Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203005.roa
File: AS203005.roa (raw, json)
Hash identifier: OZYCkdzgo517ssj83yvHKceY7DYvk3Fk45gAwHmrFgo=
Subject key identifier: 43:E5:B7:9F:05:17:8B:29:DB:C0:CC:5D:A9:CA:EA:B6:12:7C:58:A2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2080F71AC3FDF6B31813BC61834FF28ACABA33C4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203005.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 203005
IP address blocks: 2a06:a005:d2a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:80:f7:1a:c3:fd:f6:b3:18:13:bc:61:83:4f:f2:8a:ca:ba:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=43E5B79F05178B29DBC0CC5DA9CAEAB6127C58A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:78:89:3c:7a:5a:bc:de:87:25:0c:4d:d4:
45:c7:c7:22:8d:9a:d7:d9:71:93:22:20:cc:c1:25:
91:30:d8:2e:69:e4:8c:86:32:ca:35:48:65:97:07:
c7:27:3c:ef:c1:8d:b1:2c:74:91:7b:66:3b:e9:49:
31:a1:80:45:42:ca:1e:89:61:4e:17:ee:a5:fe:9c:
ba:e5:1b:0e:d2:5b:23:17:18:1e:53:4d:16:ad:99:
17:89:56:c3:19:cf:31:b2:90:bc:b5:08:0d:bf:58:
4f:cc:6c:c6:d3:1b:0c:43:45:19:48:58:3a:78:9d:
0e:08:e7:f6:9e:80:a5:52:5a:6c:6b:3b:d4:dd:26:
d3:3c:3f:94:7d:ab:f2:d2:e3:6a:5a:1a:13:27:0c:
23:48:17:05:8d:2a:1f:d6:2a:e2:4f:f0:c0:e3:c3:
54:1a:f4:00:7d:c3:14:32:a3:8b:7f:19:fe:bd:d9:
b5:9c:cf:4c:49:5f:af:77:2b:46:c5:55:cd:7b:60:
09:77:14:f8:1e:63:6e:86:40:b5:8e:cb:5e:34:44:
5a:b3:f4:a8:73:20:87:ec:b4:91:e3:47:21:00:16:
40:86:17:05:01:54:41:9b:20:04:ad:8f:52:64:bd:
f0:41:06:ba:11:be:ed:04:e6:46:38:91:4f:71:b8:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:B7:9F:05:17:8B:29:DB:C0:CC:5D:A9:CA:EA:B6:12:7C:58:A2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2a::/48
Signature Algorithm: sha256WithRSAEncryption
2a:1f:bd:ec:03:57:95:84:c4:1b:79:fb:5c:f8:e9:cf:a4:de:
50:f4:db:12:af:66:31:2e:ca:17:35:ac:7e:21:18:41:74:04:
23:69:19:32:9d:c7:73:d6:85:48:51:a2:99:2c:a3:2b:9a:7a:
b1:de:67:e5:67:f5:cd:1a:f7:52:74:67:9f:d6:d7:df:54:43:
89:34:22:13:68:a5:00:7d:d1:25:27:f9:43:d7:ed:d1:45:78:
f4:a4:d5:86:cb:7e:23:15:fc:0f:3b:bb:2d:68:f1:85:9c:36:
07:32:e2:64:6a:bf:5f:c4:a6:c5:65:f9:91:d4:23:d7:c6:ed:
41:ea:e5:68:44:63:62:c2:1f:49:d0:41:fa:1d:7b:e4:58:21:
84:58:70:a4:b5:bb:c6:b4:c5:e8:c9:45:e2:b5:37:5c:a2:79:
65:64:76:4b:3d:8f:5b:2f:1c:55:8b:aa:91:52:b9:ee:8b:c5:
09:e1:36:4b:aa:e9:30:e4:64:91:62:b5:89:35:ef:c3:c0:21:
ae:0e:7f:bf:75:26:f5:6e:65:95:9e:21:11:05:dc:47:3c:85:
a8:e0:71:e7:6f:f5:bc:75:a1:91:ad:54:97:84:ed:7b:ca:17:
13:fa:54:b3:b4:dc:ab:cb:2b:66:1a:26:bf:ee:97:22:7c:18:
9e:9a:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:20 2025 by rpki-client