Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203199.roa
File: AS203199.roa (raw, json)
Hash identifier: bXiT7evXC+BVPvznxSZjdRLRuu3oVIuiei/97VdQpqU=
Subject key identifier: 68:84:1D:A7:44:65:7B:44:DC:94:36:69:F8:E9:FA:6F:67:9D:EA:E3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 23A2FCC3713A736CDD8C76DCD38778EF0723E188
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203199.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 203199
IP address blocks: 2a06:a005:19d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a2:fc:c3:71:3a:73:6c:dd:8c:76:dc:d3:87:78:ef:07:23:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=68841DA744657B44DC943669F8E9FA6F679DEAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:52:85:36:a3:28:05:0c:1d:cc:68:b5:37:
8c:87:58:e4:42:67:c3:2e:03:81:c0:90:7c:00:39:
d1:f1:68:62:1f:64:ed:97:d0:07:dd:d8:b9:03:c9:
25:c5:26:2e:f2:e6:79:4b:1b:bc:a5:3d:64:13:01:
3a:55:d8:26:b4:34:ca:41:25:8e:4e:e4:93:e8:14:
ea:23:78:19:f0:83:19:75:02:58:25:3c:bf:93:25:
bd:a8:f3:99:42:32:94:bf:b5:4b:e0:27:3d:35:4f:
ae:67:82:d7:7b:b2:a0:91:c4:75:e4:e3:c4:8e:68:
fa:b1:db:62:70:29:44:61:32:8f:5a:11:99:0c:06:
02:49:88:e8:66:6e:fa:98:56:c4:d7:81:be:9a:d0:
a4:26:e8:07:be:08:e7:91:e3:e3:b4:56:5c:8e:c9:
8a:78:6b:ae:ce:79:7e:37:77:c9:5d:17:f9:16:28:
df:ca:1f:39:09:7a:16:79:38:a4:86:81:1c:1a:59:
f7:8b:ca:ac:0e:4c:18:aa:0a:5d:bf:df:79:00:c0:
fa:77:63:92:14:d4:50:19:0c:40:18:66:0c:82:14:
87:eb:c9:1b:6a:9b:13:75:27:11:da:36:9e:1e:ef:
99:d3:35:ad:6c:12:e5:30:7e:19:a4:be:53:66:4f:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:1D:A7:44:65:7B:44:DC:94:36:69:F8:E9:FA:6F:67:9D:EA:E3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19d0::/44
Signature Algorithm: sha256WithRSAEncryption
ba:56:76:48:4b:43:ee:50:30:3d:ba:f6:71:c3:67:10:30:39:
70:08:d7:b0:09:88:5b:23:d5:ff:a2:f0:01:f8:1a:7b:b0:21:
3e:df:9c:47:e4:62:10:a3:3c:e0:36:a6:21:86:bd:84:7e:5d:
d2:60:6d:4c:b4:bb:b1:95:bd:5c:f9:3f:64:e4:b4:6b:fd:a6:
6d:5a:0a:3e:35:de:bb:d1:41:cc:42:ed:17:f0:43:47:65:e4:
d7:d1:9b:43:1f:63:3a:1c:48:96:38:da:94:d6:4d:99:80:58:
b5:1f:58:55:4d:25:48:ac:97:76:5e:24:1c:a1:49:9b:18:6e:
52:88:ca:87:b8:77:d7:1e:6a:7c:cf:a3:4f:c3:6e:23:b0:6d:
0a:37:30:de:c2:64:b5:5e:da:e4:2a:1a:cd:5d:b4:64:61:96:
de:b3:77:7c:38:e2:b4:9a:62:b3:b5:4c:de:90:ca:c7:d8:6d:
06:b5:39:8a:de:2d:34:ba:c8:1d:20:72:47:9b:43:79:ed:09:
40:9f:f2:d6:3c:91:1d:4d:06:23:b3:5b:4d:98:ac:76:1e:20:
d7:0e:81:c4:fc:02:fc:bd:74:ba:19:33:71:c4:7d:6c:aa:b1:
66:35:7c:fb:6a:ff:67:01:94:9b:b6:15:21:9a:2a:f1:fd:63:
b0:56:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:02 2025 by rpki-client