Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202732.roa
File: AS202732.roa (raw, json)
Hash identifier: nNHbaxXfIPMKml+BUiQbGAkep8Qs8ueYrzhGk3WDvP8=
Subject key identifier: 92:8B:07:74:A9:42:B3:18:68:B7:A7:76:6D:A8:1B:B9:6A:0E:5A:51
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0AA1B6B2B5EEBA933CC0219CDDA963B80608F1F8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202732.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 202732
IP address blocks: 2a06:a005:1163::/48 maxlen: 48
2a06:a005:1501::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a1:b6:b2:b5:ee:ba:93:3c:c0:21:9c:dd:a9:63:b8:06:08:f1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=928B0774A942B31868B7A7766DA81BB96A0E5A51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:b0:fa:08:8b:39:9d:94:26:c4:79:59:8d:
5a:35:b9:ea:f7:22:64:cd:7d:9b:a3:e3:bc:1c:f5:
00:ff:83:f7:b7:4c:a2:d7:9a:61:d1:8f:a2:00:8e:
6a:ff:41:2a:37:e4:a2:ef:37:b3:d2:9d:8f:29:35:
e0:8f:d4:62:4a:c1:65:94:b4:0a:53:59:63:9f:74:
63:5e:65:49:fc:22:45:4b:ae:91:6f:56:ae:31:e8:
15:96:40:8c:b9:0f:a3:7a:e2:b3:3f:37:e5:89:b9:
06:f4:c7:8c:ed:67:29:64:10:85:b8:4e:63:c5:4f:
fe:e8:12:6a:bf:e5:2b:b3:1d:dd:25:7e:f2:eb:38:
2d:8e:f3:c6:ef:2e:df:71:6e:32:3e:80:76:6b:67:
79:55:8d:78:16:54:bc:7b:ad:ae:d7:33:ce:74:98:
3d:37:45:9c:d3:6f:5f:46:bb:47:99:32:24:8c:50:
29:5a:ab:22:08:5f:6e:14:32:f2:b3:9e:3a:aa:a4:
65:fd:64:de:19:8a:a1:e1:16:fb:85:d5:06:23:8a:
37:fe:5b:20:65:f7:89:a7:13:9f:24:65:92:1c:7e:
a5:28:44:9c:7f:30:78:c6:7a:27:b7:e4:9f:69:d9:
d1:9b:5d:2f:8f:19:f6:1a:32:c4:48:d0:bf:40:2c:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8B:07:74:A9:42:B3:18:68:B7:A7:76:6D:A8:1B:B9:6A:0E:5A:51
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1163::/48
2a06:a005:1501::/48
Signature Algorithm: sha256WithRSAEncryption
65:59:4b:f6:1f:ad:90:89:cf:06:70:e8:74:66:79:eb:e1:e1:
32:c6:9d:1b:a5:f9:8c:81:7b:b5:15:82:c9:e4:f5:e4:77:bf:
57:ef:2d:e2:c2:ee:42:36:e9:4a:f0:7e:d5:54:ca:f3:92:3e:
c6:7a:43:c2:b9:8d:41:2b:13:11:94:53:43:65:2a:3c:d3:b0:
75:a9:20:ea:ad:db:aa:6f:e0:04:ae:c5:2f:ff:72:7c:00:1d:
21:3d:49:d2:53:79:c2:00:03:20:81:d0:81:a0:3f:99:9b:7c:
64:ce:61:14:a1:9a:29:56:2b:5b:ca:4f:91:52:90:45:9a:f0:
7b:74:6a:cd:00:a9:3a:7b:53:a3:a5:70:41:94:b9:f4:33:9c:
d1:b0:24:4a:41:d4:28:a6:ea:64:ee:62:90:4e:f5:89:3a:98:
4a:39:94:b0:1a:19:e8:28:36:2d:53:01:04:94:27:4b:c8:4c:
99:d9:c4:a5:34:32:c1:1b:71:3d:62:8b:1f:a7:17:b2:17:d4:
b4:04:7b:63:b5:e2:ea:92:a3:da:b5:db:71:9d:f4:01:8e:e2:
6b:a0:2f:34:c2:61:df:8d:95:05:a7:fc:bd:79:6e:a9:5d:eb:
78:71:41:15:21:f2:59:66:bf:95:3d:ba:06:14:85:fc:4f:2d:
54:3c:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:49 2025 by rpki-client