Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203236.roa
File: AS203236.roa (raw, json)
Hash identifier: AvACIHKFXtm7Xv0GDdoFsS4pD+F6kNOG8NNSK1Chz8A=
Subject key identifier: 4C:2B:51:7E:9D:5E:CD:3F:A3:9C:8B:E2:2A:BC:D5:BB:AC:51:CC:1E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7A002E2A501AF2684519BC39E6795005B24F828F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203236.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 203236
IP address blocks: 2a06:a005:486::/48 maxlen: 48
2a06:a005:1520::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:00:2e:2a:50:1a:f2:68:45:19:bc:39:e6:79:50:05:b2:4f:82:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=4C2B517E9D5ECD3FA39C8BE22ABCD5BBAC51CC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:bd:bf:65:92:39:2c:e2:f5:91:03:6b:2a:
d6:90:10:a9:f8:25:25:fa:38:30:b6:42:e3:9c:d5:
79:c5:2e:62:d3:5d:d4:84:52:02:f2:84:f9:e8:0f:
22:ae:aa:da:b2:ec:ca:9b:7f:01:8e:fc:28:af:25:
fd:52:fc:66:df:a0:4a:f1:48:77:93:42:1a:f8:28:
fa:83:b4:e1:07:94:db:69:82:03:a7:38:df:84:9c:
a5:d4:ea:45:66:8a:25:ed:b6:c5:97:54:cf:3e:f9:
52:c8:2a:b2:1b:79:0f:c2:10:bd:ea:31:37:af:35:
47:56:01:1d:d0:f0:b1:36:1f:f4:18:b9:c7:99:e8:
bd:65:52:08:4e:8d:53:d0:39:9e:7e:36:ca:1b:11:
e4:c2:4e:bf:ee:24:19:5d:1b:7d:17:0a:ad:2e:cd:
1a:4f:8c:ed:83:bd:aa:86:a4:87:a6:b1:6e:1c:8c:
df:94:8b:de:e0:73:ca:01:26:54:e3:16:3e:9e:e0:
aa:4b:7c:ab:cc:5b:f3:db:c9:06:b6:32:65:43:b8:
9a:33:4f:df:54:9b:35:df:72:21:e5:31:b5:0b:59:
f9:34:5f:be:da:d8:c8:6e:04:46:9f:7d:f1:2f:97:
8e:4c:47:e5:39:7b:a6:8b:11:99:d0:27:7d:05:03:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2B:51:7E:9D:5E:CD:3F:A3:9C:8B:E2:2A:BC:D5:BB:AC:51:CC:1E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:486::/48
2a06:a005:1520::/44
Signature Algorithm: sha256WithRSAEncryption
01:d6:74:66:e4:92:18:3c:e6:cc:e4:d4:98:bd:42:0e:4d:07:
10:c2:0a:f6:d3:22:bb:d0:30:42:78:e9:06:8e:60:03:02:b5:
29:ce:18:17:bf:d2:1c:9d:b6:4d:2e:e9:50:91:a4:b0:4f:6d:
a7:9b:a0:26:4c:84:98:f7:f3:16:2e:07:b1:b4:ff:8a:68:0b:
6a:c3:eb:84:9b:60:fe:19:f5:09:ca:de:f9:e7:ee:fd:62:c4:
ac:50:bf:d0:ef:d1:01:c9:f9:4f:01:7e:29:3a:4d:d6:09:de:
ed:2d:ca:00:2f:fd:37:77:48:14:6e:93:72:0c:cc:08:9e:54:
1d:b5:78:67:8b:2b:ed:52:01:77:e5:42:00:47:3b:c0:6e:35:
44:42:19:1c:6c:86:bc:55:82:8e:42:a1:54:ee:4a:69:f8:33:
aa:42:c9:ce:17:ed:a5:c4:61:16:e8:5b:45:e7:b5:03:0d:e1:
0f:0d:df:ca:58:bb:17:10:53:fd:7e:80:af:30:69:9a:e5:9f:
9c:8c:28:65:89:df:fa:06:dc:1f:d3:b2:ae:f5:37:44:3a:3e:
12:4a:47:a7:3a:46:1d:7d:9e:ed:12:b8:51:ec:d1:12:ad:6b:
e3:d4:8b:69:ca:72:34:8b:10:61:51:de:a3:20:0a:54:51:c2:
07:75:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:09 2025 by rpki-client