Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203597.roa
File: AS203597.roa (raw, json)
Hash identifier: k4oGegsAxek+HqF9b1S7UkCQ7zw93IRhh/br8o7E3OI=
Subject key identifier: 22:33:0D:60:21:7A:1F:46:C9:26:12:20:0C:48:51:7A:AC:66:60:16
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7EC8B1B4D85749030C130B8945D0CA0A00C94370
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203597.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 203597
IP address blocks: 2a06:a005:1560::/44 maxlen: 48
2a06:a005:1570::/44 maxlen: 48
2a06:a005:1580::/44 maxlen: 48
2a06:a005:1590::/44 maxlen: 48
2a06:a005:15a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c8:b1:b4:d8:57:49:03:0c:13:0b:89:45:d0:ca:0a:00:c9:43:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=22330D60217A1F46C92612200C48517AAC666016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:f0:94:c4:49:6b:2c:82:e4:99:d1:af:6a:
ef:26:08:17:c1:79:77:d6:79:8e:e1:db:33:59:9b:
5f:d0:fb:db:51:dc:ee:41:57:ce:49:cd:b1:48:ba:
44:b2:b3:7f:2f:71:89:ab:7b:04:16:be:e5:65:77:
6f:93:a4:3e:42:71:65:60:fc:02:a5:39:16:60:dd:
6b:7d:d9:2e:78:c6:3f:b8:b2:db:b7:af:a8:d7:69:
5c:a8:fc:70:50:0b:b9:2b:24:40:3e:cd:79:ce:33:
3c:86:30:6d:f5:b3:17:3e:b2:2e:bc:46:73:ab:3d:
00:b7:03:9d:f8:7d:59:c1:47:f4:9d:13:63:7c:74:
b8:85:ab:f6:39:ff:00:ee:4c:2d:3a:07:47:00:d3:
70:54:54:90:4a:cb:18:71:ef:02:0d:ca:be:c5:b2:
8b:40:e1:92:5e:05:4b:c6:f0:f5:25:76:20:e6:17:
ad:43:3a:58:ba:bb:a6:9f:45:c1:51:f5:4b:90:7d:
e9:7a:4b:b1:12:e1:9f:f0:09:01:19:93:88:33:fb:
ec:dd:4f:ef:bb:d4:42:e9:8d:e3:6e:61:8e:04:71:
3e:d4:64:a8:27:53:3d:e9:f8:db:dc:ab:70:56:2d:
88:92:b2:5a:8c:78:f3:61:0f:7b:bc:1b:6d:83:f2:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:0D:60:21:7A:1F:46:C9:26:12:20:0C:48:51:7A:AC:66:60:16
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203597.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1560::-2a06:a005:15af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:26:e0:4a:63:a0:49:e6:de:3e:91:e9:8f:e7:dc:9d:7a:0e:
7a:66:6a:43:62:3f:73:39:68:1c:2c:89:bc:29:61:24:ab:5e:
eb:55:b9:c4:50:cc:6d:9b:6a:90:c5:1d:d2:32:62:86:e7:a5:
17:60:6d:63:dc:48:e6:47:fe:78:c9:aa:24:7d:7c:d5:4a:a4:
22:65:64:ff:e8:8e:b5:78:2e:4e:98:d5:3c:5a:9f:db:84:63:
d4:c0:87:24:0e:fe:4b:0f:3d:71:a2:76:fc:1a:a4:e9:3b:bb:
7a:00:04:c2:c9:46:95:56:0d:b1:88:e7:19:36:d5:c1:23:c9:
7f:95:5a:13:4f:99:d3:ea:d9:dd:e6:dd:2c:54:d7:a7:35:ce:
d9:21:73:cc:7d:fc:d6:3b:5b:b3:c1:e3:fa:e0:4a:01:fc:ca:
e4:1c:1a:c4:e5:26:fb:3b:2f:e8:19:10:0c:55:ed:c2:43:26:
ac:85:f1:71:a4:1f:54:43:e9:e2:04:5c:c9:ec:63:29:7d:4c:
53:25:81:55:f1:98:10:35:b5:53:27:f5:b9:0b:25:f2:02:05:
c4:f3:90:6a:7d:10:b5:c1:8c:7b:ed:52:aa:43:5c:5a:7a:14:
43:ea:42:af:20:f4:9b:c5:b3:59:f3:1b:f2:a6:2a:cb:7e:74:
23:d8:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:57 2025 by rpki-client