Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202685.roa
File: AS202685.roa (raw, json)
Hash identifier: WvLbRBS87s9vxy3mIqTexPiwaGeONWthfwMQp5YlBng=
Subject key identifier: 9C:63:01:56:17:87:76:79:74:50:40:59:1D:3B:F1:86:98:A3:C0:D6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1985521AA798E06A767BB98A8EF092407559A44B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202685.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 202685
IP address blocks: 2a06:a005:1e80::/44 maxlen: 48
2a06:a005:1e90::/44 maxlen: 48
2a06:a005:1ea0::/44 maxlen: 48
2a06:a005:1eb0::/44 maxlen: 48
2a06:a005:1ec0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:85:52:1a:a7:98:e0:6a:76:7b:b9:8a:8e:f0:92:40:75:59:a4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=9C63015617877679745040591D3BF18698A3C0D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:f2:35:d3:8e:f1:99:ff:47:56:09:fe:48:
15:8e:c0:ef:c5:4f:b4:ad:d5:4c:4e:33:98:df:19:
fc:d7:af:e5:e9:c3:e5:5e:aa:b4:88:17:6e:32:65:
6d:c5:78:b7:b2:e0:6a:49:21:61:60:20:e4:00:07:
bc:dc:d9:aa:23:84:3d:b4:a6:9e:5f:d0:3a:80:8c:
1b:88:6a:ee:dc:e9:e8:ff:b1:76:ba:8f:4a:04:f6:
d2:04:66:d6:34:ba:c6:96:78:16:29:78:2d:dd:37:
86:8a:c7:94:64:b8:fd:ec:f9:5e:a6:57:e1:8b:78:
b3:cc:fb:ff:12:4f:1c:f6:13:e8:af:c9:e0:be:c0:
d5:db:bb:df:40:2d:d5:4c:7b:af:d0:c3:01:a0:5d:
c4:0c:c7:04:86:63:03:74:38:e9:04:b2:4e:82:49:
28:0c:b1:d0:78:93:4d:eb:29:39:5b:60:20:2f:2d:
57:b6:e6:2e:c8:88:b8:e1:53:84:70:06:c0:17:d1:
bc:62:d4:dc:31:83:54:ac:5f:6c:04:6c:e1:a8:15:
e6:cc:67:1e:07:7f:e5:e8:19:6f:e3:fe:f9:96:61:
4b:c2:ef:cb:1e:5f:a1:d0:c6:17:de:0c:0d:9b:9b:
d1:ed:13:55:dd:ea:02:14:49:ac:80:9e:4d:5c:2d:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:01:56:17:87:76:79:74:50:40:59:1D:3B:F1:86:98:A3:C0:D6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e80::-2a06:a005:1ecf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cb:6b:37:ef:03:0d:2f:c5:67:02:2a:c6:f0:3f:cb:0b:58:0d:
93:c4:88:57:79:3c:3b:e0:bc:da:e6:65:0e:6e:17:d7:f2:5a:
43:f2:5c:a0:39:d3:83:c8:86:0e:f1:16:c6:f1:36:ad:06:a2:
0d:59:30:da:be:af:5e:c5:ed:1c:58:e7:c7:f2:9d:d4:48:88:
51:b3:61:c0:4b:76:3f:6b:e8:81:af:6c:a4:82:99:cf:60:83:
9a:41:a5:9a:88:ed:b0:ce:6d:92:02:b6:17:5d:d4:65:bb:96:
95:d5:d9:62:a1:32:7b:d7:14:58:41:88:53:5d:59:bc:ea:be:
a8:27:3f:23:42:df:d7:58:e2:f7:b4:09:08:4e:ca:8f:d4:f8:
59:b2:7f:ba:96:6f:2e:14:c8:1a:8d:f7:3b:2a:a9:0a:15:b2:
ba:43:42:4a:01:1f:fa:b1:c9:40:6b:9e:b5:5e:ed:b8:ea:21:
ce:bd:3b:96:43:bf:0e:4b:87:3d:38:2c:1e:7b:9a:93:ce:1a:
9d:3d:29:56:0f:a2:77:ce:ab:15:30:76:a0:f6:32:91:7a:fd:
8c:ef:d7:28:b1:52:22:37:02:e3:b5:d4:3b:33:07:7f:f5:17:
08:c5:47:41:46:68:6e:de:13:59:f8:90:ce:bb:03:9e:24:df:
97:53:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:19 2025 by rpki-client