
Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203619.roa
File: AS203619.roa (raw, json)
Hash identifier: ZvpWgpe2jo8gu5Fk9PTHc/ybpsgQffPEqWh4c6F4Fb0=
Subject key identifier: 3F:18:EB:81:FE:E2:01:FC:29:0B:98:E1:42:39:8F:2B:82:52:EE:1A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 53165DB1DAB898A350AD61826CF9B698DEDCAC49
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203619.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 203619
IP address blocks: 2a06:a005:1410::/44 maxlen: 48
2a06:a005:1420::/44 maxlen: 48
2a06:a005:1430::/44 maxlen: 48
2a06:a005:1440::/44 maxlen: 48
2a06:a005:1450::/44 maxlen: 48
2a06:a005:2130::/44 maxlen: 48
2a06:a005:2140::/44 maxlen: 48
2a06:a005:2150::/44 maxlen: 48
2a06:a005:2160::/44 maxlen: 48
2a06:a005:2170::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:16:5d:b1:da:b8:98:a3:50:ad:61:82:6c:f9:b6:98:de:dc:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=3F18EB81FEE201FC290B98E142398F2B8252EE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:07:a0:d5:b2:70:f0:41:27:b7:77:03:e9:
2c:14:59:c1:8f:52:e4:6d:de:ac:2e:5e:90:3b:76:
61:bd:82:aa:9b:a8:df:b5:8d:ee:5d:af:ec:df:89:
1d:2a:86:a2:08:88:3a:cc:40:02:e4:75:9f:fb:0c:
a8:0d:af:06:09:31:b8:69:f3:94:f0:3b:a1:4d:c8:
bf:3e:95:68:46:12:eb:ff:b5:d2:b8:73:c4:f1:98:
4c:50:ce:81:59:b3:47:dd:3e:71:b9:08:cd:0a:fe:
72:70:7a:4e:b4:8c:ec:83:5d:c9:b8:c1:84:3f:25:
b2:fa:ed:7d:2c:36:f0:29:b8:ea:0f:0e:ec:95:96:
7d:89:56:3e:d6:b9:aa:08:4b:66:b2:d1:8b:f2:b8:
8c:85:cd:3d:3d:26:8e:b9:57:de:0d:4b:d4:91:79:
91:7e:c4:1c:45:13:eb:82:e6:c0:6f:14:65:69:60:
12:4a:73:58:2e:ad:87:39:a0:95:5d:62:7b:16:45:
65:b1:41:6b:b7:d5:78:72:6e:c2:a8:c7:91:70:fe:
27:92:02:81:c4:d5:36:21:8f:b9:71:ac:53:4d:22:
20:bf:c9:91:fc:bb:a8:2c:6f:2c:d4:1d:40:1f:ea:
65:6a:c0:68:d3:94:f1:12:35:1c:1c:6d:83:2c:81:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:EB:81:FE:E2:01:FC:29:0B:98:E1:42:39:8F:2B:82:52:EE:1A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203619.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1410::-2a06:a005:145f:ffff:ffff:ffff:ffff:ffff
2a06:a005:2130::-2a06:a005:217f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
65:70:92:59:9e:44:0c:1b:42:a8:da:94:a9:e1:30:d3:a6:ba:
c3:ab:62:6b:d3:2a:a7:c9:33:af:06:f2:6f:18:ea:60:16:05:
c5:93:91:f3:3c:bd:21:7d:00:df:54:ec:c1:a1:3b:8f:0c:2d:
ee:57:b6:63:c4:eb:a3:7b:36:41:28:58:7f:54:c5:47:07:14:
57:23:df:b5:5e:a3:e0:1b:ea:ae:88:2d:88:a9:05:42:91:6a:
21:60:7c:8a:ff:31:47:15:b8:54:8e:81:c9:4d:f9:33:13:5e:
31:36:9e:3e:8f:dd:df:76:24:0b:4e:e8:0b:12:5e:18:b2:bd:
ef:5a:c9:db:66:57:b7:5e:94:82:ea:68:04:bc:45:b8:17:69:
16:ab:44:5d:cf:21:fc:36:0a:b5:6c:6e:cd:ee:e5:58:91:d8:
3c:cc:2d:6e:28:24:14:b8:6c:97:74:02:6a:28:0d:5d:93:57:
49:e2:d3:7d:dd:9a:b5:6f:d0:5d:d8:f4:9c:e3:8b:ff:09:d7:
ae:6e:3a:9e:91:40:d7:bd:80:c6:e9:03:28:2b:e6:ac:a5:45:
8c:4e:78:e0:7d:92:29:1c:0d:cb:ce:34:79:9b:b8:87:e7:51:
7b:ac:ec:fc:01:97:5f:75:17:35:ee:f1:2e:22:bf:84:f0:75:
71:8c:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:04 2025 by rpki-client