Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203314.roa
File: AS203314.roa (raw, json)
Hash identifier: IKdwD10V8if4Jmj8xUhbDmqyvb1jp3ulCk3AhaKBP8U=
Subject key identifier: A4:C8:25:2A:28:2F:54:81:78:F8:80:ED:4A:F5:B5:7A:7E:BA:91:45
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 540159195317B2E994E1E570F49733C2EBD54255
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203314.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 203314
IP address blocks: 2a06:a005:6f0::/44 maxlen: 48
2a06:a005:18c0::/44 maxlen: 48
2a06:a005:1bf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:01:59:19:53:17:b2:e9:94:e1:e5:70:f4:97:33:c2:eb:d5:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=A4C8252A282F548178F880ED4AF5B57A7EBA9145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:6a:12:33:96:34:47:ec:09:8b:a8:04:b4:
5a:08:28:ed:55:66:3c:04:b7:f5:e5:2b:4b:e3:f9:
dc:be:25:cf:0f:3b:aa:42:9a:9c:23:71:ba:6f:f6:
c4:89:c1:5e:df:c8:7c:19:3d:92:f8:79:67:e6:bd:
e6:7c:c2:d4:a7:36:c4:93:c7:c9:d1:8b:d1:63:7f:
37:f2:3c:7a:33:5a:0f:37:05:71:2c:40:28:d7:1f:
0e:2b:71:7d:83:ac:d2:b1:4f:fe:0b:d0:0d:96:43:
e4:57:fa:10:86:ef:4b:30:74:a0:94:26:77:bd:71:
c6:19:a4:be:60:f9:6b:20:a1:dc:ee:72:ee:35:23:
22:79:1f:53:f1:cc:b6:68:0b:29:a3:45:63:ed:b1:
33:6b:7e:f7:4d:a2:54:13:71:be:09:61:cc:5e:71:
4e:58:51:4d:c0:e9:c5:4c:83:bd:62:ab:41:de:75:
bf:64:74:d4:57:28:44:82:a6:5e:ee:80:80:5c:20:
d1:9e:eb:18:7a:3e:91:e1:69:09:a2:40:31:bb:f4:
12:f8:dc:f7:cb:07:46:c4:25:bd:c8:65:78:be:2c:
10:17:1d:ef:eb:ce:87:f1:59:a7:c8:1b:11:34:05:
bb:89:19:07:6a:1c:e7:25:b7:e3:70:7a:df:b3:d5:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:25:2A:28:2F:54:81:78:F8:80:ED:4A:F5:B5:7A:7E:BA:91:45
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6f0::/44
2a06:a005:18c0::/44
2a06:a005:1bf0::/44
Signature Algorithm: sha256WithRSAEncryption
67:27:35:6b:46:48:b4:9c:72:b9:8b:a2:29:67:8e:54:a8:bd:
d0:f3:81:96:7f:42:2e:77:88:cc:20:69:52:fb:7a:62:0a:97:
b7:6f:d0:db:38:04:b9:49:20:96:2f:87:fc:89:29:bf:db:e2:
ad:16:f0:96:1c:b0:e8:e1:ef:c9:f2:2a:c0:55:00:ce:39:0d:
15:82:93:ce:2b:1d:f7:86:53:5e:9f:a9:1e:8f:8e:d6:6f:73:
6d:7c:67:c9:a7:ea:a9:1b:85:a5:f5:0b:72:1b:46:52:8d:bb:
9d:ab:da:30:16:b5:0a:2d:9b:dd:a0:57:a4:ad:93:46:2c:81:
df:4c:55:57:d0:e8:38:cb:d6:6b:0b:57:76:81:af:d6:91:26:
6a:22:21:51:26:b3:7e:71:9b:71:e4:86:23:48:c3:d4:fd:a8:
e5:54:e4:b7:e6:02:48:23:4e:56:29:b2:a3:fc:76:65:13:89:
84:91:6e:d7:b1:5b:b8:2d:e6:af:0b:6a:97:32:ac:8c:ac:6a:
56:4c:24:98:e7:a2:f9:ee:4b:d3:ed:f4:3b:4d:a3:eb:f9:65:
c7:30:be:a1:46:a5:fa:24:0f:3a:97:e4:25:e1:be:0b:66:34:
42:1e:55:ec:69:93:bc:44:6f:a3:94:7f:55:1e:d2:b6:76:59:
26:a7:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:32 2025 by rpki-client