Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203323.roa
File: AS203323.roa (raw, json)
Hash identifier: Z/cPGDnq7zxOsxgzrZ8phJKXNoJnwLdRrrNuoZ5bO2k=
Subject key identifier: 92:A2:98:A6:5A:9C:F9:01:00:12:E6:C7:02:E8:DD:25:81:58:85:CC
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2A58B6CF48664C2B766D8ECB0F52466039766844
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203323.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 203323
IP address blocks: 2a06:a005:21c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:58:b6:cf:48:66:4c:2b:76:6d:8e:cb:0f:52:46:60:39:76:68:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=92A298A65A9CF9010012E6C702E8DD25815885CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:14:59:ee:43:7c:87:7a:86:1a:95:23:d8:
e4:7d:7c:95:19:65:fc:e7:e6:06:2c:7b:71:f4:b8:
b3:71:e6:1c:2d:17:69:d0:77:20:b5:ba:d2:05:58:
af:7a:63:4c:2a:29:21:61:be:f4:8a:39:6d:2f:e0:
34:54:97:5f:6b:36:25:60:db:e5:56:47:f9:e0:06:
1c:ba:6c:af:6f:34:da:27:13:88:d2:1b:58:36:c0:
c3:6e:11:05:f0:cc:08:98:df:57:3a:fe:0b:50:4d:
87:3f:4c:14:4c:5b:7f:52:97:7a:16:a5:5c:95:03:
7f:08:fe:7b:1a:34:f6:6a:b8:ad:13:2a:bf:28:bf:
33:64:78:0a:96:e3:32:cb:c6:f4:b4:51:67:a6:34:
42:a7:89:c9:47:4a:da:1a:aa:92:bb:f4:c4:ee:40:
e9:7e:2c:21:bd:b8:19:54:49:a7:19:8d:40:13:5d:
db:c3:58:33:8b:00:68:c6:82:0d:a4:f9:2d:2f:11:
c9:1e:4b:e9:40:2a:7d:36:dd:ff:74:f7:42:e5:db:
c8:a3:8d:80:4a:4c:9e:52:64:6e:a0:68:cb:82:fa:
68:9b:41:ad:82:b4:df:43:61:e6:27:64:42:50:55:
be:c1:98:f3:87:9f:7e:9f:d5:20:ab:d1:0e:bf:ad:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:98:A6:5A:9C:F9:01:00:12:E6:C7:02:E8:DD:25:81:58:85:CC
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:21c0::/44
Signature Algorithm: sha256WithRSAEncryption
1a:61:be:9f:8b:95:85:71:5a:13:ff:31:d0:37:34:5e:aa:4b:
5f:ef:af:19:2a:87:0e:d7:16:f8:2a:5b:36:81:6e:3a:ca:d9:
e9:4b:fb:35:14:61:3f:a2:70:95:17:ea:ea:81:fe:9d:7c:1c:
10:88:1b:1d:ba:e8:08:48:61:68:92:8c:16:cb:4f:67:c4:cf:
39:7b:2e:f3:89:dd:10:0a:57:3b:d8:3b:ad:ad:2a:30:65:d8:
9c:34:19:59:25:bc:38:47:1d:a2:71:42:cc:1b:23:4f:0a:61:
51:34:0c:89:cc:93:76:16:42:7e:6e:71:80:c2:94:c5:5d:a8:
ab:e1:02:f7:c3:b8:72:6f:ea:1a:f3:37:28:be:ef:11:e0:cf:
1d:02:e2:67:39:a2:ed:dd:ba:51:39:ba:e1:15:5f:17:cb:a6:
48:11:b6:a6:fd:c7:2f:9c:c9:73:bb:7a:e7:8c:b8:16:81:c6:
28:c0:b5:35:22:a8:83:01:85:33:80:10:5e:d2:9d:9f:05:f1:
9b:ab:db:07:ff:2d:8e:f5:b4:80:01:c6:72:2d:29:58:e0:43:
01:79:ca:00:08:66:10:f3:16:5c:11:84:bc:72:96:3b:47:f7:
bb:71:ac:62:05:54:0b:7f:dd:da:89:31:e3:07:60:c5:f7:3d:
cd:0a:fe:f5
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUKli2z0hmTCt2bY7LD1JGYDl2aEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTJaFw0yMzEyMjAxNjU2NTJaMDMxMTAvBgNV
BAMTKDkyQTI5OEE2NUE5Q0Y5MDEwMDEyRTZDNzAyRThERDI1ODE1ODg1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqhRZ7kN8h3qGGpUj2OR9fJUZ
Zfzn5gYse3H0uLNx5hwtF2nQdyC1utIFWK96Y0wqKSFhvvSKOW0v4DRUl19rNiVg
2+VWR/ngBhy6bK9vNNonE4jSG1g2wMNuEQXwzAiY31c6/gtQTYc/TBRMW39Sl3oW
pVyVA38I/nsaNPZquK0TKr8ovzNkeAqW4zLLxvS0UWemNEKniclHStoaqpK79MTu
QOl+LCG9uBlUSacZjUATXdvDWDOLAGjGgg2k+S0vEckeS+lAKn023f9090Ll28ij
jYBKTJ5SZG6gaMuC+mibQa2CtN9DYeYnZEJQVb7BmPOHn36f1SCr0Q6/rRhrAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUkqKYplqc+QEAEubHAujdJYFYhcwwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAz
MzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBSHAMA0GCSqGSIb3DQEBCwUAA4IBAQAaYb6fi5WF
cVoT/zHQNzReqktf768ZKocO1xb4Kls2gW46ytnpS/s1FGE/onCVF+rqgf6dfBwQ
iBsduugISGFokowWy09nxM85ey7zid0QClc72DutrSowZdicNBlZJbw4Rx2icULM
GyNPCmFRNAyJzJN2FkJ+bnGAwpTFXair4QL3w7hyb+oa8zcovu8R4M8dAuJnOaLt
3bpRObrhFV8Xy6ZIEbam/ccvnMlzu3rnjLgWgcYowLU1IqiDAYUzgBBe0p2fBfGb
q9sH/y2O9bSAAcZyLSlY4EMBecoACGYQ8xZcEYS8cpY7R/e7caxiBVQLf93aiTHj
B2DF9z3NCv71
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:07 2025 by rpki-client