Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203852.roa
File: AS203852.roa (raw, json)
Hash identifier: LLn2OaCPtp+NXaV94/f6GvFtyBqxX1ZLB9Ezq4zYy7M=
Subject key identifier: 76:CC:4C:BF:79:6C:BD:73:C8:D4:34:01:31:33:AF:08:81:C1:EC:5A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 20CC6181443411AF2116CF2B71609F4E7DCAC721
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203852.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 203852
IP address blocks: 2a06:a005:2::/48 maxlen: 48
2a06:a005:1910::/44 maxlen: 48
2a06:a005:25f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cc:61:81:44:34:11:af:21:16:cf:2b:71:60:9f:4e:7d:ca:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=76CC4CBF796CBD73C8D434013133AF0881C1EC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:75:96:12:b3:ff:65:49:70:1f:b7:68:73:
f5:9f:b7:d5:5e:92:e8:fa:28:a2:78:1f:17:12:8d:
6e:35:89:37:84:7a:14:49:47:3d:15:00:38:08:ee:
26:6d:f8:13:57:42:54:4d:37:cb:9b:04:b5:25:1c:
fe:97:1a:85:bf:23:58:c1:90:77:35:9b:1d:cd:30:
9a:be:ab:94:d1:17:fe:91:47:a7:2e:d4:54:83:24:
99:83:2e:b6:04:83:be:92:cb:1d:fd:15:1a:93:a9:
7c:5e:5a:96:5d:2e:c4:28:f9:6b:fa:d0:9e:69:a0:
ff:85:53:c5:8e:5f:1f:0e:74:09:f9:11:ff:11:fd:
9a:f3:8c:33:1c:95:bc:72:9d:da:6e:b7:30:3f:cd:
cd:f9:b9:ca:5a:db:46:81:5b:81:89:52:48:ae:a8:
71:ac:a7:69:4a:8d:b1:8d:71:2b:59:3d:28:ca:0a:
f8:6d:77:11:09:fd:39:46:32:cc:3b:00:43:6e:0d:
35:15:6e:f9:92:5f:1d:fd:f5:09:09:6e:3d:ba:ee:
14:01:45:9e:d0:cf:96:bd:f3:64:20:ef:ae:06:54:
9a:ea:62:ff:6b:61:5f:fb:ad:eb:f9:a6:82:7f:47:
f0:d6:c5:c0:57:04:53:b8:a7:f8:ea:37:ee:41:6d:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:4C:BF:79:6C:BD:73:C8:D4:34:01:31:33:AF:08:81:C1:EC:5A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2::/48
2a06:a005:1910::/44
2a06:a005:25f0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:ff:19:5f:c7:c6:dc:6f:69:90:9c:ca:33:59:c4:22:cb:76:
c3:ae:aa:42:a8:d6:cd:07:b1:ad:a5:aa:a1:bc:a9:13:47:e2:
37:a8:13:fb:35:c1:6a:8b:38:4a:59:3a:2c:9e:9d:22:4e:a2:
c2:8e:1f:3c:35:b7:3b:3d:b7:42:dd:6b:af:a7:af:65:45:69:
83:a0:58:b3:47:ed:cc:56:72:6a:d0:2e:68:11:37:d8:ba:0a:
8d:95:21:2c:15:dd:b3:96:58:d3:0f:31:30:d0:9d:37:28:db:
00:7e:ac:73:73:d3:60:21:98:60:b0:aa:d3:43:62:dc:8e:b3:
32:26:9a:e6:94:3c:ea:de:14:1e:28:2b:d4:c1:0d:c8:08:09:
cb:d4:3c:99:b6:d9:57:ea:ff:8a:c2:00:fa:90:f4:29:48:9a:
ef:18:70:1f:90:4e:37:19:a1:eb:3f:c6:a4:fc:ab:f7:fe:98:
b9:94:81:84:a4:a4:04:06:d3:df:21:3e:34:2d:e9:1f:54:82:
1c:6f:b2:4b:d4:ff:ab:a4:e5:f6:b9:56:9a:96:67:b3:35:9a:
5b:dd:30:be:44:1f:ac:81:35:ea:d1:aa:e1:9a:57:2c:70:1c:
88:16:e5:52:15:7c:dc:c5:3d:e7:fd:cc:a6:9e:62:8c:72:dd:
05:da:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:45 2025 by rpki-client