Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202559.roa
File: AS202559.roa (raw, json)
Hash identifier: GPKkGflzD/7X2zQ9jKs8GvEAFIkzfJ0/r5lQxw+tGdQ=
Subject key identifier: DB:30:8E:40:A3:18:A8:AB:F2:3C:D3:98:79:D8:F1:CB:58:A2:69:DD
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 083D3811449309AB76CA65DD90141D713EE73693
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202559.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 202559
IP address blocks: 2a06:a005:1940::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3d:38:11:44:93:09:ab:76:ca:65:dd:90:14:1d:71:3e:e7:36:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=DB308E40A318A8ABF23CD39879D8F1CB58A269DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:00:c1:ff:05:b1:d3:d3:99:9b:4a:a9:47:
dc:b4:cc:c3:1e:51:0c:71:f4:ec:34:22:cd:9e:5b:
db:b1:ab:3e:c2:57:5c:a5:37:b4:8c:63:be:33:80:
3e:d9:31:07:c0:0b:5c:53:d9:cc:68:38:2d:e8:4c:
d9:db:d7:f1:5a:70:9d:41:cc:b2:fe:23:df:8a:71:
36:d1:cc:88:98:b5:be:f6:a0:e8:dc:43:78:0f:57:
55:08:c7:f7:b3:f3:0b:f7:c1:b0:ab:72:8a:62:0b:
4c:40:34:0a:31:61:8e:83:eb:e3:b1:f1:85:1d:13:
46:cb:66:d7:c3:cd:84:31:6b:48:65:74:a7:a5:a6:
cc:d4:7c:47:c9:e9:cb:4a:84:f1:25:02:8e:27:35:
71:e8:a4:8d:59:c5:be:cb:d9:6b:ec:5c:68:5b:1c:
7e:01:14:ea:ba:64:02:84:59:d7:05:63:c3:1a:0a:
53:53:fd:37:72:56:af:e4:16:49:10:81:99:c0:b2:
97:4e:4e:d8:71:1a:41:02:5e:a1:a6:7c:25:b3:cd:
fb:49:e1:9f:e0:bc:20:62:e6:4a:5d:36:4e:3e:2d:
0c:bf:b4:9e:dc:b7:42:b6:b9:38:f6:c8:51:87:15:
36:78:df:03:20:e6:84:d5:02:40:3a:e4:82:e5:a9:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:30:8E:40:A3:18:A8:AB:F2:3C:D3:98:79:D8:F1:CB:58:A2:69:DD
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1940::/44
Signature Algorithm: sha256WithRSAEncryption
3f:3a:17:82:41:d7:07:dc:ff:70:04:65:c1:b8:95:5b:74:39:
27:2c:45:e4:78:18:94:d4:5c:9d:24:18:87:ab:55:39:f9:5a:
da:e7:7f:c2:b3:bf:53:a1:9c:c9:67:2c:e5:f9:c3:be:c3:ac:
d6:73:95:98:56:6a:2a:95:49:a3:b7:17:ba:d3:70:fd:75:57:
52:a9:62:b4:ec:c6:a6:50:5f:b3:69:3a:87:26:0a:61:6b:d3:
46:8a:5a:25:6f:0a:f5:9d:da:c0:b4:f1:06:0f:18:b4:35:b8:
f9:9a:66:0a:b2:e8:e8:36:d4:dd:d6:e7:3f:e3:44:ab:87:eb:
17:24:e9:5e:a9:f9:13:07:d2:6c:cc:87:3a:d2:fa:f8:08:5b:
e7:16:e9:51:f1:02:7c:4b:89:ef:fe:20:a2:3f:7e:d9:e8:e2:
38:ac:ec:c6:69:9c:ab:82:85:11:3b:de:d5:a9:36:1c:47:09:
55:ef:76:8a:9a:9f:0e:1e:12:f3:09:c0:02:aa:f7:70:90:6c:
e7:21:5d:1c:b3:29:91:65:d1:96:dc:3b:61:43:ba:aa:ed:43:
d4:8e:66:cd:65:20:7d:db:58:9b:07:ff:b8:44:4f:b3:27:64:
e9:35:0e:d7:54:fc:a8:21:0d:a8:9e:bd:df:10:b6:19:28:ca:
77:6b:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:14 2025 by rpki-client