Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202776.roa
File: AS202776.roa (raw, json)
Hash identifier: Ef1gkMgTd7KU2BGcJ3fVQtQeHx8Xyxm29wakIuGY08Y=
Subject key identifier: 71:CC:A8:00:EE:62:76:EC:D1:6C:8B:B7:4D:C0:39:A1:53:25:F2:14
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3AE606C60CA4F817041D4C7FFC22F0FF9AEF6C69
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202776.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 202776
IP address blocks: 2a06:a005:5a2::/48 maxlen: 48
2a06:a005:1d57::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e6:06:c6:0c:a4:f8:17:04:1d:4c:7f:fc:22:f0:ff:9a:ef:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=71CCA800EE6276ECD16C8BB74DC039A15325F214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:af:3e:6a:0a:11:86:8b:27:ea:d2:eb:59:
5e:9a:f9:f7:c7:35:87:f5:a1:91:17:a4:11:fc:69:
cd:b0:10:07:4a:18:60:0f:d6:07:55:4d:cf:b3:4b:
cc:c8:af:80:a4:c0:c0:8b:79:fa:99:4d:a6:7a:ce:
5b:e6:32:01:f1:7d:6d:71:87:49:40:48:33:20:a0:
a5:85:56:f3:8e:ae:bb:7b:fa:b1:fb:35:bb:35:12:
69:42:31:74:be:4b:3f:f5:bc:1d:9e:f5:b2:d9:15:
3b:a1:1a:00:58:ef:80:35:95:2f:6d:d1:10:2c:4b:
6f:7b:13:de:25:94:6f:9a:4a:b2:91:ae:a9:14:22:
20:a4:d7:54:06:c4:86:7e:86:8f:4a:1f:59:92:0e:
04:03:e0:63:cf:73:fa:bc:83:8c:4c:6e:c9:5c:f0:
ab:82:84:5e:bf:2d:6e:99:29:9d:e7:5b:94:b7:ab:
49:43:51:12:40:75:bf:8d:b7:2d:5e:89:2d:d6:f7:
eb:e8:15:a3:fe:16:b0:da:a0:53:c8:af:82:c7:15:
b7:1f:6e:14:c6:fb:49:ca:b6:3e:3f:f8:31:e8:ef:
fc:78:b2:9f:05:e5:dc:fb:22:3a:96:d8:7c:22:40:
0a:a2:f5:cd:1d:ae:9f:cc:96:a2:57:a9:6c:5f:b5:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:A8:00:EE:62:76:EC:D1:6C:8B:B7:4D:C0:39:A1:53:25:F2:14
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a2::/48
2a06:a005:1d57::/48
Signature Algorithm: sha256WithRSAEncryption
7f:78:92:50:13:f3:86:39:75:62:8f:4b:8a:db:ed:bb:8f:78:
86:b6:30:5a:a0:e2:3a:75:e8:a4:63:53:f2:02:82:b6:81:4d:
12:06:fe:65:08:0a:ed:66:91:e8:95:f8:02:f3:52:8a:e4:85:
8f:a4:e5:b5:97:8d:7f:64:00:8c:6d:96:0b:49:26:1c:f7:2a:
f5:61:8f:ff:e1:0b:b4:d1:8b:29:59:de:34:56:a7:d3:3e:ef:
b0:1a:db:8e:17:87:f1:41:cd:2f:cd:cc:87:36:76:0c:37:fd:
55:24:33:76:24:e2:96:b0:85:75:d5:87:03:44:c8:fa:3c:cb:
e1:37:d4:2c:7a:f1:05:55:5d:38:b2:34:69:b8:90:71:5e:19:
3f:b2:3e:a9:f7:82:2f:15:1f:fb:30:69:30:c0:09:77:71:a7:
47:4c:4f:98:89:6f:fc:78:c5:23:5e:93:ea:03:ae:05:57:90:
39:cb:cc:32:8e:23:2f:63:f4:a9:4f:84:98:e5:54:48:ed:78:
fc:e7:d3:bd:55:89:29:b5:f4:de:f6:d5:26:99:68:34:3a:0a:
58:55:75:e8:4c:04:70:c8:93:da:c2:b2:59:07:c2:cb:f0:fe:
e0:15:ea:b3:83:55:3e:b8:c5:98:e3:db:36:fe:21:6e:d5:db:
65:b6:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:31 2025 by rpki-client