Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203458.roa
File: AS203458.roa (raw, json)
Hash identifier: NTKShHa6+26+ggf/+PzPnIyhqIOcw2yB338zcb8kFSI=
Subject key identifier: F0:88:51:42:1B:3B:10:58:0E:F6:E3:64:78:1A:46:81:8F:66:2E:A0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 727DAC6808852ECB89324EA397BF0140B00C91E0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203458.roa
Signing time: Tue 27 Dec 2022 16:04:06 +0000
ROA not before: Tue 27 Dec 2022 15:59:06 +0000
ROA not after: Tue 26 Dec 2023 16:04:06 +0000
asID: 203458
IP address blocks: 2a06:a005:1871::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:7d:ac:68:08:85:2e:cb:89:32:4e:a3:97:bf:01:40:b0:0c:91:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 27 15:59:06 2022 GMT
Not After : Dec 26 16:04:06 2023 GMT
Subject: CN=F08851421B3B10580EF6E364781A46818F662EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:4f:12:2c:9d:31:d3:d8:06:d3:1e:09:8e:
14:24:31:cc:18:e9:bc:6c:21:7d:9a:c5:a9:85:d0:
f6:8c:89:10:15:4c:1c:66:a3:55:89:d0:4f:96:e1:
68:b8:d3:62:c2:ed:bd:6a:db:e0:c7:6c:35:1b:55:
7d:23:2e:8f:cf:5d:fc:c2:ca:5b:83:d7:fa:65:32:
24:4c:3f:04:ba:d8:79:15:8c:19:ef:ae:e9:4f:46:
b4:25:52:16:b0:1c:63:12:ef:28:13:f0:f1:03:69:
78:46:66:68:6a:6f:3f:9b:fb:39:3f:99:da:ec:dd:
db:b4:18:0e:b8:fc:98:41:d1:3f:46:c0:35:59:cb:
bf:15:72:85:7e:db:3c:95:b3:b7:f2:24:6c:4d:39:
f8:10:d3:e1:53:3f:32:9f:b9:73:a5:b6:35:11:31:
19:e9:24:7c:9a:4b:38:b1:52:7d:37:9b:8c:b2:75:
f8:cd:4e:72:a6:28:b4:54:86:e3:65:2c:b3:af:53:
41:9b:47:80:2b:f7:21:5d:25:93:d3:87:57:40:58:
a1:f0:ee:c6:d1:0f:59:6a:77:73:9b:c6:00:38:78:
79:08:16:b6:ad:25:39:ce:16:d1:76:a2:f1:35:eb:
38:d5:07:aa:34:08:46:74:ae:50:8b:85:0f:62:f6:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:88:51:42:1B:3B:10:58:0E:F6:E3:64:78:1A:46:81:8F:66:2E:A0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203458.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1871::/48
Signature Algorithm: sha256WithRSAEncryption
27:7c:5f:52:0b:f5:1d:5e:97:05:bd:2a:06:d7:e4:97:c6:f9:
01:e6:ea:85:99:45:53:07:2d:3d:0b:96:34:df:9a:81:a8:c1:
97:46:bb:5e:8b:96:e1:a2:6d:f5:d8:b7:82:4b:b1:08:6c:41:
72:37:18:79:ad:35:de:42:75:8b:17:ea:cd:7b:f1:73:92:6f:
07:32:5e:15:30:0c:ed:04:42:a0:7b:4d:01:e8:6b:39:9c:6f:
b9:c1:1c:23:58:c5:72:b2:8c:35:4c:7b:57:4a:5f:5c:6f:71:
42:a6:3f:2f:0c:4c:a5:66:eb:d2:01:30:38:de:1b:10:01:ab:
3f:09:a9:5a:a7:ca:24:14:7e:94:b6:5f:63:0c:1c:c6:a3:88:
fa:d7:74:94:66:a5:e9:96:b6:66:4d:65:19:62:90:d7:ce:84:
1c:d5:51:2d:af:98:5d:e7:f2:04:70:f3:75:23:d4:d0:3c:a8:
ac:21:ec:35:22:50:73:f3:b3:0c:e3:18:62:6e:44:48:95:54:
6a:9d:a3:ae:b0:3c:e6:96:6a:8c:5b:9b:2f:d4:4e:9f:52:33:
ce:f2:60:f0:e0:81:52:5e:a1:59:94:78:9b:65:0d:a7:70:61:
37:9e:5e:55:29:e3:08:7e:5b:89:d9:1b:bc:c1:be:c0:63:98:
81:6d:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:39 2025 by rpki-client