Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202573.roa
File: AS202573.roa (raw, json)
Hash identifier: nRvvNqk+xj1KISFftQxLza0JZ7xKUF50QrKt9SKFq3w=
Subject key identifier: 20:4A:B0:52:C8:DA:65:EA:6B:38:7E:E6:13:D2:B2:F2:0A:04:A8:DA
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2960213F7AB492D6511D54A6D303E6FA6D84449E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202573.roa
Signing time: Thu 22 Dec 2022 08:15:21 +0000
ROA not before: Thu 22 Dec 2022 08:10:21 +0000
ROA not after: Thu 21 Dec 2023 08:15:21 +0000
asID: 202573
IP address blocks: 2a06:a005:1ed0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:60:21:3f:7a:b4:92:d6:51:1d:54:a6:d3:03:e6:fa:6d:84:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 22 08:10:21 2022 GMT
Not After : Dec 21 08:15:21 2023 GMT
Subject: CN=204AB052C8DA65EA6B387EE613D2B2F20A04A8DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:27:05:5d:45:ce:3a:63:1c:6d:d2:86:bb:
e2:21:9c:57:40:6e:cc:1e:22:69:4e:47:6f:71:38:
fb:ed:04:c7:b5:0c:19:28:1c:26:99:98:62:2d:73:
dc:3b:1b:ae:6c:f6:01:9e:14:b2:6c:76:c7:eb:20:
3d:54:b5:65:1c:81:9f:34:fa:9e:b0:4c:d0:cc:ed:
41:6f:eb:02:39:0b:7c:a0:95:7b:f0:1e:61:0c:58:
b6:b8:4e:3e:7d:8a:89:c7:48:e7:02:89:f4:05:da:
39:18:3d:48:f0:1a:aa:6c:24:a0:51:2a:6d:0c:11:
40:fd:75:6f:ac:5e:98:1e:49:9e:3e:8b:2b:45:d5:
e2:58:d1:00:fa:d0:f7:8e:34:0d:79:ae:e2:4b:af:
2f:44:ae:9d:d9:9d:5a:73:e5:72:3e:2d:36:30:9f:
38:26:ad:2a:59:e9:9f:76:d9:77:ba:14:85:f5:67:
a8:ed:cc:f6:2d:ba:af:7f:64:2c:bb:c0:f1:e3:8c:
9e:81:9a:a7:bd:7d:c9:d6:ac:f0:b8:90:7d:dd:d9:
13:dd:5f:41:5d:d5:70:f8:9b:83:e4:1e:79:07:76:
f3:3d:17:7c:16:6c:d0:76:7a:df:99:de:ca:61:88:
cf:e0:32:f4:80:9a:8b:88:10:74:69:5d:5c:b2:11:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4A:B0:52:C8:DA:65:EA:6B:38:7E:E6:13:D2:B2:F2:0A:04:A8:DA
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202573.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ed0::/44
Signature Algorithm: sha256WithRSAEncryption
4e:49:0f:ff:07:3f:d8:27:ff:4c:ca:99:36:39:dc:a0:78:a3:
e6:36:b7:73:e6:01:39:74:a5:71:bf:61:e7:6b:93:a9:3b:e2:
c5:6f:49:e8:87:ce:23:04:b9:81:46:ea:25:1b:e1:bb:60:83:
c3:75:85:fc:a2:10:24:fc:16:23:0b:15:67:33:d3:24:18:18:
4f:68:df:73:72:d5:c5:06:5c:48:b3:4a:1a:7d:f0:5f:ee:c6:
2f:e2:cd:39:57:97:2f:f8:c9:0f:d1:4e:b1:cd:61:b6:a2:f1:
4b:37:7e:55:47:f0:77:ac:7b:3b:4c:58:42:4f:4c:0a:a8:27:
18:0a:97:9c:aa:03:27:df:63:a6:af:1f:0d:5e:0e:b3:7d:ef:
5a:27:88:62:99:26:d5:58:17:a4:d2:94:52:a9:15:39:c9:44:
45:9c:ea:b8:b2:c2:9a:32:1d:0d:e4:14:6d:0e:ac:23:cb:5c:
1b:12:dc:7e:79:a7:a6:da:bb:26:6b:ae:1a:8a:46:46:23:9a:
4d:2d:44:f5:04:98:51:27:2e:ec:d7:a5:6d:7f:51:4f:5e:55:
c5:46:cc:86:ba:59:61:1d:64:ce:c9:5d:85:d5:ef:a7:23:80:
0b:ba:9f:fc:dc:73:6d:de:83:b7:61:a1:df:bf:93:9d:4a:8b:
9b:7f:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:44 2025 by rpki-client