Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203174.roa
File: AS203174.roa (raw, json)
Hash identifier: ivhntJswPlvhTuWLHbki+9OypN7GwdZomHlO4sBxwYw=
Subject key identifier: F3:18:7E:7A:3E:1A:70:0E:90:1F:B6:48:D4:C2:0B:B9:1A:04:18:F3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4DBFB7C90A8EDA716766859A794380946F1A8E66
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203174.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 203174
IP address blocks: 2a06:a005:1900::/44 maxlen: 48
2a06:a005:1a10::/44 maxlen: 48
2a06:a005:1fb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bf:b7:c9:0a:8e:da:71:67:66:85:9a:79:43:80:94:6f:1a:8e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=F3187E7A3E1A700E901FB648D4C20BB91A0418F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:d7:f5:a1:09:19:8d:67:71:c2:16:b9:42:
06:90:9c:ee:30:1c:29:bf:40:80:72:d7:a8:f9:d0:
27:68:2a:20:8e:48:be:3f:3e:ec:d0:dc:c9:99:72:
99:0a:f3:a2:84:d5:b6:dc:b0:d9:9a:7c:21:c9:d2:
78:e8:75:d8:f2:26:ef:8c:15:21:3c:54:56:a7:33:
09:d3:18:58:0e:a2:82:8d:2d:5f:b3:c6:51:b1:cb:
d6:22:3c:39:bf:cd:a4:3a:db:bf:25:b8:c8:3d:e8:
15:71:d5:d9:e2:b6:96:26:53:2a:e2:0e:bb:5c:64:
94:e7:51:46:b1:e4:5e:95:ab:e7:2a:f8:df:29:c1:
64:f1:ff:26:98:f0:8a:9c:61:51:4c:e7:45:86:9f:
de:06:6a:28:6d:55:4e:83:5a:b1:92:77:2e:1a:a9:
4a:6c:a9:f6:35:1c:60:20:64:84:1d:78:d9:c0:76:
ca:cb:ff:79:3e:9e:47:6a:ce:6a:ea:55:68:1e:3a:
c9:bb:9f:1f:93:f1:a6:54:75:ba:05:b2:e1:ca:40:
33:57:e5:ec:fb:35:49:fb:87:75:0a:3e:06:87:c7:
53:22:9e:67:81:70:9f:a0:69:3c:81:fc:aa:c9:18:
5b:02:91:98:c0:fd:cd:71:3d:50:fc:23:6d:29:b6:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:7E:7A:3E:1A:70:0E:90:1F:B6:48:D4:C2:0B:B9:1A:04:18:F3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1900::/44
2a06:a005:1a10::/44
2a06:a005:1fb0::/44
Signature Algorithm: sha256WithRSAEncryption
9e:85:4d:15:a2:c3:8e:95:e7:8f:c8:df:f7:df:57:75:0d:e9:
1a:da:c0:ca:fc:cc:68:42:48:35:49:7b:3f:76:1c:51:42:4d:
49:73:d8:5c:ad:a4:14:5a:44:be:82:20:1a:ae:c3:f8:ed:cb:
34:37:af:e6:7b:6a:75:5b:c1:5f:32:aa:82:3d:73:6a:ca:d3:
25:92:e6:f0:a5:bb:38:eb:e0:c0:c1:a0:d6:da:dd:44:d4:93:
26:ff:65:9c:9c:4c:9d:5a:b5:bb:b8:bf:b6:bb:a9:0f:f5:61:
6c:27:55:96:14:51:e9:0c:09:bd:e6:ba:c6:d3:0c:c4:c6:32:
90:ac:4b:77:6f:f4:fe:ea:8b:7a:ee:3d:7b:e7:38:8d:cc:bb:
59:f1:e2:f5:18:e6:52:84:4a:e6:be:90:70:e4:e6:c4:59:7b:
08:c4:b8:4d:f4:17:41:35:c5:4e:78:39:26:15:d1:7b:52:53:
f0:3e:ef:a2:8e:89:74:40:25:8c:dd:8f:b6:63:c5:2c:db:3b:
a1:99:f2:2a:21:60:3e:e4:88:c1:7c:8c:f5:9e:a8:cc:34:69:
d5:e9:df:89:29:d2:68:64:d9:26:06:3f:d5:71:c7:47:77:f4:
37:14:53:ae:23:cf:73:7c:82:5b:e0:0b:a8:9d:c3:4b:d3:d1:
cc:31:69:9f
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUTb+3yQqO2nFnZoWaeUOAlG8ajmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTBaFw0yMzEyMjAxNjU2NTBaMDMxMTAvBgNV
BAMTKEYzMTg3RTdBM0UxQTcwMEU5MDFGQjY0OEQ0QzIwQkI5MUEwNDE4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQNf1oQkZjWdxwha5QgaQnO4w
HCm/QIBy16j50CdoKiCOSL4/PuzQ3MmZcpkK86KE1bbcsNmafCHJ0njoddjyJu+M
FSE8VFanMwnTGFgOooKNLV+zxlGxy9YiPDm/zaQ6278luMg96BVx1dnitpYmUyri
DrtcZJTnUUax5F6Vq+cq+N8pwWTx/yaY8IqcYVFM50WGn94GaihtVU6DWrGSdy4a
qUpsqfY1HGAgZIQdeNnAdsrL/3k+nkdqzmrqVWgeOsm7nx+T8aZUdboFsuHKQDNX
5ez7NUn7h3UKPgaHx1MinmeBcJ+gaTyB/KrJGFsCkZjA/c1xPVD8I20ptk/fAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQU8xh+ej4acA6QH7ZI1MILuRoEGPMwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAz
MTc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/
BCUwIzAhBAIAAjAbAwcEKgagBRkAAwcEKgagBRoQAwcEKgagBR+wMA0GCSqGSIb3
DQEBCwUAA4IBAQCehU0VosOOleePyN/331d1Deka2sDK/MxoQkg1SXs/dhxRQk1J
c9hcraQUWkS+giAarsP47cs0N6/me2p1W8FfMqqCPXNqytMlkubwpbs46+DAwaDW
2t1E1JMm/2WcnEydWrW7uL+2u6kP9WFsJ1WWFFHpDAm95rrG0wzExjKQrEt3b/T+
6ot67j175ziNzLtZ8eL1GOZShErmvpBw5ObEWXsIxLhN9BdBNcVOeDkmFdF7UlPw
Pu+ijol0QCWM3Y+2Y8Us2zuhmfIqIWA+5IjBfIz1nqjMNGnV6d+JKdJoZNkmBj/V
ccdHd/Q3FFOuI89zfIJb4AuoncNL09HMMWmf
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:04 2025 by rpki-client