Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203873.roa
File: AS203873.roa (raw, json)
Hash identifier: O4oYPSQAs107hev+aU/56K3JEkMza9tJn3Y+4G8bIyk=
Subject key identifier: 1A:20:BF:1A:92:AB:93:F8:2D:55:93:0B:1F:B9:01:B9:F6:2F:F0:7B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6F0180FBDA0A33ECFBC250EFFCC69BBDEDA5594E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203873.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 203873
IP address blocks: 2a06:a005:1280::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:01:80:fb:da:0a:33:ec:fb:c2:50:ef:fc:c6:9b:bd:ed:a5:59:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=1A20BF1A92AB93F82D55930B1FB901B9F62FF07B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:97:59:65:85:a9:fe:d0:49:ea:72:32:39:
ce:09:e3:a2:d3:30:4d:9f:de:01:70:c5:82:74:aa:
6a:9f:52:3b:5c:00:b9:3e:61:7d:2c:8f:4b:6b:ac:
07:23:03:b6:1d:ac:51:a3:38:06:ef:25:b0:ae:6e:
18:07:9b:bf:de:46:02:f3:76:fd:b4:63:1f:e7:ac:
3e:42:88:86:52:a4:56:a3:ef:5c:25:88:76:ba:5e:
53:8c:4f:8d:60:37:26:e2:51:f7:73:51:ab:36:d6:
f8:35:c0:cd:9c:e6:41:56:82:76:d5:83:a0:c6:ef:
68:bb:cc:5a:e9:27:7d:96:c7:3f:1f:f0:98:c3:8a:
58:c3:52:46:1f:ab:ff:87:bd:0e:b7:ae:a0:ad:22:
bc:08:4b:85:79:53:5c:c5:5d:1e:dd:2d:09:17:d3:
ee:3d:60:8d:54:23:22:41:2d:c6:76:44:e4:a7:4b:
85:4d:3c:6b:59:68:01:03:f0:5e:a7:7c:43:63:8a:
7c:60:9c:9e:d9:c1:a7:08:9f:5b:86:49:48:bd:d3:
d2:66:ae:42:bb:c4:b8:2c:04:cc:ea:1c:bf:76:a6:
45:28:4a:30:dd:4c:f1:9b:00:c3:1b:26:6e:36:2f:
43:6b:47:f7:14:53:15:2c:f5:7c:85:cf:c0:d0:11:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:BF:1A:92:AB:93:F8:2D:55:93:0B:1F:B9:01:B9:F6:2F:F0:7B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1280::/44
Signature Algorithm: sha256WithRSAEncryption
d5:1e:ae:f0:70:36:a5:07:ff:6f:cb:e2:07:29:d0:71:1b:59:
a4:c0:13:70:93:9c:2e:77:71:f0:af:f3:26:56:09:5c:13:57:
82:2c:af:fc:9b:4b:33:cb:4b:e0:e5:b3:13:db:04:8f:e9:dd:
72:ca:35:c4:a6:63:b5:d0:13:bf:0d:5e:4d:6d:28:cd:93:74:
72:9e:6a:49:bb:e2:e3:3d:8d:5d:a2:1a:4a:74:f3:c8:cd:5f:
b0:94:ca:27:29:c8:b7:c5:4e:25:32:44:1a:a1:5a:e0:ef:a2:
80:9f:95:e6:40:ad:d2:eb:27:db:fc:46:eb:1e:fc:79:80:6b:
bc:fa:62:03:80:39:dd:1d:cb:db:6f:f3:c0:11:ea:fc:96:bd:
8a:0f:bd:86:b3:d1:01:e1:0d:95:a1:2e:1f:fd:9b:47:12:de:
92:ac:ac:c0:05:88:2a:5d:22:6e:fd:19:7a:27:2c:6a:f9:b8:
19:56:6e:d2:4f:9f:6a:bb:c1:f7:8f:9d:f1:05:27:2b:72:2e:
84:b4:73:08:f1:31:66:96:e3:0c:2e:e9:50:07:b9:d2:73:ee:
d5:ea:cc:7b:bd:38:57:29:6e:a4:c5:b2:7b:03:b4:95:f8:20:
c1:7f:37:69:19:8e:f2:64:9b:f9:f8:b7:df:2e:6b:c1:9c:f5:
50:b5:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:44 2025 by rpki-client