Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203888.roa
File: AS203888.roa (raw, json)
Hash identifier: JtezmAIcxT46QJcy50C5y8SJBaTrStPPzNY5K8xC+dY=
Subject key identifier: 12:87:A3:13:97:08:37:F6:6F:8B:D0:E6:64:14:E5:D2:B5:CB:9A:F6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0404091558F1AC20D4080AFCD432256FAF88CF74
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203888.roa
Signing time: Sun 01 Jan 2023 03:22:59 +0000
ROA not before: Sun 01 Jan 2023 03:17:59 +0000
ROA not after: Sun 31 Dec 2023 03:22:59 +0000
asID: 203888
IP address blocks: 2a06:a005:b60::/44 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:d80::/44 maxlen: 48
2a06:a005:1166::/48 maxlen: 48
2a06:a005:150a::/48 maxlen: 48
2a06:a005:2480::/44 maxlen: 48
2a06:a005:24b0::/44 maxlen: 48
2a06:a005:2900::/44 maxlen: 48
2a06:a005:29b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:04:09:15:58:f1:ac:20:d4:08:0a:fc:d4:32:25:6f:af:88:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Jan 1 03:17:59 2023 GMT
Not After : Dec 31 03:22:59 2023 GMT
Subject: CN=1287A313970837F66F8BD0E66414E5D2B5CB9AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:27:e3:d2:cd:5d:7b:7a:c5:fd:0a:a9:aa:
d7:ab:90:d4:aa:16:80:a6:36:83:af:1c:cb:57:72:
c2:e5:c9:20:a0:05:7b:c2:e1:f0:52:80:b1:0a:c2:
5d:9e:f7:82:64:b1:93:10:29:a0:91:cf:f5:8a:5e:
2a:d9:46:ea:39:5f:97:d7:50:15:76:c5:9d:d6:cb:
e0:e3:a8:ed:f5:de:ea:e9:1d:6f:5a:e6:ea:20:3a:
2e:fc:70:07:be:37:cd:d1:bd:3e:9b:b6:58:0a:51:
ec:2b:b1:bb:b1:e0:d8:77:55:6b:b0:28:b6:18:af:
ef:aa:5b:89:ea:bc:1d:39:fa:da:63:e1:42:19:dd:
f8:4d:18:f3:65:ce:90:a4:68:bb:2c:db:a5:b8:03:
ed:3a:2e:db:e3:a6:ad:e6:55:00:95:8c:42:a8:19:
3c:b2:f0:0c:43:d6:69:43:47:ab:2d:42:fa:39:b1:
ff:c7:fa:df:49:71:a2:f9:0f:bc:af:85:fc:a9:0c:
ad:8b:1c:f3:a1:27:c1:7c:20:ba:14:cc:b7:42:70:
44:48:f1:16:9b:cd:01:29:69:65:29:89:a7:ec:a3:
10:d0:de:f7:b2:dc:2f:4d:3e:7d:f0:cc:c6:12:6d:
e4:b8:dc:5c:3b:3d:2f:97:2e:0b:45:2d:5a:68:2e:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:A3:13:97:08:37:F6:6F:8B:D0:E6:64:14:E5:D2:B5:CB:9A:F6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:d80::/44
2a06:a005:1166::/48
2a06:a005:150a::/48
2a06:a005:2480::/44
2a06:a005:24b0::/44
2a06:a005:2900::/44
2a06:a005:29b0::/44
Signature Algorithm: sha256WithRSAEncryption
41:a6:22:13:0b:fb:db:0f:81:a3:6e:17:48:0b:22:b9:5d:f8:
b6:d7:f4:ae:29:2b:58:08:75:77:82:68:6b:8c:19:89:3c:12:
96:fb:2b:78:dd:a1:82:58:d6:cc:08:a1:9e:2c:81:c8:61:cc:
de:5d:cc:49:f1:22:91:a5:bd:85:32:0e:2f:36:46:04:31:39:
c2:24:af:20:d2:ce:20:8b:05:0e:b9:b7:eb:4b:b1:bd:77:33:
82:bd:72:db:f3:cb:f7:c6:c0:c3:7d:37:e7:11:d2:f3:86:be:
5f:36:44:76:21:4c:16:c4:d2:4f:e4:de:c5:05:87:e5:c9:c3:
bf:6f:19:51:b7:30:69:a6:32:03:86:6d:d1:a8:8a:f5:4f:06:
c3:9a:5a:8d:d7:68:5a:4e:e3:64:5e:17:47:25:bc:57:ee:34:
74:f6:b6:31:3e:0e:0f:72:3a:8b:69:a2:b0:45:38:5a:2b:86:
aa:be:1e:6f:97:ba:0f:5e:f6:14:b0:18:48:07:93:81:62:c8:
b1:16:a4:7c:80:5f:e0:20:60:aa:c6:a6:74:d9:d8:e6:f8:4e:
ba:af:d4:97:eb:51:57:22:88:14:11:31:7a:69:4d:b6:f7:5f:
ff:ef:fb:fe:47:47:ce:df:f7:de:de:85:0a:04:91:f2:21:82:
de:2e:6b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:38 2025 by rpki-client