Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203113.roa
File: AS203113.roa (raw, json)
Hash identifier: owUQWxCSgAqVmlVJ4E2ShQ5nMzvhbOAVKejhv9i1pTw=
Subject key identifier: 64:65:E0:3C:B6:92:22:E2:BB:B7:7D:E9:F3:41:B9:D8:98:3E:BB:13
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 664DEA9FC0202AB20E6800E9FB4CE221F98A3BA7
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203113.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 203113
IP address blocks: 2a06:a005:8c0::/44 maxlen: 48
2a06:a005:2250::/44 maxlen: 48
2a06:a005:2260::/44 maxlen: 48
2a06:a005:22f0::/44 maxlen: 48
2a06:a005:2310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4d:ea:9f:c0:20:2a:b2:0e:68:00:e9:fb:4c:e2:21:f9:8a:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=6465E03CB69222E2BBB77DE9F341B9D8983EBB13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:bc:3c:f2:c1:0e:fc:1d:cf:5d:44:b4:86:
0e:f3:d3:e2:e8:a7:7f:59:72:db:b0:d8:1b:65:7f:
a0:de:f5:b4:66:bf:e9:78:18:9f:60:56:2c:7a:86:
90:c8:e2:01:e3:c1:ea:68:d6:ac:e8:8e:45:0d:d4:
40:77:89:56:69:29:c8:9e:ec:b6:51:88:d1:4b:14:
07:8e:08:73:1a:dc:89:23:a5:28:c8:50:df:84:5e:
db:fb:8f:9f:f2:3f:ef:0b:0a:09:0c:8c:6a:56:f4:
eb:f5:44:3e:79:cd:05:ec:05:c5:19:8d:58:08:7b:
41:ae:e1:41:72:55:d8:a7:6c:2e:4f:db:d8:13:6a:
ee:cf:50:8f:51:d3:88:d0:ab:6e:73:1f:00:01:9b:
37:f7:f9:ec:d8:b2:d1:e6:ba:ce:b5:8b:14:da:a5:
89:4a:31:2a:df:04:ce:78:c6:f4:11:d8:80:ca:26:
80:ea:2f:90:cd:49:2c:8a:d6:6f:b8:45:96:b0:e9:
7f:a5:df:67:23:15:eb:80:c1:1b:26:81:25:59:a9:
c1:9f:d9:6a:3f:3b:6c:3f:5b:af:68:cd:1c:86:b2:
aa:4f:ec:65:d1:1e:2c:16:87:4e:a9:da:9f:99:de:
7b:24:27:85:cf:c6:56:a6:64:c5:51:11:bb:8e:84:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:E0:3C:B6:92:22:E2:BB:B7:7D:E9:F3:41:B9:D8:98:3E:BB:13
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8c0::/44
2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
2a06:a005:22f0::/44
2a06:a005:2310::/44
Signature Algorithm: sha256WithRSAEncryption
41:f8:40:53:84:ff:cd:1b:a2:1f:ad:ee:9c:f5:8f:d0:f6:69:
95:f4:7a:a6:aa:79:b9:df:7c:2c:3e:aa:40:c6:58:e0:f3:06:
c3:2d:fa:33:4c:d4:13:fa:0d:c8:dc:c7:90:a4:bd:db:84:83:
d7:17:e8:ed:a1:04:f9:17:25:f0:7f:18:13:b7:55:a4:db:10:
3f:2e:86:3b:1e:f7:75:83:42:39:c9:d0:2b:b0:21:6c:30:9b:
91:27:b1:40:55:c1:b7:8d:da:8a:11:8f:64:92:76:a1:70:a3:
5a:67:96:33:f6:ad:13:8b:92:50:6b:15:5c:55:aa:0e:fd:35:
ad:c5:c0:88:a5:b5:ad:7b:10:ef:36:37:33:89:5a:e6:58:64:
2b:04:83:87:5f:30:20:49:7f:20:61:1f:b9:32:f3:08:7d:0a:
25:3f:9c:9e:aa:83:10:aa:85:67:7a:91:38:91:f2:8b:a8:a3:
2d:84:94:17:03:98:c1:03:84:68:1d:45:70:54:6c:6e:25:2f:
a9:d2:bd:ea:2c:1c:b7:d6:5b:f1:36:15:f2:4d:07:d7:61:52:
6b:56:69:a2:1d:4e:80:e1:2c:da:72:dd:63:2e:9b:48:32:d0:
4b:1f:c0:4d:bf:26:04:53:da:be:bb:ae:a2:9a:e7:d7:c7:08:
9f:73:00:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:18 2025 by rpki-client