Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203655.roa
File: AS203655.roa (raw, json)
Hash identifier: a/8hsiCSUgaNx8J03JgIUW7HCyti0+0ke3Jo/F1sA7U=
Subject key identifier: 7A:D3:3A:34:5A:23:FF:F4:AB:28:37:1E:F5:6F:4B:39:F6:E8:DD:2A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 051D4D76AF61F68F316C6CA508B61F878C84CAC6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203655.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 203655
IP address blocks: 2a06:a005:13e0::/44 maxlen: 48
2a06:a005:13f0::/44 maxlen: 48
2a06:a005:1400::/44 maxlen: 48
2a06:a005:1470::/44 maxlen: 48
2a06:a005:1480::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1d:4d:76:af:61:f6:8f:31:6c:6c:a5:08:b6:1f:87:8c:84:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=7AD33A345A23FFF4AB28371EF56F4B39F6E8DD2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:e4:22:a3:4a:a0:5d:94:b3:a4:32:bf:6e:
87:5c:e0:b5:70:2b:48:06:10:c8:33:07:d2:fe:40:
eb:0f:ec:fa:fa:7f:97:8b:49:b6:3c:51:b5:2d:2f:
6a:5d:fe:56:05:f5:f7:28:3f:38:1f:ee:9a:bd:fc:
f9:7e:84:fc:5e:ca:d2:4e:0e:00:21:34:7a:93:57:
73:48:d5:7c:6d:15:38:23:8e:d4:07:8e:8a:db:d0:
a8:af:f9:9c:e3:39:f8:a2:0d:b2:ef:6b:a0:1e:28:
f1:d2:45:28:13:bd:5d:ec:9e:88:f1:e8:af:31:5a:
82:89:4c:fd:b8:68:b2:87:bb:7f:14:8d:81:e4:c0:
8b:10:d4:e0:6a:89:bb:b8:aa:11:12:a6:87:36:cb:
17:6f:73:c7:e5:cb:12:f7:76:55:09:15:dc:fa:83:
7e:9d:98:04:0d:fb:8a:91:41:be:3e:83:b8:80:85:
dc:7a:2b:0c:f0:45:73:82:f5:06:89:6a:5b:82:d4:
40:dc:19:bc:b8:59:25:d0:4c:15:05:7e:7e:45:ca:
de:a3:a9:17:07:60:34:44:62:83:b2:c5:f5:f0:4b:
80:17:df:2d:63:83:7a:20:d7:64:6b:24:12:bb:7f:
c6:c3:e6:80:a4:32:9b:2a:ad:8f:4c:2e:39:2b:73:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:3A:34:5A:23:FF:F4:AB:28:37:1E:F5:6F:4B:39:F6:E8:DD:2A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13e0::-2a06:a005:140f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1470::-2a06:a005:148f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:33:8d:df:bb:96:15:47:61:e0:e2:da:5c:8f:a3:5e:f1:20:
0d:cb:a0:71:61:6b:6e:cb:96:88:2d:71:d5:24:6a:1c:bb:64:
49:8a:a6:e5:c4:40:45:02:b6:0c:73:fb:09:5a:8a:f2:7f:58:
99:ed:d0:c5:8c:55:6b:03:2c:8c:de:58:55:6a:22:48:20:e9:
23:5a:b5:ca:49:41:67:e2:9c:65:37:8c:16:ff:7f:fb:3d:a6:
80:eb:25:85:a3:c7:59:6c:b7:6f:2e:db:38:a9:99:1a:b8:67:
fb:09:49:1d:b1:8d:b3:1a:16:d3:73:0e:02:82:ad:af:77:9d:
87:b4:f8:ee:cc:38:be:90:d3:0f:ec:7c:d6:2c:dd:71:86:0c:
a3:36:3d:03:b1:25:65:0b:ab:de:98:df:45:90:e9:86:b0:c8:
6d:4d:77:49:50:8c:fc:3e:c7:66:a7:73:72:84:55:4c:ba:a9:
90:97:c1:5a:8e:ae:df:f1:98:36:16:7c:90:9e:e1:2d:fc:13:
2e:1c:23:f3:62:99:5e:30:dc:3e:3d:9f:6a:c0:f0:3a:81:c9:
25:2a:92:b6:82:2b:79:18:37:b1:da:08:a8:c9:52:12:46:17:
2a:39:ff:08:5a:05:25:32:78:2a:6f:c5:da:c9:e7:a2:e2:36:
d3:8e:0d:18
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUBR1Ndq9h9o8xbGylCLYfh4yEysYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDdaFw0yMzEyMjAxNjU2NDdaMDMxMTAvBgNV
BAMTKDdBRDMzQTM0NUEyM0ZGRjRBQjI4MzcxRUY1NkY0QjM5RjZFOEREMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZU+Qio0qgXZSzpDK/bodc4LVw
K0gGEMgzB9L+QOsP7Pr6f5eLSbY8UbUtL2pd/lYF9fcoPzgf7pq9/Pl+hPxeytJO
DgAhNHqTV3NI1XxtFTgjjtQHjorb0Kiv+ZzjOfiiDbLva6AeKPHSRSgTvV3snojx
6K8xWoKJTP24aLKHu38UjYHkwIsQ1OBqibu4qhESpoc2yxdvc8flyxL3dlUJFdz6
g36dmAQN+4qRQb4+g7iAhdx6KwzwRXOC9QaJaluC1EDcGby4WSXQTBUFfn5Fyt6j
qRcHYDREYoOyxfXwS4AX3y1jg3og12RrJBK7f8bD5oCkMpsqrY9MLjkrcz6zAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUetM6NFoj//SrKDce9W9LOfbo3SowHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAz
NjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/
BDIwMDAuBAIAAjAoMBIDBwUqBqAFE+ADBwQqBqAFFAAwEgMHBCoGoAUUcAMHBCoG
oAUUgDANBgkqhkiG9w0BAQsFAAOCAQEAWDON37uWFUdh4OLaXI+jXvEgDcugcWFr
bsuWiC1x1SRqHLtkSYqm5cRARQK2DHP7CVqK8n9Yme3QxYxVawMsjN5YVWoiSCDp
I1q1yklBZ+KcZTeMFv9/+z2mgOslhaPHWWy3by7bOKmZGrhn+wlJHbGNsxoW03MO
AoKtr3edh7T47sw4vpDTD+x81izdcYYMozY9A7ElZQur3pjfRZDphrDIbU13SVCM
/D7HZqdzcoRVTLqpkJfBWo6u3/GYNhZ8kJ7hLfwTLhwj82KZXjDcPj2fasDwOoHJ
JSqStoIreRg3sdoIqMlSEkYXKjn/CFoFJTJ4Km/F2snnouI2044NGA==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:51 2025 by rpki-client