Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203867.roa
File: AS203867.roa (raw, json)
Hash identifier: NsRi4sFtHqtLpFaLF60qD/hx775U7ICJDKPXl5bxiLI=
Subject key identifier: 18:98:95:3A:53:46:1A:DA:E5:E9:76:5A:EA:30:6B:D4:00:D7:03:EF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4C46E6D65671DF1780155836D36982F807C09470
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203867.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 203867
IP address blocks: 2a06:a005:dc0::/44 maxlen: 48
2a06:a005:e50::/44 maxlen: 48
2a06:a005:e70::/44 maxlen: 48
2a06:a005:1010::/44 maxlen: 48
2a06:a005:12a0::/44 maxlen: 48
2a06:a005:1710::/44 maxlen: 48
2a06:a005:18f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:46:e6:d6:56:71:df:17:80:15:58:36:d3:69:82:f8:07:c0:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=1898953A53461ADAE5E9765AEA306BD400D703EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:55:7b:1b:18:32:65:4d:33:bc:84:b3:98:
4c:e2:75:90:82:85:0e:0c:b5:e9:76:31:06:11:64:
cc:90:68:94:20:33:98:1d:d2:9d:45:58:a6:38:04:
a5:4b:2f:53:63:65:cf:31:5f:b2:11:56:e8:b7:3f:
3a:91:82:7f:f3:b2:24:1c:ea:96:02:10:3d:30:e5:
93:37:70:bb:3a:a6:69:05:99:ad:ed:48:da:08:6c:
44:5d:b0:88:ec:4c:08:d0:6c:88:af:ae:68:d0:89:
31:ee:64:e2:20:16:0f:69:b4:e4:70:cb:27:09:b8:
3f:5f:8f:84:83:a8:63:7c:9e:7d:db:ac:4e:ad:d7:
7e:43:d5:28:1a:cc:66:dc:59:36:75:61:d0:86:0d:
c0:e4:ff:44:ae:84:3c:0b:0a:77:ef:e0:b2:3a:5a:
9e:27:a3:5b:ce:ae:5f:0d:4b:c2:fc:9f:f1:07:b3:
88:66:b9:81:21:af:25:ea:5e:36:49:8e:e0:99:b1:
dc:f8:6b:76:90:61:23:7c:f7:21:ce:b1:b4:ae:5f:
fc:59:e9:e4:bd:0e:45:13:da:c8:89:08:a7:08:f0:
9a:3d:b6:a6:ad:bd:96:ec:6f:64:ab:34:18:dd:37:
44:d1:1f:93:d0:32:fb:bb:70:bd:38:da:d8:00:3d:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:95:3A:53:46:1A:DA:E5:E9:76:5A:EA:30:6B:D4:00:D7:03:EF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:dc0::/44
2a06:a005:e50::/44
2a06:a005:e70::/44
2a06:a005:1010::/44
2a06:a005:12a0::/44
2a06:a005:1710::/44
2a06:a005:18f0::/44
Signature Algorithm: sha256WithRSAEncryption
12:a1:ff:a6:b1:78:31:eb:ee:81:cc:33:35:32:9c:d9:d0:01:
66:ae:2d:62:60:91:94:13:f3:ee:ea:09:4e:3b:5f:21:0b:d3:
12:62:4e:11:2b:79:74:c1:6d:32:d1:3b:31:39:10:63:43:d2:
d5:85:84:e7:ed:d1:ef:90:08:52:cf:51:00:5f:cb:5d:6d:47:
85:6a:06:fb:25:e7:26:6a:ab:ff:56:38:cd:6e:39:09:75:8d:
92:2d:a9:74:f1:71:df:bc:2e:4d:9d:5f:ec:a6:3b:74:b3:8e:
96:b0:74:b9:d4:b5:ce:51:cc:0a:5c:d7:af:50:cf:f5:32:1f:
8d:53:f9:50:e8:db:ee:de:fb:4b:c3:0d:da:65:5c:a2:a4:cd:
de:96:3b:04:63:a0:80:d4:da:b1:26:bc:b2:1a:d4:b3:f5:85:
8a:f7:ba:50:4c:14:2d:a3:d3:07:b6:cb:4b:ec:9f:5f:3c:30:
af:83:02:2d:ac:24:ad:ad:09:69:4a:7b:44:19:06:b9:17:e3:
fb:98:86:bb:f9:6e:ae:f4:fd:b5:10:59:80:83:a0:61:69:23:
54:1d:40:f0:b1:24:93:4a:0e:8a:c5:38:6f:81:90:64:d4:2c:
77:c0:e2:69:0d:a5:c5:db:21:e5:ff:48:37:52:3f:24:3e:10:
50:84:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:58 2025 by rpki-client