Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203415.roa
File: AS203415.roa (raw, json)
Hash identifier: JBIwKibHuT9micuXBSmrgZoHTFcPXLcygZL6Sm9DM8s=
Subject key identifier: 05:CF:7A:73:2B:5B:44:6A:E4:06:60:07:62:B1:CE:5F:A8:C2:01:80
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 641ECAC5BAAEFF094E43558D4A68157A874F30AC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203415.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 203415
IP address blocks: 2a06:a005:5ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1e:ca:c5:ba:ae:ff:09:4e:43:55:8d:4a:68:15:7a:87:4f:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=05CF7A732B5B446AE406600762B1CE5FA8C20180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:9e:8e:67:0a:d4:0a:32:9d:63:2d:07:ba:
ef:12:e6:97:fb:9c:30:06:a8:e6:37:31:17:76:75:
30:70:02:cf:83:72:c8:ea:cf:dc:ce:61:ed:3c:80:
d6:9c:89:29:fd:53:81:da:29:f5:07:f2:64:2b:29:
02:c6:c9:72:9d:9d:e4:fa:ea:fa:27:5a:3b:ce:02:
5f:40:c9:99:52:24:aa:4c:34:f0:42:b7:6b:78:78:
a0:51:78:c3:14:87:9d:4b:cc:7a:5b:1c:d8:71:be:
fb:aa:3b:ce:8a:31:15:54:90:91:9e:5c:b1:06:33:
5a:0d:31:c7:88:e2:42:4b:d2:d7:b1:7b:24:7a:c1:
0a:82:e2:69:9b:09:e5:67:a6:e6:94:ac:ba:c8:6a:
df:db:08:40:12:60:95:5c:98:7c:bf:52:8a:f4:d6:
a1:aa:43:fe:7e:b0:89:7e:ef:7c:d4:a6:f7:d8:e8:
61:99:a6:fc:6b:bf:c2:b6:af:d4:11:40:64:ea:0f:
aa:73:0b:b5:72:08:4a:4d:0b:aa:39:69:cf:97:1e:
00:56:8f:f4:e0:5c:11:a0:73:a9:9d:15:df:ad:ed:
25:e5:0e:14:c6:38:bd:85:18:cb:64:67:bd:61:dc:
a1:ff:31:62:e7:12:a3:71:01:73:36:47:7d:f1:3d:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CF:7A:73:2B:5B:44:6A:E4:06:60:07:62:B1:CE:5F:A8:C2:01:80
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ac::/48
Signature Algorithm: sha256WithRSAEncryption
d7:15:c1:5b:6e:16:74:cc:e5:ff:5b:9a:29:46:48:aa:99:7a:
d4:41:65:01:20:70:cf:04:26:b8:5c:5f:ea:78:a3:6f:af:4f:
cb:99:6b:49:17:88:63:7c:7f:69:89:ed:2b:cb:b8:4d:86:85:
b5:74:04:56:34:f4:d9:8c:c3:3d:d7:90:12:a1:3e:a9:d4:03:
a9:5b:15:60:9a:1b:c6:a3:d9:2e:88:da:3b:12:22:5c:03:f3:
5f:6f:d9:80:77:7b:dc:1b:ff:44:07:86:6e:8d:b7:38:ab:04:
f8:f5:0c:42:70:3f:41:59:f5:a0:85:6e:0e:8f:95:33:db:1a:
64:ae:fc:2b:74:63:20:6a:68:6e:5d:78:79:59:fd:1d:bc:94:
51:ac:56:95:1a:bc:c2:1f:d9:d1:67:a2:15:d8:74:29:a1:49:
be:6e:c4:39:80:34:4d:ae:44:c6:82:c2:3f:b9:d5:8f:46:1d:
2a:b7:5e:d6:58:d8:8d:81:c8:f9:46:37:b5:91:5f:e6:3f:7e:
0a:b9:74:e6:46:02:b8:43:0f:af:e9:9f:60:06:b7:9c:f5:36:
ac:4a:15:0f:27:85:8a:26:74:66:61:2c:66:00:52:bc:5a:f6:
b5:6c:a1:97:6a:bd:b8:a7:e0:b9:d6:68:30:2e:f6:c6:e5:ec:
bd:8a:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:27 2025 by rpki-client