Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203283.roa
File: AS203283.roa (raw, json)
Hash identifier: 7NgaamOFNeWJH+A2h5qczqiCCDUxVzfpThpnKuilqME=
Subject key identifier: 37:16:86:F5:86:F4:C4:29:A7:70:EB:EB:F3:00:A8:7E:1E:60:9E:DF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4C402FE5F85C38799E2A1850A3B5C1E1157D27C4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203283.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 203283
IP address blocks: 2a06:a005:1810::/44 maxlen: 48
2a06:a005:1820::/44 maxlen: 48
2a06:a005:1830::/44 maxlen: 48
2a06:a005:1840::/44 maxlen: 48
2a06:a005:1850::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:40:2f:e5:f8:5c:38:79:9e:2a:18:50:a3:b5:c1:e1:15:7d:27:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=371686F586F4C429A770EBEBF300A87E1E609EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:0f:a4:5e:01:5f:d6:cf:f1:db:ba:7a:7f:
0c:bd:aa:eb:8a:e4:04:0e:e4:a7:ce:8e:31:ce:c7:
fb:16:a5:1e:0e:ad:df:ca:76:b9:fb:66:0a:10:01:
dc:58:dd:55:43:70:70:cc:69:a0:71:4d:5a:65:28:
13:6f:d1:6e:36:6b:49:c9:44:6f:be:08:2b:f4:57:
57:d7:22:49:79:e6:7d:bc:e6:e2:7e:63:c1:56:16:
36:72:57:8e:97:ea:16:96:71:9a:ca:3d:a5:47:e7:
21:31:6e:ca:b0:e4:26:90:10:a7:ec:df:eb:cd:ca:
7d:64:f6:9e:43:74:53:60:5b:b0:88:10:d3:4b:19:
dd:e2:c2:ad:7a:15:b9:68:9b:2d:5f:74:32:1d:96:
6a:aa:c7:f6:63:72:6b:63:87:70:49:41:32:f5:a1:
23:e1:77:45:4c:a2:38:9f:c4:e9:9f:0e:0e:ce:b7:
19:72:44:0f:1e:94:cd:b9:e1:8d:92:ed:e6:bb:d9:
1c:16:b5:5d:0b:9f:fd:f4:b5:93:cd:05:8b:1b:d6:
e7:6c:a2:c1:e2:bb:50:f7:5a:bd:b6:d3:a1:c3:f5:
cd:63:e5:42:1b:a5:02:25:0f:64:48:98:86:27:38:
9e:97:67:92:75:8c:18:a9:aa:2d:fc:ae:db:96:00:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:86:F5:86:F4:C4:29:A7:70:EB:EB:F3:00:A8:7E:1E:60:9E:DF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1810::-2a06:a005:185f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:62:ff:b8:3a:ec:c0:86:a5:c2:6b:26:f7:04:43:2b:ab:64:
96:bd:db:ee:ab:3b:a0:9e:12:81:aa:79:70:78:ef:7b:43:92:
5b:20:ca:0a:a9:72:ac:7c:9e:08:9e:ab:bf:24:bc:34:d1:f1:
74:67:65:e0:7c:05:db:69:b2:54:8c:a0:df:1e:53:5d:f6:41:
3c:d7:fe:2f:08:31:ca:a4:60:10:f0:33:54:cf:e4:b3:08:13:
78:3e:05:07:89:93:7c:b9:69:0b:bb:29:56:9c:d0:43:35:d8:
ee:9d:f7:ce:41:b8:5e:ec:f6:51:d7:d3:32:aa:63:e8:90:fd:
b7:38:b1:4e:0b:07:bd:84:95:70:4a:68:6f:7c:86:3b:69:38:
c5:bc:c2:0f:0a:26:3c:21:3a:c3:33:a6:84:a1:60:93:03:3e:
dd:cc:15:6d:a9:a5:37:f4:34:58:7d:73:08:b9:a6:db:e7:71:
22:a7:c9:0a:3f:6d:5b:f2:42:ae:a6:4e:b9:a0:56:72:1e:dd:
7d:94:46:5b:6f:30:fa:b0:5e:e6:df:6a:ca:4e:1f:9e:61:f9:
7e:d6:ad:ce:f1:2c:55:26:ef:df:b5:bf:2e:a1:9b:be:0c:65:
ca:5a:14:0c:f3:c4:e5:b2:95:62:cc:35:08:f3:88:a7:33:4d:
5a:5b:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:58 2025 by rpki-client