Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202988.roa
File: AS202988.roa (raw, json)
Hash identifier: Uo/ZaoRu42OrjWIqcJ2I+nAbvr/PkWho7KULCJZ6Csw=
Subject key identifier: 7F:8B:47:F7:CB:0F:10:C8:CB:82:50:0C:2E:60:F5:80:CD:D1:2A:D1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6C4C0822E22358467E1907B7F10BBD04959D36AC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202988.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 202988
IP address blocks: 2a06:a005:857::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4c:08:22:e2:23:58:46:7e:19:07:b7:f1:0b:bd:04:95:9d:36:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=7F8B47F7CB0F10C8CB82500C2E60F580CDD12AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:c3:31:99:d6:ce:1c:14:e9:b1:3e:da:06:
7d:fd:0f:b4:7b:7e:34:92:5f:ba:6b:07:ef:4b:2a:
8f:dc:6c:d1:70:11:a4:a5:41:c4:56:b2:96:02:66:
f6:64:32:d7:35:9e:fe:fd:9f:de:d7:58:21:24:d1:
a4:1a:09:20:a9:90:34:65:cf:d8:6a:05:d2:30:73:
9a:7d:68:6d:a5:b7:72:9b:ea:4f:f8:86:60:f5:4d:
84:6f:2d:01:36:98:58:09:79:7e:5a:7e:61:97:9d:
aa:86:42:00:55:3f:47:ed:11:e8:4c:90:63:64:1e:
75:4f:b4:f8:a7:bc:4b:6b:5a:d4:b5:4c:49:2b:7d:
3a:62:a5:c7:a7:81:a9:9c:6f:80:cc:c0:66:ec:88:
ea:f7:eb:6c:05:40:7e:2d:1f:42:80:2f:95:dc:be:
33:33:17:bc:3e:4d:55:7f:b6:53:6b:91:cf:fa:5c:
4a:62:35:6b:19:8a:92:03:32:e3:67:e6:9b:d4:8f:
2e:7e:f2:f7:7d:6a:42:07:31:7c:2c:87:61:5b:d1:
67:56:99:81:2e:b6:ec:15:8c:30:73:48:d9:11:cc:
59:87:6a:0e:e4:af:87:49:71:98:c8:d1:77:2c:03:
cc:05:08:ca:d6:56:8e:9b:9d:13:95:dd:a0:d5:bd:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:47:F7:CB:0F:10:C8:CB:82:50:0C:2E:60:F5:80:CD:D1:2A:D1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202988.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:857::/48
Signature Algorithm: sha256WithRSAEncryption
08:d9:c1:ad:28:83:8a:25:6b:30:79:e4:ea:01:e5:76:88:24:
74:78:6f:d4:bb:e7:58:86:3f:5f:51:ae:28:e2:1f:8f:e3:41:
ca:d1:5c:aa:28:05:fd:84:7b:5d:2a:cd:aa:66:bb:29:5a:94:
46:9f:04:97:c9:4f:bb:1d:9a:21:ce:49:ca:37:4e:09:a7:58:
fe:6e:c5:f9:59:71:6f:90:f1:a8:31:6e:ce:43:9c:4c:01:0b:
75:a1:1f:c5:0a:4d:81:4e:a3:c8:74:a5:e7:7c:13:23:fd:01:
08:54:18:f7:45:0e:e2:74:e7:e1:28:a3:cd:57:62:ed:3e:fa:
b6:98:b9:6f:17:6f:48:8a:e1:82:b2:0d:b1:46:08:35:90:39:
d9:e2:20:46:4e:13:79:02:e1:a6:7a:54:25:d4:d2:7e:5a:04:
3f:5c:59:8f:42:9c:58:ef:fe:86:71:57:e1:3e:19:bb:f2:0f:
96:31:fe:00:f2:21:3d:3b:da:7e:1c:49:88:f5:4f:fa:87:17:
1b:5d:0f:0f:96:d6:3e:19:a8:80:d7:e4:a8:97:aa:67:df:55:
ae:3e:07:d2:69:71:41:9c:f0:96:6f:5f:a4:9e:20:b7:47:21:
34:ca:03:58:13:61:f9:fd:2a:a8:37:43:c5:7b:e6:cc:66:cc:
8f:f7:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:43 2025 by rpki-client