Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202828.roa
File: AS202828.roa (raw, json)
Hash identifier: nOyfom6sF8bT655OgsK7JSoq5YjUl/8x7FdZL1g28GA=
Subject key identifier: 4B:8C:F7:6C:EA:D4:A1:31:07:EB:6D:E2:C8:BD:28:82:67:1F:03:7E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 109C3F97A0E29F6C6119E306315760B1FA9F84BC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202828.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 202828
IP address blocks: 2a06:a005:2dd::/48 maxlen: 48
2a06:a005:43c::/48 maxlen: 48
2a06:a005:bae::/48 maxlen: 48
2a06:a005:baf::/48 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9c:3f:97:a0:e2:9f:6c:61:19:e3:06:31:57:60:b1:fa:9f:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=4B8CF76CEAD4A13107EB6DE2C8BD2882671F037E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c1:b0:51:4b:0c:d0:db:f7:51:6b:fd:e2:b9:
2f:d8:6c:d9:8e:6f:58:86:7f:1e:66:65:69:2b:44:
f2:66:82:b2:1f:51:19:d3:e1:29:2a:6a:66:8a:f1:
d5:fb:79:86:80:42:c8:4a:08:9a:b9:5a:a1:16:ee:
e0:5e:34:4f:41:a3:ce:e1:e0:53:64:db:7c:a7:94:
77:2d:e3:c8:d2:bc:bd:a9:95:77:e0:45:16:dd:c8:
0f:b2:ab:3d:a8:0a:29:c2:9e:2d:0e:83:7a:e1:08:
4b:f6:b1:a2:72:e2:53:7f:c8:b0:20:6c:1b:08:5e:
e6:f4:c0:59:49:b2:72:10:f9:32:d7:86:8d:74:32:
a3:81:37:f5:f5:86:e6:03:45:ce:35:1f:e2:4d:01:
25:db:3a:88:d5:f2:68:08:7f:42:52:5f:81:8d:b3:
71:cc:4b:44:04:cf:6b:ab:97:1b:95:e3:a1:a9:92:
e3:6d:75:7b:6c:64:b6:5e:f9:cf:60:00:8a:84:86:
e2:29:31:9b:78:bd:02:cb:11:f7:04:fb:8b:8c:f3:
c3:a6:83:36:5b:41:86:b1:2e:c6:3a:d5:d2:20:dd:
43:01:ba:dc:59:6c:47:61:51:29:d2:13:96:39:ab:
15:8c:00:7a:73:62:68:52:03:20:80:f7:70:6c:89:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:F7:6C:EA:D4:A1:31:07:EB:6D:E2:C8:BD:28:82:67:1F:03:7E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dd::/48
2a06:a005:43c::/48
2a06:a005:bae::/47
2a06:a005:17a0::/44
Signature Algorithm: sha256WithRSAEncryption
13:d9:f3:87:4d:d6:00:3b:18:a1:72:6d:13:75:f0:4d:14:89:
b1:64:80:f9:24:bf:b3:ff:1c:74:a9:87:62:f5:df:40:b1:f5:
38:c8:94:53:bb:e1:b0:bf:cd:ea:82:bb:86:43:f9:15:99:9f:
36:82:2c:d0:63:31:f7:2d:42:8c:91:db:35:f9:90:92:de:e8:
64:2d:12:dc:92:65:37:25:c7:0a:65:ea:09:66:f4:c7:9f:c2:
f8:e6:6b:f3:86:8c:cf:31:3a:ff:77:79:76:29:90:fe:7e:4f:
41:19:20:12:3c:fb:17:ea:bb:43:f0:1c:d8:40:f2:8b:2c:b4:
4f:f2:28:3c:e6:e1:2b:3d:47:05:47:7d:c1:52:28:55:c1:78:
c8:5a:d4:0d:fb:f5:f3:6e:5d:22:06:3d:6c:86:ad:8c:c0:68:
5a:eb:0d:8e:fe:ef:5b:a1:2d:e3:9c:af:7c:83:70:c2:f2:11:
1b:f8:27:6b:8d:17:e6:d8:16:00:dd:b5:39:35:41:71:99:3f:
96:47:56:24:e0:4c:58:51:80:18:36:03:84:bc:3c:6e:ad:2c:
50:92:9e:8e:8b:13:12:91:d6:a5:ec:ec:1a:fc:77:10:93:06:
f6:b1:2d:6f:bb:27:61:2a:9b:1f:ee:08:c5:c7:ed:bd:6f:96:
d9:98:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:32 2025 by rpki-client