Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203169.roa
File: AS203169.roa (raw, json)
Hash identifier: YWllBKYxiL5/fs35cuaaGAJfF86pPQHK6c1m8WQu3ss=
Subject key identifier: 81:D5:AE:17:63:D8:D0:19:0C:85:AE:BA:7D:AF:11:63:CF:8F:C8:B4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6F5B571C7C2F075C62AB498589877276D42DDDBD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203169.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 203169
IP address blocks: 2a06:a005:485::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:5b:57:1c:7c:2f:07:5c:62:ab:49:85:89:87:72:76:d4:2d:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=81D5AE1763D8D0190C85AEBA7DAF1163CF8FC8B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:65:02:c4:89:b0:c9:d3:a9:1e:dd:89:4f:5b:
19:db:a6:d8:b1:4b:0a:fc:90:20:6f:e6:05:d2:1f:
c0:cc:4c:25:6e:3e:ec:1b:78:29:cd:15:a4:50:de:
0a:09:4a:2f:ed:f5:a6:59:a6:c7:b9:b7:bb:60:55:
eb:ed:0e:17:8a:43:f6:8c:70:7e:76:05:e2:4e:4f:
3a:2e:44:f0:20:bb:88:7d:7e:93:89:66:9f:e8:62:
7a:43:49:e6:fc:74:ed:bc:22:f9:89:56:0c:6d:81:
e2:a5:f2:52:33:f2:86:f8:62:69:ad:59:5a:56:89:
c0:a5:0a:a6:d3:c8:7f:18:19:f4:44:32:ca:54:99:
f9:e9:42:0b:2a:16:cc:0b:47:6d:13:e7:8f:d8:1a:
25:4d:e1:6b:58:98:85:1c:9a:60:47:44:48:af:5d:
e7:c6:c2:65:5d:d7:a4:d2:6d:c8:1c:e5:cb:33:bb:
74:af:37:7a:d9:a7:6f:c7:72:ef:ef:a7:f8:75:7f:
1f:81:17:31:08:d9:32:e8:ab:95:e0:fe:94:dc:9e:
d5:3a:ee:01:cf:b3:3a:5c:d5:5c:68:cb:c6:d6:54:
5b:a8:c4:19:b2:eb:61:1f:27:94:7b:b7:cd:86:5c:
c6:bf:12:3d:f1:cf:ed:02:b3:8c:8f:54:05:8d:05:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:AE:17:63:D8:D0:19:0C:85:AE:BA:7D:AF:11:63:CF:8F:C8:B4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:485::/48
Signature Algorithm: sha256WithRSAEncryption
df:1d:7b:ab:d5:58:db:71:eb:2d:87:34:e4:41:23:e8:f7:4a:
22:b0:f9:03:49:c1:bb:07:4f:c9:9f:c1:e3:9d:ad:01:ca:3c:
2c:47:ed:b6:95:43:bc:01:8d:da:5f:9e:0b:17:a2:d4:19:12:
a3:76:f4:d6:29:70:c8:06:07:38:f6:9b:63:59:ca:80:62:45:
dc:d2:d6:75:91:9c:a2:1d:cb:7e:ab:78:a2:04:35:a4:92:c9:
0f:42:96:0b:08:a4:e0:ce:e0:33:6f:70:c3:dd:53:f0:ef:11:
44:c9:98:d5:31:76:d8:f5:7c:a6:6c:be:46:86:78:f3:67:ba:
b5:f9:44:5a:82:1f:03:eb:f9:07:a9:6d:c4:16:62:2f:c4:37:
45:c9:d9:51:ef:30:5d:3f:40:f3:cd:40:63:09:4f:bd:26:c0:
8f:d2:97:18:bb:ba:f7:6c:6b:d7:c8:db:e0:9d:aa:9b:66:50:
df:22:75:fe:12:ed:22:ca:23:1d:b7:76:98:f0:da:9e:19:fa:
4a:83:e0:e2:80:c8:53:1c:60:4e:f5:4c:a1:ce:72:ca:da:70:
97:03:23:2f:a8:f3:85:9c:9b:1e:5e:22:45:ef:19:3f:2b:fb:
0b:4a:e2:09:fa:c0:0f:da:fc:8f:f5:d5:45:fa:e6:a0:40:d2:
a6:a4:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:26 2025 by rpki-client