Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202827.roa
File: AS202827.roa (raw, json)
Hash identifier: y87DjV7OKX1qab1/QhM8TO+j4bEu+FKSnQApnp2G5vc=
Subject key identifier: D6:3E:67:0E:A4:47:65:D0:8C:25:E9:E7:E1:72:59:E4:2E:DC:EE:63
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4706AF633FCEC564907A6BB359BAD482905CA11B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202827.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 202827
IP address blocks: 2a06:a005:1bc0::/44 maxlen: 48
2a06:a005:1e30::/44 maxlen: 48
2a06:a005:1e40::/44 maxlen: 48
2a06:a005:1e50::/44 maxlen: 48
2a06:a005:1e60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:06:af:63:3f:ce:c5:64:90:7a:6b:b3:59:ba:d4:82:90:5c:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=D63E670EA44765D08C25E9E7E17259E42EDCEE63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:0e:5c:da:60:1c:e7:06:e6:a9:cb:7d:8f:
e0:cc:79:61:fc:bf:96:8d:52:f7:27:55:c9:1e:4d:
05:e3:b3:d1:02:af:4a:a6:35:38:00:0b:ad:2d:e0:
15:b0:0f:6b:98:d6:79:2c:42:c2:28:e2:cc:b1:ad:
41:13:e4:f7:11:d4:36:7c:ec:93:57:f5:c1:5b:48:
f8:3b:4f:b5:6b:3b:92:57:b0:59:e7:b9:65:dc:f0:
e7:f5:5f:0d:67:6c:65:fa:0d:13:c0:31:1f:51:94:
dd:4c:3d:97:b7:5b:05:d0:13:38:6c:df:ae:90:22:
41:dc:da:e9:40:39:3b:96:7b:22:b3:b4:4c:a8:c0:
e5:ba:cf:58:f2:81:d2:d6:47:c0:5f:aa:41:0a:7f:
e2:1a:dd:f0:d3:9f:51:59:a8:a8:01:bb:30:93:13:
ad:18:03:a2:e5:e1:2c:dc:7c:89:da:cf:59:3a:38:
37:5e:0c:e2:f1:e5:55:8f:6c:07:b1:a3:5c:cf:28:
58:a9:07:88:d8:e0:79:9d:b1:fd:83:6d:57:39:7e:
fc:f4:ed:3d:65:4c:7b:36:21:dc:3a:52:74:67:c5:
e1:bb:17:04:ce:a9:02:1e:55:95:8b:96:0b:f6:2d:
cf:b7:35:7a:8b:f9:c7:73:0a:a4:08:4f:81:fa:f5:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3E:67:0E:A4:47:65:D0:8C:25:E9:E7:E1:72:59:E4:2E:DC:EE:63
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202827.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1bc0::/44
2a06:a005:1e30::-2a06:a005:1e6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:3f:f5:2c:ae:37:7c:68:02:d7:ef:48:8c:d4:e5:ca:ab:2c:
1f:f6:1d:4b:84:c1:40:ed:b9:c0:32:73:5d:1d:bf:db:26:a2:
be:35:a1:8d:fd:a4:1d:8e:c3:6e:1d:94:86:91:61:fb:a3:ef:
9b:c0:4e:d3:69:f9:29:42:60:56:ba:93:55:3a:70:d6:16:79:
26:01:3f:6d:eb:dd:21:f9:c6:35:00:75:32:fa:f6:15:fe:db:
e2:b2:33:38:a0:3a:26:eb:44:f2:f0:b9:66:e2:5a:f8:a4:47:
c8:5f:24:83:6e:00:bf:6e:71:66:34:36:ce:a4:96:4c:c6:70:
d6:26:60:2b:90:61:ec:f8:32:e2:7d:3e:cc:6d:aa:f2:b0:47:
b5:36:32:80:be:c8:d7:28:8a:5e:9c:85:98:fb:a7:fa:ef:d6:
bd:c3:09:cf:11:be:f3:41:14:20:04:31:82:95:89:d8:54:26:
6c:4a:30:26:24:1e:f8:e0:6b:29:98:68:5f:7e:e5:a3:47:f8:
82:18:2b:d0:f2:be:f1:c3:5a:7e:be:22:13:d1:16:14:9c:61:
3c:ec:e8:93:fd:be:93:d7:fc:bc:cc:5a:22:b4:fe:42:79:e6:
a2:a7:c3:79:2d:cd:14:18:37:cc:e7:76:02:09:6c:42:55:a4:
3e:06:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:09:35 2025 by rpki-client