202467.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1162::/48
Signature Algorithm: sha256WithRSAEncryption
34:54:d2:89:1b:11:aa:dd:75:ec:16:e8:3c:75:72:05:c4:d3:
46:3c:97:f4:86:e0:b6:7a:6c:91:27:32:56:85:03:4b:a4:a5:
28:1a:f8:30:1e:fc:9a:fc:88:8c:5c:84:e8:4b:b8:1f:3b:0e:
92:ad:cc:2a:3c:bf:1d:c4:3d:33:8f:4c:15:c8:8f:44:84:ad:
41:ae:b7:22:cc:3d:3d:6a:8b:ae:10:3d:8c:16:8d:d0:83:ad:
1f:32:d8:d2:42:6a:6a:79:3a:ad:21:d3:b5:65:a3:5b:6b:5c:
e8:8a:35:d0:65:ff:af:f7:7b:89:5b:ad:89:37:ea:49:1c:10:
07:66:f7:fe:68:50:fc:78:a2:2d:5e:c1:1b:1e:64:71:b5:2e:
39:0d:e5:3f:2c:07:97:f0:a1:5d:64:6a:79:d5:3f:67:df:a7:
f9:32:cf:96:03:fc:81:56:4f:ac:56:ed:76:9b:6b:17:0f:aa:
63:fa:b9:a6:6e:52:d8:15:91:4f:5a:38:f5:20:e9:3c:22:60:
11:22:7e:b8:2a:47:e0:88:91:6c:dc:bb:66:73:2b:ff:20:89:
89:46:39:09:91:90:9d:bf:30:12:9f:e2:7c:ff:3e:50:79:77:
ce:d2:6e:ef:72:ec:95:87:08:b1:d5:2e:32:7a:e5:a9:14:8e:
19:1d:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:24 2025 by rpki-client