Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203453.roa
File: AS203453.roa (raw, json)
Hash identifier: y1GZTzh/4gWLizW/oWQ9Qc1DAK5oIRtss9UVe/TJdmA=
Subject key identifier: B9:08:03:3D:04:4F:30:D4:E2:5A:81:8A:3C:55:0D:47:CE:E1:2D:27
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 10E5E92936158B78351825E530C4A59A9E9454A0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203453.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 203453
IP address blocks: 2a06:a005:108e::/48 maxlen: 48
2a06:a005:150d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e5:e9:29:36:15:8b:78:35:18:25:e5:30:c4:a5:9a:9e:94:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=B908033D044F30D4E25A818A3C550D47CEE12D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:c8:a6:5c:31:09:3d:8a:12:93:07:0c:21:
80:30:25:70:3f:ac:90:93:70:27:e9:b4:fd:98:d1:
22:08:1b:d0:c3:f5:3e:9f:aa:8a:7c:58:2a:09:52:
97:ed:e2:7e:1c:2f:6d:c6:3b:66:d7:26:be:7c:20:
be:57:23:40:1d:20:c6:8d:cf:70:0e:2c:c8:58:eb:
57:bb:db:61:6e:9e:b6:54:cd:d9:f5:3c:3f:28:fb:
5a:44:32:31:4e:d6:4b:19:b0:d7:40:46:f1:29:00:
e1:bb:2b:36:95:52:8b:ae:04:e1:49:71:7e:9f:ac:
bf:fc:de:1e:52:24:4d:34:70:25:e2:e0:98:df:7f:
4b:cf:63:d6:b6:83:a6:57:f7:49:7c:0f:cd:69:a7:
20:67:f3:34:89:32:f7:c6:03:bc:d8:bc:c4:58:f7:
ea:9e:6e:93:d2:5e:d9:0f:a2:49:66:a7:be:c3:f4:
48:1b:e3:82:ca:b8:98:70:4f:93:a3:af:1e:12:11:
cb:c2:01:f9:50:5d:d0:a1:66:ff:fc:2c:cf:be:30:
fa:81:18:08:fb:34:56:fd:2c:0b:e2:30:87:2e:19:
11:8f:20:b2:4e:d4:ea:88:18:13:19:cf:fa:42:a3:
bd:e4:a7:43:0f:70:bc:df:c3:97:f7:fd:4e:4c:cb:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:03:3D:04:4F:30:D4:E2:5A:81:8A:3C:55:0D:47:CE:E1:2D:27
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108e::/48
2a06:a005:150d::/48
Signature Algorithm: sha256WithRSAEncryption
bf:50:74:2e:c0:5f:d5:62:1e:29:b5:27:9f:76:d0:93:28:b3:
c4:ac:f7:77:29:91:29:2f:8c:37:b3:29:85:9f:f9:88:5a:4e:
12:6f:c4:ea:71:83:3a:f6:4b:62:4f:5f:a4:90:82:84:a4:29:
d8:3b:8a:9d:c3:25:d0:48:2e:19:1f:00:11:71:49:f8:99:a3:
b8:fe:5b:bf:38:9c:8b:0b:d7:57:58:11:ef:aa:a9:3a:d9:44:
10:62:31:7f:aa:b2:66:dc:a4:cb:65:b8:ea:73:e5:61:db:f3:
1d:fe:ce:39:14:db:c0:9e:35:29:d5:cc:6e:d4:a3:27:73:c2:
d5:fc:ef:3f:21:a2:63:26:ca:3d:5e:c0:8f:69:80:76:ba:2c:
db:b3:ea:d6:22:1a:dd:bd:65:5e:62:87:14:f3:41:21:78:4b:
e6:fd:53:fa:a0:f0:d0:64:f0:43:5c:79:c1:f0:ea:aa:84:4e:
58:c2:5f:f5:3a:5c:0d:5a:bd:15:4b:74:5a:98:de:68:1f:11:
c3:94:26:e0:cf:67:b6:32:18:a9:c3:4a:6d:7a:80:15:82:5f:
67:ff:c7:56:b7:51:02:aa:69:5e:bc:02:a7:80:d4:5d:06:a2:
c4:d4:12:50:44:d1:bd:62:8b:cc:38:9a:2e:9d:fe:55:95:81:
21:41:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:04 2025 by rpki-client