Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202941.roa
File: AS202941.roa (raw, json)
Hash identifier: Tk3e789y75zgWRAylgLEvqDqHVgL/c5hFHu3Gww+ZAE=
Subject key identifier: 0E:8A:0A:D1:6A:F8:F6:33:10:E5:C4:C2:0A:7B:69:F4:AC:84:1E:45
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 556F016BF97936761BB6606C6F4B4AF40B561920
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202941.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 202941
IP address blocks: 2a06:a005:21d0::/44 maxlen: 48
2a06:a005:21e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6f:01:6b:f9:79:36:76:1b:b6:60:6c:6f:4b:4a:f4:0b:56:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=0E8A0AD16AF8F63310E5C4C20A7B69F4AC841E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:2a:5b:d3:da:26:8e:04:8d:78:35:69:ae:
2a:51:84:a5:a6:91:70:03:05:0a:60:51:c8:d8:55:
41:52:46:6e:1e:43:7a:22:e0:80:71:d5:6e:a0:8b:
bb:f9:95:b5:47:a5:5b:e9:72:12:f6:24:17:55:d5:
b5:3e:8a:21:3f:c6:32:95:f1:02:53:df:62:72:5e:
24:cb:7e:07:c7:b4:70:3a:fc:df:d2:51:84:c2:91:
64:c0:5f:01:7b:64:2e:c8:58:35:06:fe:1d:e3:52:
74:d6:3c:da:8e:6b:95:b6:6c:5d:6b:64:03:fe:99:
27:c0:73:47:c5:db:69:01:a0:25:93:df:bc:67:1e:
16:ee:4e:d7:df:d2:7f:01:39:b1:1d:35:c2:3c:b9:
c0:92:9f:80:37:87:4a:dd:ec:3f:49:62:b5:cb:91:
6e:45:f5:a3:97:84:54:b3:53:3f:5b:7f:9e:de:7b:
d9:b6:23:56:79:d8:8f:8f:1e:3e:87:1e:cc:c3:27:
07:42:d1:00:48:0d:5f:cb:ca:39:8e:91:95:94:60:
e7:20:cf:08:1b:d3:ca:97:9e:c3:a5:33:4a:81:71:
51:e1:63:da:d9:12:ce:2c:f7:76:a1:14:c8:0d:8b:
47:7a:ef:c5:e6:80:39:59:92:d7:30:73:14:c6:89:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8A:0A:D1:6A:F8:F6:33:10:E5:C4:C2:0A:7B:69:F4:AC:84:1E:45
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:21d0::-2a06:a005:21ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:6d:bf:f6:88:b3:12:e7:8a:72:54:66:e0:3a:09:5e:25:a3:
59:43:fc:1c:93:ac:0f:01:c7:7f:85:02:c7:7b:b2:11:d8:c2:
98:dc:7f:c0:1d:50:75:14:b4:a5:e2:6e:a7:a9:ff:38:8c:25:
44:95:fd:12:b4:26:51:b7:fc:af:38:37:2c:bd:32:88:4d:3c:
cb:6d:aa:6a:88:a7:34:83:23:20:05:0c:e3:98:f2:52:10:3a:
cc:84:43:fe:6d:b3:20:e2:81:41:d4:6b:81:45:c5:91:7c:c5:
98:60:b0:44:4f:04:7c:ab:49:c1:91:b0:3e:a0:ad:9d:e9:d7:
fc:c1:a4:ca:e6:8e:78:2d:19:dd:55:63:06:94:22:8f:b0:3f:
0f:d3:70:98:97:6d:da:f8:49:b5:73:d6:b0:f8:a4:e5:41:79:
91:c3:1e:dd:3d:e1:27:ce:7a:bc:24:11:2f:4f:5f:c5:d9:00:
97:b8:4d:1f:29:a4:41:54:59:e5:f9:b3:4e:a4:4d:bf:74:cc:
95:e9:06:b8:cc:fa:fd:1e:53:ef:dd:c1:6f:be:27:c0:61:56:
2c:d7:4b:8c:93:7e:47:8a:66:ff:01:99:a9:1e:15:28:0a:da:
27:06:09:31:b6:a9:57:a0:b6:d1:94:1c:91:88:ac:1e:11:75:
57:9b:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:40 2025 by rpki-client