Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202528.roa
File: AS202528.roa (raw, json)
Hash identifier: TI5PVzZ1sdXOB4TPPgv/rns6DUVRQNLGzVshIA4OisY=
Subject key identifier: 9E:A8:A8:BA:B1:D2:0D:EB:1C:74:2C:20:E9:67:E7:0E:A2:BA:2F:D5
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 298DFA31187D7E9A43AD5CB40EF022C0DA29BD78
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202528.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 202528
IP address blocks: 2a06:a005:1d56::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8d:fa:31:18:7d:7e:9a:43:ad:5c:b4:0e:f0:22:c0:da:29:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=9EA8A8BAB1D20DEB1C742C20E967E70EA2BA2FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:7e:01:d5:4b:e5:c1:ca:ee:71:e8:dc:4c:
40:9c:6e:25:ae:5e:b0:cb:44:89:27:a0:27:c0:3b:
be:2f:9f:73:00:cf:ca:2a:55:78:6d:6f:b6:1f:c4:
03:9e:92:01:6f:3d:26:54:6d:a5:d4:50:dc:f8:11:
69:92:40:24:37:aa:9b:14:82:a4:23:35:20:1b:97:
c5:b1:63:69:88:dc:a5:30:8b:0f:8b:e3:8c:d9:ce:
f7:50:c7:61:be:72:e9:d4:7f:1e:f4:9c:b2:7b:cb:
30:d3:dd:9d:1b:2d:ae:6d:90:4a:0c:30:c5:4d:e8:
7d:a3:27:41:c7:02:3f:61:e1:93:b5:30:f6:a8:3e:
3a:1e:07:d3:7a:99:5a:f4:a7:d7:93:f3:03:96:dd:
c0:66:5f:07:35:f6:ca:16:11:a8:6d:7b:0f:e8:5d:
8f:cb:40:f3:a1:45:f7:0b:d2:5b:14:f8:62:f9:bf:
f8:e3:89:d8:d6:60:7e:4a:2a:d3:34:b6:2f:69:ad:
90:1e:42:3d:6f:d9:3e:68:69:83:c7:b0:6f:22:4a:
40:d6:b8:28:09:21:23:9b:36:ab:73:7c:e3:33:e0:
dc:ca:a9:e3:d5:83:90:6f:89:e8:5a:db:61:59:f0:
31:ff:a7:32:0e:05:c6:15:ef:7c:d9:99:a7:ef:8e:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A8:A8:BA:B1:D2:0D:EB:1C:74:2C:20:E9:67:E7:0E:A2:BA:2F:D5
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d56::/48
Signature Algorithm: sha256WithRSAEncryption
b7:6c:bf:00:fe:07:20:0f:79:bf:ea:f7:c0:17:38:fd:ed:08:
54:17:7b:e3:50:23:e6:45:f0:d7:c2:42:52:74:10:32:2d:ae:
cd:92:ac:35:ab:02:7d:27:52:a9:92:1b:9c:ba:1e:5e:2e:64:
6a:32:4f:35:3b:88:37:d4:e8:56:92:20:f8:01:fa:e2:1d:2e:
f2:1c:b1:0e:a6:5f:69:03:de:54:fa:47:a9:aa:40:0a:3e:4f:
0a:fb:a8:d5:79:21:8b:c9:b8:4d:58:ac:f5:9e:50:7d:24:04:
6a:c7:62:06:3e:18:0d:06:56:dd:3f:d9:85:65:8c:dc:d3:c7:
2b:b8:ad:43:15:7a:e5:2a:b5:24:4b:be:29:d2:2f:80:fc:20:
d6:b3:1f:7a:bf:6a:70:03:d2:56:65:13:50:c3:de:df:65:96:
a2:52:19:8d:4d:cd:54:2d:0e:d6:f5:ea:48:45:ec:59:ff:0c:
5e:8f:bc:71:e1:d1:0c:1c:8b:e1:7e:81:ad:aa:be:d5:13:58:
b1:58:10:55:33:8f:b4:00:5a:60:51:a3:02:34:f5:69:98:ca:
63:ec:e1:d4:e3:f8:29:64:e8:f6:89:6e:eb:de:34:38:4d:0a:
58:22:75:49:62:94:63:f3:4b:e2:ea:33:4c:fa:c0:87:52:1d:
4c:87:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:01 2025 by rpki-client