Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203804.roa
File: AS203804.roa (raw, json)
Hash identifier: u1UjnItUQDFRogpSjxKiq1QhNz6xeU6IsEqDVdnMlhs=
Subject key identifier: CE:48:C1:FB:14:4A:61:71:F2:45:C6:42:E2:A7:FA:B0:7C:D9:90:B1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 21AFDA2C1CE193AF3863F8B1FCCD1D9282697BD9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203804.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 203804
IP address blocks: 2a06:a005:1340::/44 maxlen: 48
2a06:a005:1350::/44 maxlen: 48
2a06:a005:13b0::/44 maxlen: 48
2a06:a005:13c0::/44 maxlen: 48
2a06:a005:13d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:af:da:2c:1c:e1:93:af:38:63:f8:b1:fc:cd:1d:92:82:69:7b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=CE48C1FB144A6171F245C642E2A7FAB07CD990B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:1e:4d:53:e6:29:10:ae:5f:42:93:22:07:
6e:b6:a1:c5:7d:47:8d:83:c5:d5:c9:7b:b7:d3:b3:
b4:ae:49:1f:21:cb:05:04:76:d6:62:fb:f7:86:0c:
5d:2e:f7:29:cb:a5:1c:07:f1:35:f0:c3:6e:e1:ab:
05:b6:1a:ef:11:f9:88:a0:16:f3:0f:43:85:82:8f:
af:be:23:54:b4:aa:9f:43:4b:d3:8e:61:13:77:88:
48:de:59:5c:51:32:63:eb:9a:b5:a1:4e:b8:2d:b3:
1c:e3:66:18:a9:d8:6a:fd:d6:22:89:f0:4a:05:f2:
a9:17:1b:b4:86:5d:41:06:de:b9:7c:0b:d6:40:aa:
b4:58:b6:84:56:de:39:35:c5:42:78:19:23:5b:e3:
5a:8e:89:10:e3:1e:c9:c2:85:6a:a4:53:32:2e:69:
67:9f:a8:32:49:d2:33:74:4c:38:0d:ba:b8:df:6a:
5a:62:22:4c:ee:bb:4c:b6:8e:a3:01:f3:10:ec:32:
c9:51:cb:46:b1:dc:2a:39:72:44:17:d5:b8:a4:95:
17:06:e8:a2:a0:eb:37:19:46:59:c3:32:c3:38:c4:
ae:91:f6:6c:6e:e4:29:e1:5b:e6:e4:a4:c0:85:b7:
60:35:d6:37:72:9e:86:be:37:9a:b9:26:ca:e6:27:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:48:C1:FB:14:4A:61:71:F2:45:C6:42:E2:A7:FA:B0:7C:D9:90:B1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203804.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1340::/43
2a06:a005:13b0::-2a06:a005:13df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:82:99:ab:ca:77:f7:c9:9b:8e:c1:b5:48:55:22:ce:09:0c:
08:02:cd:ad:02:49:68:b1:fd:a9:91:5d:47:bb:2f:0a:73:02:
e4:dd:50:3b:9c:7b:0b:64:88:a1:a0:ad:a2:e8:47:46:6d:40:
a4:46:6d:bd:49:e7:8b:82:2e:6a:b4:4f:a5:d1:04:41:fc:31:
d2:ad:07:60:84:c2:66:58:4c:2d:23:34:cb:af:92:0e:e4:2e:
4a:3f:e6:4e:9c:94:0e:05:2d:f4:a0:9a:72:c3:61:ae:68:8a:
a6:7f:ad:cb:5e:6b:c4:44:14:f2:19:5b:d7:9b:ae:f7:b1:35:
f7:ca:9f:8b:99:de:e6:64:67:fa:12:af:4d:01:24:aa:23:0d:
fc:60:6a:d7:69:12:95:02:6f:96:f2:6d:6e:55:64:cd:ed:d1:
e4:1d:ba:ec:20:ca:6c:bf:ea:25:b8:56:36:7a:ca:5c:bc:a9:
08:98:33:a1:7e:9b:6f:a0:8d:a7:63:3f:6b:a7:d6:81:be:29:
c7:01:27:9f:1d:01:5b:b0:3d:8a:2b:7f:af:1c:35:a6:c7:49:
e8:04:9b:fa:50:73:6e:ab:2d:e3:53:f0:44:65:92:a8:36:84:
6f:4c:12:09:c5:f3:0b:94:c4:f1:42:73:04:6b:da:f3:0f:11:
ad:94:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:19:46 2025 by rpki-client