Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203857.roa
File: AS203857.roa (raw, json)
Hash identifier: G9E+WdlgkW++DkiX29UfSh4dUpQoaPbYMf2wClx584U=
Subject key identifier: 1C:D8:7C:66:7C:DE:C3:31:9D:60:14:EE:28:A7:F4:E8:E2:86:35:18
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 53C2DBAEE7F880F95FCACF3EA66720FC4FE20686
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203857.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 203857
IP address blocks: 2a06:a005:10::/48 maxlen: 48
2a06:a005:11::/48 maxlen: 48
2a06:a005:12::/48 maxlen: 48
2a06:a005:2d4::/48 maxlen: 48
2a06:a005:2df::/48 maxlen: 48
2a06:a005:432::/48 maxlen: 48
2a06:a005:456::/48 maxlen: 48
2a06:a005:481::/48 maxlen: 48
2a06:a005:4d2::/48 maxlen: 48
2a06:a005:4d3::/48 maxlen: 48
2a06:a005:4d4::/48 maxlen: 48
2a06:a005:4d5::/48 maxlen: 48
2a06:a005:4d6::/48 maxlen: 48
2a06:a005:4d7::/48 maxlen: 48
2a06:a005:5e3::/48 maxlen: 48
2a06:a005:5e4::/48 maxlen: 48
2a06:a005:5e8::/48 maxlen: 48
2a06:a005:5e9::/48 maxlen: 48
2a06:a005:5ea::/48 maxlen: 48
2a06:a005:5eb::/48 maxlen: 48
2a06:a005:5ec::/48 maxlen: 48
2a06:a005:5ed::/48 maxlen: 48
2a06:a005:5ee::/48 maxlen: 48
2a06:a005:5ef::/48 maxlen: 48
2a06:a005:850::/48 maxlen: 48
2a06:a005:851::/48 maxlen: 48
2a06:a005:856::/48 maxlen: 48
2a06:a005:a01::/48 maxlen: 48
2a06:a005:a02::/48 maxlen: 48
2a06:a005:a08::/48 maxlen: 48
2a06:a005:1270::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c2:db:ae:e7:f8:80:f9:5f:ca:cf:3e:a6:67:20:fc:4f:e2:06:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=1CD87C667CDEC3319D6014EE28A7F4E8E2863518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:3a:57:62:f4:21:f3:04:bf:db:16:e4:48:
01:b0:bf:e2:e1:59:ef:f3:37:b0:0c:bd:1b:99:c0:
89:93:eb:40:cd:11:9a:3e:1d:2c:b5:d4:d9:81:22:
3b:67:23:20:60:42:2c:e6:c8:83:ec:42:00:41:1b:
1b:d0:55:01:b2:d6:20:77:ee:f6:d1:d2:56:68:63:
a6:d1:12:f9:f7:1a:b9:1f:32:8c:6a:45:54:ce:1a:
83:f9:45:72:57:59:41:1f:f7:5a:f4:42:3b:aa:5f:
8a:8d:dc:39:41:28:f1:0b:cd:d7:b3:14:06:fa:97:
d9:9d:a4:d1:f4:74:a4:ca:a4:3e:bd:47:0a:0d:91:
52:32:ee:82:d8:02:72:d7:24:4e:75:64:38:f6:78:
73:dd:f0:06:1d:b6:6c:a0:c0:8a:bb:8a:c5:ec:28:
33:b5:f5:88:1c:d9:6b:d7:c7:9d:e2:94:88:f9:30:
2a:be:19:cb:bf:81:ac:b4:8a:41:aa:fc:f5:e4:08:
2e:e1:e2:ed:bd:d2:ea:f3:1e:89:3f:1d:68:a8:d0:
4b:69:e7:cb:d4:b5:fe:22:df:c4:a7:fd:c4:1c:c8:
ca:8d:be:ea:68:c2:db:c8:10:23:c6:d4:2d:90:01:
40:47:0d:14:d4:b5:29:86:e6:86:df:bb:d8:39:2b:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:7C:66:7C:DE:C3:31:9D:60:14:EE:28:A7:F4:E8:E2:86:35:18
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
2a06:a005:2d4::/48
2a06:a005:2df::/48
2a06:a005:432::/48
2a06:a005:456::/48
2a06:a005:481::/48
2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e3::-2a06:a005:5e4:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e8::/45
2a06:a005:850::/47
2a06:a005:856::/48
2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff
2a06:a005:a08::/48
2a06:a005:1270::/48
Signature Algorithm: sha256WithRSAEncryption
65:49:a5:87:49:6b:83:c8:43:23:be:f8:6d:e7:61:28:5a:7b:
86:bc:1c:b0:d3:23:24:09:49:e7:61:77:99:20:98:e3:8f:7d:
67:4c:68:5f:74:46:b8:3e:6d:a3:0c:4c:56:07:76:2a:66:32:
11:e4:08:f2:ab:2f:8c:a0:16:d3:c6:30:a8:f3:75:97:9a:1c:
89:3c:28:5f:27:a4:dc:7d:05:82:26:2a:7d:f6:bd:c6:bf:c4:
2c:9c:c1:f4:08:87:e9:03:0e:52:f0:9c:93:2b:b6:c2:ed:a3:
f0:89:e5:84:19:e8:b4:80:81:5e:03:32:8e:5c:06:a7:92:15:
65:29:2b:ad:d2:de:00:82:12:6d:2e:f4:c6:04:19:45:da:34:
d0:6c:c2:1e:7d:30:25:e7:57:c1:49:a9:5e:13:e2:45:e6:46:
a8:4e:6d:a7:cb:be:ba:3c:05:96:38:98:03:23:1e:68:6c:82:
62:8b:cf:a7:13:aa:f6:c1:cb:a7:35:12:2e:86:e7:97:1d:0a:
53:2d:9a:e3:9d:71:aa:5e:f9:8d:2f:b2:40:2f:df:e1:5d:83:
03:af:75:fa:9b:af:75:ad:21:83:55:85:d0:e3:ec:b1:75:94:
e2:db:9b:3e:16:6a:1c:12:3e:87:e7:8b:95:f9:b4:b6:34:06:
64:fe:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:30 2025 by rpki-client