
Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203472.roa
File: AS203472.roa (raw, json)
Hash identifier: LWf3G4hTevk/EV9J/0mLv0UTqEgyIYV8a+v/QFg8mgg=
Subject key identifier: 1D:D2:B2:FA:B7:4C:5F:CE:30:46:72:9B:4C:D5:08:F8:35:89:A9:0F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 137E562E2898EA5D993ED70E6A1D57AD3491BA5E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203472.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 203472
IP address blocks: 2a06:a005:600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7e:56:2e:28:98:ea:5d:99:3e:d7:0e:6a:1d:57:ad:34:91:ba:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=1DD2B2FAB74C5FCE3046729B4CD508F83589A90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:17:02:d6:21:da:af:3e:23:97:67:1c:bb:
61:46:a7:0e:92:f4:c9:4f:bf:f7:c5:bd:73:cb:ec:
26:49:33:f5:36:b9:bd:d8:b2:04:4b:dc:78:54:bb:
f7:ac:2c:03:15:ed:21:5d:2c:c3:1a:5e:b7:18:59:
fb:1f:34:aa:7a:6f:f7:35:d0:c1:0d:05:c1:11:52:
c5:a5:fd:d3:d4:34:a1:0e:6a:e0:52:00:ce:e1:1b:
5e:a6:65:09:59:42:38:53:47:02:58:31:11:2b:24:
be:58:e0:e1:ab:6c:04:d6:31:e8:62:34:e2:e2:27:
03:19:a3:a0:3c:0c:e2:a5:f1:dd:c2:27:3e:d1:34:
dd:bb:f9:91:f3:b3:18:3d:25:ad:51:e2:a4:21:3f:
e9:f1:a4:24:fc:cb:37:46:e6:91:b3:9e:d5:f0:6c:
99:44:04:c4:06:35:08:51:be:3c:16:ff:ce:f0:0b:
ad:60:b8:d3:50:15:de:7a:4c:79:0f:a2:07:41:2b:
ab:85:03:32:bb:47:f5:47:9f:d2:58:67:26:45:e9:
4a:0b:e6:30:6a:f9:83:66:0a:2d:6a:82:37:8d:6a:
65:64:1e:12:71:65:40:78:08:87:d4:b5:2c:2f:bd:
a6:01:96:57:23:58:96:aa:cf:fe:3a:c0:59:c1:29:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:B2:FA:B7:4C:5F:CE:30:46:72:9B:4C:D5:08:F8:35:89:A9:0F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203472.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:600::/44
Signature Algorithm: sha256WithRSAEncryption
a5:c4:91:ca:91:32:38:47:d5:d2:95:9a:8c:a7:8f:eb:b2:11:
92:4d:bd:b7:2c:94:0f:c1:61:d2:ba:36:9e:8f:e9:a3:51:fd:
4c:ff:3a:15:d8:11:be:e5:e1:9c:02:67:de:72:b0:84:7c:9f:
15:35:ba:81:02:e9:b8:c2:46:db:cd:dc:be:08:36:a0:b8:8b:
8f:d9:0e:e2:0e:06:91:16:d3:ff:99:89:8e:97:d3:a0:07:94:
93:b3:cd:06:88:86:38:6b:d5:63:f4:b8:b2:9c:8a:44:68:d7:
0a:24:e6:d2:4d:29:ae:11:b1:84:2e:9d:31:3f:d3:d8:7d:5d:
24:83:8c:a4:a4:22:17:e8:c3:e9:4e:d1:22:2c:bd:73:9d:73:
c0:ff:b0:08:2b:b3:25:c2:ed:f2:73:e9:c0:a9:57:47:e8:4d:
c2:b5:0c:b9:55:78:47:c5:bf:ac:09:58:63:10:04:38:d6:84:
96:ed:b4:38:bc:cf:ee:13:49:4a:41:79:21:6f:d3:7c:07:42:
ec:71:cf:f7:ac:93:94:bc:cc:2a:ae:13:12:cd:5b:9f:f0:42:
fc:14:3c:4e:a9:86:97:80:3d:40:5b:20:f0:1c:75:a1:b0:8f:
bc:00:5b:04:2e:05:ba:6f:63:49:da:b7:60:fe:7f:2a:a0:70:
55:66:eb:20
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUE35WLiiY6l2ZPtcOah1XrTSRul4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTNaFw0yMzEyMjAxNjU2NTNaMDMxMTAvBgNV
BAMTKDFERDJCMkZBQjc0QzVGQ0UzMDQ2NzI5QjRDRDUwOEY4MzU4OUE5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62xcC1iHarz4jl2ccu2FGpw6S
9MlPv/fFvXPL7CZJM/U2ub3YsgRL3HhUu/esLAMV7SFdLMMaXrcYWfsfNKp6b/c1
0MENBcERUsWl/dPUNKEOauBSAM7hG16mZQlZQjhTRwJYMRErJL5Y4OGrbATWMehi
NOLiJwMZo6A8DOKl8d3CJz7RNN27+ZHzsxg9Ja1R4qQhP+nxpCT8yzdG5pGzntXw
bJlEBMQGNQhRvjwW/87wC61guNNQFd56THkPogdBK6uFAzK7R/VHn9JYZyZF6UoL
5jBq+YNmCi1qgjeNamVkHhJxZUB4CIfUtSwvvaYBllcjWJaqz/46wFnBKcg/AgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUHdKy+rdMX84wRnKbTNUI+DWJqQ8wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAz
NDcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQYAMA0GCSqGSIb3DQEBCwUAA4IBAQClxJHKkTI4
R9XSlZqMp4/rshGSTb23LJQPwWHSujaej+mjUf1M/zoV2BG+5eGcAmfecrCEfJ8V
NbqBAum4wkbbzdy+CDaguIuP2Q7iDgaRFtP/mYmOl9OgB5STs80GiIY4a9Vj9Liy
nIpEaNcKJObSTSmuEbGELp0xP9PYfV0kg4ykpCIX6MPpTtEiLL1znXPA/7AIK7Ml
wu3yc+nAqVdH6E3CtQy5VXhHxb+sCVhjEAQ41oSW7bQ4vM/uE0lKQXkhb9N8B0Ls
cc/3rJOUvMwqrhMSzVuf8EL8FDxOqYaXgD1AWyDwHHWhsI+8AFsELgW6b2NJ2rdg
/n8qoHBVZusg
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:56 2025 by rpki-client