Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203529.roa
File: AS203529.roa (raw, json)
Hash identifier: DBJj9z8vV2c70yMEQRVbJkLKBfNTkg4Q6B7z1tZST6A=
Subject key identifier: BE:93:D5:82:8F:31:48:AC:40:B1:67:F1:E7:0E:9E:0F:5F:63:DC:45
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 201562908A37236DDEB891B989281ECD6DC42F26
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203529.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 203529
IP address blocks: 2a06:a005:45d::/48 maxlen: 48
2a06:a005:15e0::/44 maxlen: 48
2a06:a005:15f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:15:62:90:8a:37:23:6d:de:b8:91:b9:89:28:1e:cd:6d:c4:2f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=BE93D5828F3148AC40B167F1E70E9E0F5F63DC45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:87:c9:c9:ac:89:49:71:17:08:c7:34:45:
ba:0d:46:a5:b2:0e:9e:bf:fb:ae:a6:d4:fc:26:b6:
47:e7:ea:0d:4b:6a:68:13:35:fd:f9:8a:03:8b:16:
9c:17:5c:ab:e4:94:98:d3:a3:89:cb:03:c5:e9:86:
76:72:46:ca:93:9b:29:c8:03:2c:3b:c0:58:bc:d1:
7a:7e:1b:64:d5:d6:a4:6f:f7:2b:5b:0d:d0:3c:b3:
dc:f7:91:ec:10:97:09:ca:8c:4e:72:53:ac:53:dc:
4b:e2:69:69:af:33:4f:37:ee:e8:c7:79:72:c3:22:
88:fd:ae:3f:30:79:c1:72:c9:44:b9:4a:bb:21:37:
de:b1:73:3f:15:0c:fe:f9:59:77:e7:02:87:94:86:
b3:08:73:37:34:06:a0:ab:c8:71:14:79:48:ca:bd:
eb:d4:66:f0:89:13:7f:aa:aa:46:0c:6c:b8:ae:45:
8f:4e:d7:2d:d2:af:d5:97:12:7f:3f:a4:2a:07:b5:
78:e0:95:d0:ba:fd:33:87:38:39:10:fa:ea:b5:d9:
71:97:96:3e:81:d8:4b:15:f0:8e:6c:cf:a6:40:b8:
15:08:66:73:c3:fe:7a:fd:7c:d6:6c:2a:b5:86:28:
26:bb:07:21:d7:f6:3a:57:fb:6b:7e:0a:cb:9d:06:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:D5:82:8F:31:48:AC:40:B1:67:F1:E7:0E:9E:0F:5F:63:DC:45
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45d::/48
2a06:a005:15e0::/43
Signature Algorithm: sha256WithRSAEncryption
57:8f:d3:d1:a4:45:1f:1c:84:f0:22:5d:50:db:af:d5:ea:c8:
10:fd:9c:42:fa:53:49:8f:a9:5c:76:9e:b9:bc:8b:10:43:1f:
fc:76:37:00:73:ed:bb:de:ea:4f:36:4c:88:84:a8:09:45:31:
a5:58:2a:e6:f9:86:0e:f8:d3:35:5a:79:5c:fe:76:da:5b:58:
30:6d:f2:5b:99:11:f9:b7:fe:40:47:03:49:b5:3d:9f:2a:ea:
36:8e:9d:8a:cc:7d:dc:57:fd:65:02:8e:09:23:17:92:fc:d8:
b8:e9:e7:23:b5:be:c9:3c:15:49:07:3a:f6:69:a3:13:6f:d4:
85:22:69:eb:c9:d5:4c:0a:ce:e2:5a:a5:e6:b9:40:40:e4:5f:
c0:20:05:d3:1a:d9:ea:d3:cf:46:9f:a3:42:e9:f0:6a:80:55:
22:52:cb:f1:cf:37:50:ba:f4:dd:aa:34:cd:cd:f1:40:91:4b:
71:e4:77:2a:cc:c8:7c:5a:a6:2e:a8:47:97:a9:d8:e9:0f:97:
e3:e3:6d:b9:75:7f:dc:bc:b6:ac:80:5f:eb:1f:78:6a:4d:14:
65:85:32:49:9c:da:d6:00:4f:85:ce:21:a8:0c:93:ec:1a:a8:
be:f8:2f:05:20:0f:b0:da:cd:07:ac:99:9c:80:d8:e2:73:e4:
97:85:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:26 2025 by rpki-client