Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203062.roa
File: AS203062.roa (raw, json)
Hash identifier: W/v+ZyK/B2XvrFSii0sod9Vcf2VHNlq988tSQ2UkBZs=
Subject key identifier: 7B:2E:64:C6:9C:83:57:49:9E:AD:1B:4A:62:4F:67:E2:AB:E1:4D:A8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7C6219969213488B013D54CC6DC354A32C11144A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203062.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 203062
IP address blocks: 2a06:a005:487::/48 maxlen: 48
2a06:a005:5af::/48 maxlen: 48
2a06:a005:1d40::/44 maxlen: 48
2a06:a005:22d0::/44 maxlen: 48
2a06:a005:22e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:62:19:96:92:13:48:8b:01:3d:54:cc:6d:c3:54:a3:2c:11:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=7B2E64C69C8357499EAD1B4A624F67E2ABE14DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:34:e4:ea:e5:52:df:d9:df:6e:91:58:0b:
da:d5:1b:0f:a9:04:2f:31:0c:10:6e:6d:9d:16:ab:
cb:3b:3d:05:97:9a:f8:5b:cb:f7:90:83:2d:44:61:
71:ed:a9:7c:9f:47:2f:60:6e:f2:57:30:4a:43:1c:
67:98:b6:68:1f:4b:00:50:3c:7e:c3:1c:c8:19:ba:
a9:42:18:55:a6:ee:fc:1f:ca:c4:c3:d3:d7:00:27:
85:69:58:17:47:dc:2c:cc:0b:a9:51:f7:fb:fb:45:
9d:31:05:88:16:27:01:c3:76:c5:f6:e4:8a:2f:08:
0c:d6:31:70:bd:57:3d:0e:5b:15:bd:18:fa:dc:a0:
86:cc:11:fc:bf:ee:15:1b:20:8b:42:4c:bc:f9:4c:
df:6a:18:93:a2:65:d9:0a:93:b4:66:b4:8e:96:46:
e8:f3:64:6f:2e:cb:6c:7c:e4:53:3c:0a:3a:c6:cb:
b0:87:66:62:57:57:02:0e:70:c7:e5:68:c0:3d:c3:
b7:30:68:a1:bd:ce:0f:f6:d5:77:50:db:cb:2b:29:
72:c5:1a:20:ad:10:53:42:84:03:e7:ee:18:67:0d:
62:6c:93:1e:21:61:94:ad:db:b9:ae:40:68:1a:6f:
ab:53:97:78:f8:86:77:9c:cf:2a:d3:e4:65:3e:5b:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:64:C6:9C:83:57:49:9E:AD:1B:4A:62:4F:67:E2:AB:E1:4D:A8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:487::/48
2a06:a005:5af::/48
2a06:a005:1d40::/44
2a06:a005:22d0::-2a06:a005:22ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ce:de:e7:3d:65:73:32:44:2c:45:43:97:bb:79:73:ee:8e:69:
01:81:ee:be:b2:91:d6:cd:28:de:0b:b1:8e:87:08:e5:3b:38:
90:11:00:b7:c7:7a:e0:f2:c2:5f:39:af:b2:6a:c6:12:07:4d:
37:5d:e4:7a:b8:78:a7:2e:d9:4a:52:6e:29:db:b6:e3:d4:3c:
5c:55:5d:24:b2:c4:7b:9e:92:09:ed:9c:da:22:4a:cf:95:0d:
3c:a4:0b:af:9a:6d:be:fc:8a:23:c4:fc:61:2f:cb:7f:30:f5:
c8:88:47:a9:54:88:a1:b7:3d:ee:1f:e7:81:7d:ba:17:ec:47:
6a:ae:9b:d9:09:35:6a:b7:cb:c3:50:7d:65:f9:7b:8f:ce:3e:
98:a7:af:55:b2:25:14:f3:f0:35:3f:36:ed:a3:8f:cd:ea:19:
08:d7:8c:31:24:4c:b5:c0:ed:82:04:a3:58:b6:89:53:4c:1b:
a3:47:f6:ad:61:60:4f:85:dc:c8:29:74:83:45:10:ef:e2:6f:
3d:f1:6b:28:0f:50:0b:ba:a7:5a:ac:95:61:11:59:c7:db:ca:
cf:32:e3:19:39:ba:6e:c9:7e:d9:53:4f:a5:76:f7:88:d0:a7:
e5:6d:f9:63:26:f8:c2:27:9a:3b:a4:a3:e1:65:f7:c4:a7:d0:
08:8c:5c:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:54 2025 by rpki-client