Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203069.roa
File: AS203069.roa (raw, json)
Hash identifier: q/HIVrzlHMjfpCNo3qkhOe2YVFEQ2zHHR1I81wb7XYs=
Subject key identifier: 46:97:41:A6:2E:01:14:EE:8F:0D:9A:77:66:27:D9:D4:C3:1A:68:94
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2990B63ABF5F716D5529F2DC02F9264C3FA68375
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203069.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 203069
IP address blocks: 2a06:a005:488::/46 maxlen: 48
2a06:a005:1af0::/44 maxlen: 48
2a06:a005:1b00::/44 maxlen: 48
2a06:a005:1b10::/44 maxlen: 48
2a06:a005:1b20::/44 maxlen: 48
2a06:a005:1b70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:90:b6:3a:bf:5f:71:6d:55:29:f2:dc:02:f9:26:4c:3f:a6:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=469741A62E0114EE8F0D9A776627D9D4C31A6894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:a9:ea:7e:a8:d1:75:ce:21:c3:30:6b:6e:
f7:3b:41:b5:bd:ac:b4:89:2d:8e:3f:84:0d:6d:bd:
79:bc:0c:07:a0:83:6f:53:b3:d8:6d:06:24:99:0f:
79:87:23:9e:84:4e:4d:02:c5:10:22:71:35:ac:3d:
39:e8:95:51:56:31:8e:1f:d5:3a:48:d2:82:11:70:
40:05:76:ce:c1:32:c5:88:63:13:31:47:93:cf:32:
91:a3:2e:0b:f3:69:0f:52:a3:ed:27:6c:89:c0:12:
8f:ee:08:12:51:92:72:d4:a3:1e:26:ce:5d:6f:4e:
f6:94:76:3d:a7:16:ca:ee:0d:a1:7d:31:0c:f7:16:
40:1d:c7:dd:77:7c:c3:00:28:e9:f2:e6:2e:8f:b3:
ae:a7:64:0d:f1:35:7e:09:49:32:40:c3:58:69:ad:
d2:fc:17:bf:27:0a:5d:63:4a:79:93:f9:ef:28:10:
67:28:89:e8:6b:28:e2:84:40:16:66:5c:1d:b8:7f:
ae:e9:f3:aa:ba:3b:72:6c:b7:5c:22:f7:6f:c2:6c:
e1:b5:53:cb:49:b3:ef:7d:63:39:56:c6:28:e0:92:
c3:02:1d:15:b5:19:15:4a:5d:e1:43:7e:e4:ed:24:
2a:ad:58:05:da:36:64:5d:97:9f:08:eb:d3:ad:40:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:41:A6:2E:01:14:EE:8F:0D:9A:77:66:27:D9:D4:C3:1A:68:94
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1b70::/44
Signature Algorithm: sha256WithRSAEncryption
46:6e:29:a9:fd:c2:1c:ed:3d:d0:9d:d1:20:74:32:5d:f6:5e:
d6:9a:9f:39:9a:96:c5:a8:64:58:5b:9d:b4:ea:a3:f9:58:2e:
8f:2d:a5:34:8e:eb:80:fc:cb:7f:d4:2c:fd:44:44:86:19:0b:
e9:34:31:32:a7:b5:c6:52:e9:75:40:c6:ca:cf:f3:59:df:68:
a4:31:17:13:bd:c5:26:b0:e5:21:bf:50:b0:eb:6c:02:b0:06:
b0:b1:25:83:1d:15:be:82:d7:a9:34:35:9b:85:4e:0b:fc:1c:
1c:2f:b9:13:5b:67:ca:ce:93:0f:6a:0b:4c:30:fb:3d:04:93:
e3:2a:3c:7c:00:18:43:13:fc:13:e5:4c:a6:50:4e:44:af:ad:
11:71:bc:97:60:17:54:a1:f4:e3:68:3a:b6:1e:7d:df:61:c5:
57:55:f7:4c:ec:9e:c5:2f:24:44:6b:83:a0:1f:0c:ae:8d:7b:
a5:1b:d6:8a:2c:10:ce:7a:40:79:9a:84:75:6b:89:74:44:a4:
df:5b:93:8a:3f:d2:fb:d9:ad:a1:33:9f:8f:c2:17:ce:d8:db:
62:60:34:ee:ee:3e:4e:41:59:dd:43:0d:29:3d:17:dd:26:2e:
2d:a8:17:0c:b8:e7:2f:86:ff:6a:73:7e:c6:74:94:b7:83:b1:
e0:ac:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:37 2025 by rpki-client