Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202905.roa
File: AS202905.roa (raw, json)
Hash identifier: lTb9WMB47qV+FSIMNyy1n5oUNPwa8Hx7/vpksSVg3fs=
Subject key identifier: C7:A6:72:0B:94:11:BE:8F:FC:63:1A:8B:E1:9A:3C:D8:95:E4:C3:5E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5271D3B381877C38BA0971CCB1C54F31DAA80671
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202905.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 202905
IP address blocks: 2a06:a005:1279::/48 maxlen: 48
2a06:a005:1ff0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:71:d3:b3:81:87:7c:38:ba:09:71:cc:b1:c5:4f:31:da:a8:06:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=C7A6720B9411BE8FFC631A8BE19A3CD895E4C35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:69:4d:ac:f9:90:70:3d:25:b1:8d:29:b0:
d0:8d:95:21:4f:e3:86:0c:ce:27:c4:56:ae:91:90:
47:ff:18:ab:20:e5:0f:7f:58:68:87:bb:e1:94:97:
f9:89:87:2d:e7:88:6c:75:f6:50:fe:b6:49:c4:50:
f1:6c:5e:b1:ec:07:5e:1e:8d:45:32:27:90:14:82:
e2:dc:48:e5:d7:1f:a6:0f:a4:1b:bb:f9:b6:2a:b7:
f5:72:80:33:18:07:37:33:cf:3b:16:65:81:94:d6:
37:e0:41:42:ba:38:51:41:af:d8:77:fb:b0:0f:a1:
d5:62:73:e9:a5:52:66:c5:81:19:e5:3d:fc:3a:91:
97:aa:af:c3:5d:15:f2:0b:3f:ce:77:48:6b:b7:bb:
27:71:86:ed:02:76:6c:b6:22:7a:cd:ad:50:28:78:
ce:c0:de:74:3f:6a:53:9a:a3:ed:3b:23:c7:2e:ce:
2b:fc:b6:a4:33:93:83:37:a0:7a:14:de:83:26:77:
30:69:af:5b:b7:fe:83:c9:79:c1:36:84:73:c9:1d:
fc:02:44:c7:59:bb:f1:1d:d8:1e:17:ef:e2:46:c5:
44:be:98:9a:9f:ee:e7:30:79:10:3c:07:3d:fc:58:
26:8a:da:be:9f:26:4e:3d:dd:e1:87:50:09:dd:c7:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:72:0B:94:11:BE:8F:FC:63:1A:8B:E1:9A:3C:D8:95:E4:C3:5E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1279::/48
2a06:a005:1ff0::/44
Signature Algorithm: sha256WithRSAEncryption
19:38:50:07:92:10:50:90:59:35:c7:d6:a9:87:78:d1:6b:e2:
e3:6b:2e:46:02:8b:9d:ef:4f:b7:10:b6:b0:c2:5c:12:c4:03:
bc:6b:a2:0d:15:44:1c:8c:ab:e7:6d:c4:65:0f:9d:cd:78:03:
67:f8:ea:6f:a2:05:4d:a9:74:7f:ec:3d:01:5b:e1:b4:18:8f:
97:cd:8a:6c:5c:09:a6:fd:b5:bc:80:67:7a:31:2e:c4:fa:5b:
12:c6:67:98:55:c4:16:56:24:03:e3:75:25:7e:f0:8d:03:f9:
9b:10:bb:75:75:08:52:15:3f:71:fe:5f:55:ea:9a:20:72:0a:
79:24:9d:5c:d3:a7:72:09:a2:cc:6f:5f:a0:5c:67:c2:3c:a3:
d5:6d:03:47:de:4e:c0:5d:e7:58:64:96:da:23:c4:2b:c1:f3:
08:23:dd:bc:5b:6b:65:f0:97:88:28:07:9a:a0:0d:79:8a:70:
09:7c:f0:81:ba:5c:9c:fd:d9:33:be:92:00:a4:f4:7d:96:fe:
94:26:88:54:ee:35:69:51:a9:89:13:51:97:06:20:43:2e:52:
6c:df:a6:82:1d:06:2b:8a:bf:dc:e5:7a:7d:e4:df:7f:ac:10:
a3:98:1b:70:8e:69:7b:30:36:f2:08:a3:e7:9e:06:9e:81:5d:
a9:02:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:30 2025 by rpki-client