Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203635.roa
File: AS203635.roa (raw, json)
Hash identifier: o4AOdlgatfZ42oxvW+MK7Tza4MFqcSGPHV+pGAxagfY=
Subject key identifier: 86:7C:68:10:B2:20:99:15:DB:E5:DA:2A:2F:FF:B0:71:56:FC:1A:92
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 64E67011BE5EBB9A156D5DCCF2E14A620CA88FDA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203635.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 203635
IP address blocks: 2a06:a005:1040::/44 maxlen: 48
2a06:a005:1050::/44 maxlen: 48
2a06:a005:1490::/44 maxlen: 48
2a06:a005:14a0::/44 maxlen: 48
2a06:a005:14b0::/44 maxlen: 48
2a06:a005:14c0::/44 maxlen: 48
2a06:a005:14d0::/44 maxlen: 48
2a06:a005:1600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e6:70:11:be:5e:bb:9a:15:6d:5d:cc:f2:e1:4a:62:0c:a8:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=867C6810B2209915DBE5DA2A2FFFB07156FC1A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:29:5e:bb:67:e0:b6:49:7b:0d:78:95:ed:
54:4f:ad:7d:d8:a9:56:c6:76:f6:21:5b:8f:17:14:
0e:88:c3:da:07:4c:5d:64:1b:92:af:eb:d0:70:4c:
b6:60:43:f5:b1:b2:09:a2:c5:29:4f:e1:40:a2:97:
c0:e9:04:a8:c5:20:fa:c4:b2:35:89:aa:a3:95:5d:
28:4e:c5:98:40:6e:3b:a4:cc:ff:0b:c1:60:6f:17:
eb:e1:87:90:a8:b2:13:b0:4a:d7:0a:2c:45:f9:31:
b3:bb:14:97:5b:12:02:b0:ec:97:b1:ef:3f:83:aa:
77:dd:e3:7e:c3:65:fe:54:c3:12:0a:fe:70:f0:39:
1e:1b:b3:b9:88:44:8a:19:c0:06:6c:c9:81:28:d8:
f3:26:f6:50:9e:2f:a0:9a:2a:eb:5b:f2:46:e0:ed:
d4:9b:13:fc:8b:6f:56:5a:a0:cb:43:31:05:03:ea:
6c:48:69:3a:b7:3b:cc:59:b4:f2:d6:a7:cd:ff:18:
04:d1:8b:0f:fc:0c:ce:e5:65:23:7f:34:8d:e4:0f:
d8:38:48:33:de:a0:23:f9:37:6a:b5:39:ac:e2:8c:
65:58:1a:5e:8b:6f:d7:5f:b8:0e:90:d8:f1:1b:00:
86:83:0e:36:4f:9f:57:46:1e:6e:e0:b4:3a:71:9d:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7C:68:10:B2:20:99:15:DB:E5:DA:2A:2F:FF:B0:71:56:FC:1A:92
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1040::/43
2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
2a06:a005:1600::/44
Signature Algorithm: sha256WithRSAEncryption
5b:21:f9:a3:96:cd:30:fd:4c:a5:5f:14:66:2a:8d:34:2a:58:
4c:27:48:e4:a5:90:f7:14:b5:20:97:7d:9a:9a:93:aa:fc:ec:
70:e0:11:1e:bb:dc:03:66:5f:9d:de:32:e6:cf:71:f3:0e:09:
89:f5:82:64:bd:6c:1c:b2:40:91:dc:51:f4:2b:49:59:92:cf:
e6:fa:b0:8b:d8:d3:72:d9:fa:f1:8f:98:e6:24:b4:66:7c:f7:
a1:95:20:06:33:0b:87:0f:e3:2f:7d:cc:8e:97:75:e7:8d:ee:
39:42:0d:09:fc:d1:ad:a1:d9:dc:e5:8b:aa:61:e9:11:6e:aa:
26:0c:d7:eb:22:7e:29:18:61:fa:d2:f9:aa:4a:b4:42:31:03:
fe:d4:73:9b:d6:3b:2c:98:09:22:70:69:66:1c:6b:ed:f7:a9:
4d:38:af:21:f0:b0:95:b6:2d:fa:88:df:69:41:e2:71:a3:90:
54:51:02:42:4a:37:83:c1:65:2d:c4:95:28:4e:d0:d8:d3:67:
e5:e9:d4:30:12:00:ec:e6:ff:b9:b1:da:80:92:0b:05:a5:71:
6d:ee:8a:38:9f:96:d0:83:bc:df:31:74:fc:ee:f9:61:5c:a5:
c2:fd:de:a4:4f:5e:2d:20:8e:8c:5c:8d:bd:a1:21:e5:ad:46:
cb:e1:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:09:35 2025 by rpki-client