Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203145.roa
File: AS203145.roa (raw, json)
Hash identifier: hzhKAGRhPN45o7yPXsI9AF6mSVNBsD1xx1mrfzG5YdQ=
Subject key identifier: 5F:99:28:81:72:75:AA:10:66:D9:54:CB:9B:68:80:F1:9E:A1:05:6E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4E884028EC9C6C807A2EB64572EDB2B3EB4C355F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203145.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 203145
IP address blocks: 2a06:a005:a0f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:88:40:28:ec:9c:6c:80:7a:2e:b6:45:72:ed:b2:b3:eb:4c:35:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=5F9928817275AA1066D954CB9B6880F19EA1056E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:61:d1:61:97:20:c6:73:f6:fe:2a:f1:2b:
3a:57:e1:0a:cd:4b:fa:78:b9:ee:58:47:82:11:3e:
65:fe:94:19:00:18:87:70:80:e1:ce:69:d1:d1:d9:
96:a5:a3:68:54:74:f4:b7:73:e3:9f:9d:5a:6b:8b:
71:9a:5f:11:71:99:b8:de:01:ee:14:f2:21:2b:1e:
1f:8b:13:9b:1d:87:5e:dc:2e:b0:36:92:c7:a2:68:
ae:1b:f8:bc:35:ec:e3:87:96:8c:ec:58:13:5e:54:
4d:00:48:96:6f:65:51:d5:41:5c:a0:81:11:59:e6:
6e:19:6a:aa:ed:59:69:3f:44:5b:ed:f1:0e:92:67:
f8:11:b6:a9:0c:bb:60:c1:ff:e6:77:6d:f7:6c:10:
3b:a8:ed:ac:50:9a:e4:cf:b4:ae:61:3a:1f:89:f5:
54:f0:98:18:64:e7:96:1b:4e:00:f6:02:e7:12:29:
a0:ad:06:f3:2a:b4:65:d3:79:57:30:dd:cd:cc:36:
66:67:e1:06:4c:67:e1:ff:1f:01:d7:5f:dd:b8:99:
31:27:0a:60:22:a2:6a:90:63:34:f3:71:f9:36:7d:
2b:be:55:59:14:e4:0d:3c:46:f9:68:ec:e4:e6:7f:
fc:cb:83:c8:54:e1:a3:ce:0b:eb:dc:81:18:63:fb:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:28:81:72:75:AA:10:66:D9:54:CB:9B:68:80:F1:9E:A1:05:6E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0f::/48
Signature Algorithm: sha256WithRSAEncryption
32:1c:f1:f4:03:6f:db:7f:93:1e:9b:38:be:b7:98:02:b8:75:
d5:4b:ea:ec:66:23:0b:94:0a:91:5e:77:6d:2a:d7:fa:6b:9d:
96:e9:c3:4e:3f:f2:be:08:28:4f:33:32:33:99:5b:75:51:06:
80:cb:37:4c:a6:54:6d:04:a8:7b:83:8b:6f:63:c2:48:bf:41:
0c:b7:4e:00:32:9d:eb:96:e3:8c:af:4b:b8:6f:a1:c7:25:7a:
80:8b:c5:10:fe:41:0d:c3:e5:b2:a6:f0:d9:fb:57:12:ac:49:
05:71:f6:33:1d:c0:d8:b4:f2:70:7c:c0:41:2c:5f:a0:5b:27:
16:5e:17:8e:85:a4:3f:e3:6d:b8:3d:89:b5:5b:99:5e:97:33:
0c:cc:78:35:7d:ca:b6:fd:3d:7e:45:34:e7:88:20:5a:da:c2:
7f:db:43:d5:f2:7f:cf:eb:15:54:49:f9:28:60:2a:45:d6:b3:
ce:af:0d:03:a1:fa:da:a1:88:5a:34:27:18:c0:50:1c:27:ba:
2f:22:f9:4f:b6:30:60:9f:63:62:db:bb:d4:8f:80:3f:0b:34:
5c:e3:ed:5e:ef:f9:92:66:8a:ba:16:21:f3:7d:db:c7:6a:d8:
5c:93:61:42:55:29:50:7c:af:9d:44:c0:23:92:02:6c:d4:17:
1f:a2:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:04 2025 by rpki-client