
Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202996.roa
File: AS202996.roa (raw, json)
Hash identifier: FzARiyBNYdDChYJoqhPHxwz1HVYfFqcniRQ9ost/plo=
Subject key identifier: 22:B6:4A:3D:1D:80:D4:6B:1A:DD:58:44:92:78:0F:11:49:51:A2:FC
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1C092919125A3C396026FAED396FDC1EE6B2E161
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202996.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 202996
IP address blocks: 2a06:a005:5a4::/48 maxlen: 48
2a06:a005:d2b::/48 maxlen: 48
2a06:a005:1680::/44 maxlen: 48
2a06:a005:16b0::/44 maxlen: 48
2a06:a005:1c00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:09:29:19:12:5a:3c:39:60:26:fa:ed:39:6f:dc:1e:e6:b2:e1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=22B64A3D1D80D46B1ADD584492780F114951A2FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:a3:b3:23:67:82:23:70:35:28:b4:ef:b7:
01:c2:4c:20:2e:35:69:2a:9c:dc:84:cc:a9:0f:e0:
14:d1:17:10:a7:48:5e:7e:cf:a7:df:11:0e:aa:f6:
3a:d3:66:9c:90:11:da:ac:7c:67:22:ca:5f:92:d9:
10:4d:d8:af:f4:50:88:3b:16:67:02:2c:97:56:ad:
5e:b6:2b:da:d8:77:c7:f3:6d:59:fc:ea:39:63:13:
8f:b3:f4:8a:35:50:43:03:e1:e6:e4:dd:d2:36:f4:
4e:08:ef:0e:42:08:fb:23:47:94:26:92:f9:e3:22:
89:18:47:09:77:af:ed:56:9f:b7:6c:f2:cc:4a:10:
b6:e9:e6:9c:7c:c7:14:10:a5:3d:70:1a:7f:04:86:
3a:59:78:d9:ae:33:ae:66:d7:cc:c9:a1:4b:d8:a8:
a7:71:87:55:7d:bf:8a:dc:af:71:35:58:90:7f:3a:
14:e7:01:66:5b:16:b2:cb:26:6a:e2:68:42:f3:49:
02:40:6d:6a:d4:45:64:5f:49:68:c6:b2:74:50:6b:
d9:ef:33:ca:65:a1:92:10:b1:b5:a6:f0:b2:f6:06:
a7:36:65:21:6c:6c:95:29:a0:55:4d:80:0d:41:2a:
a7:04:7d:ed:df:84:d1:0e:24:7c:e9:84:07:4d:82:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:4A:3D:1D:80:D4:6B:1A:DD:58:44:92:78:0F:11:49:51:A2:FC
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a4::/48
2a06:a005:d2b::/48
2a06:a005:1680::/44
2a06:a005:16b0::/44
2a06:a005:1c00::/44
Signature Algorithm: sha256WithRSAEncryption
1c:a7:ef:e0:5f:f1:b2:36:5f:92:de:dc:cb:d1:86:e8:d8:3d:
8d:9e:6f:46:7c:df:1c:45:3b:88:ba:ca:44:5a:b9:5c:e9:0a:
bd:d1:4e:5a:da:75:5f:04:ba:a2:7c:3b:dc:2e:73:ef:b0:22:
4b:49:57:f9:86:81:96:bc:8c:93:98:bc:86:a8:67:88:22:10:
cc:61:0c:24:8b:25:2c:9b:4f:a2:a3:47:3b:35:07:23:ac:50:
29:ba:8d:26:74:8a:07:56:48:b7:90:24:d1:65:03:22:4e:52:
ab:28:2e:20:30:ba:0e:a1:e8:fb:1d:c4:58:9a:f1:70:69:22:
68:fd:9f:b7:d8:8d:8e:7f:fe:a5:da:4f:44:a3:25:f3:e4:0b:
5d:25:da:59:cd:89:96:8b:5c:c4:2b:c7:dd:91:d1:38:56:33:
34:36:4a:8e:fe:16:7e:6a:ef:0c:4d:58:f0:20:f2:ff:73:10:
78:d9:69:57:bb:ff:fb:e9:10:7e:dc:59:32:25:f2:bf:e6:97:
2f:6a:7e:e7:b1:9f:ca:32:67:39:2b:a8:ad:ef:0a:cd:97:a7:
b1:1a:ca:2f:f2:e9:e7:b3:92:65:25:e0:3e:a2:70:41:9d:11:
2a:63:7b:56:23:d8:b4:d8:ac:a8:4d:c5:df:6e:c7:38:43:ad:
9b:37:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:56 2025 by rpki-client