Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203899.roa
File: AS203899.roa (raw, json)
Hash identifier: dx484cAH0dFXHNQ64gpvHu5eUwZUMja3lHZNt/6xWB0=
Subject key identifier: CB:BC:CD:8B:13:02:C9:50:0A:B9:7B:77:73:D1:81:DD:56:0C:01:C9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 07DF0F768EA2A7A55D49FBDF8187982E8516E3A5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203899.roa
Signing time: Wed 21 Dec 2022 16:56:56 +0000
ROA not before: Wed 21 Dec 2022 16:51:56 +0000
ROA not after: Wed 20 Dec 2023 16:56:56 +0000
asID: 203899
IP address blocks: 2a06:a005:1200::/44 maxlen: 48
2a06:a005:1210::/44 maxlen: 48
2a06:a005:1220::/44 maxlen: 48
2a06:a005:1230::/44 maxlen: 48
2a06:a005:1240::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:df:0f:76:8e:a2:a7:a5:5d:49:fb:df:81:87:98:2e:85:16:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:56 2022 GMT
Not After : Dec 20 16:56:56 2023 GMT
Subject: CN=CBBCCD8B1302C9500AB97B7773D181DD560C01C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:ac:80:d5:2b:b1:20:fb:3c:6d:9e:e2:6a:
c7:00:90:9e:1d:4d:61:18:03:b2:a5:b8:20:32:03:
c1:14:fa:af:9a:04:8a:03:6f:be:ec:cb:5c:cc:b2:
af:b4:ea:f3:68:8d:c2:01:d8:ec:50:eb:1b:ba:93:
68:40:f6:49:5e:25:a9:93:16:ce:4a:86:ad:e2:f6:
32:4c:11:b7:3e:f7:45:ee:2b:07:33:d2:66:5e:10:
f9:ff:10:35:35:d1:3d:fc:43:dd:17:f3:c8:8e:1a:
a9:85:16:f4:e5:59:48:84:b3:16:d2:a0:68:4c:18:
a8:47:ac:92:bb:6b:22:59:ee:e0:74:65:3a:64:6a:
f6:03:86:41:61:9a:57:8e:d5:96:df:e6:0b:ed:77:
f8:ab:e1:85:a3:8d:8e:e7:fb:15:af:81:47:1b:0a:
63:a2:f9:84:20:f0:6e:c3:a6:1d:64:2f:03:ef:53:
29:d4:ec:8a:0e:e0:fc:db:7f:79:7a:c9:09:d0:88:
92:7b:6d:0c:f6:94:5a:77:6e:b8:7a:ea:ef:f6:a6:
29:b6:5f:c8:ea:aa:da:48:7b:84:32:94:a9:2c:19:
a6:aa:fe:02:51:ab:7e:01:e5:64:eb:22:b9:4b:cb:
3d:2f:9a:b3:6b:af:27:08:26:e4:d5:2b:96:37:fa:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:CD:8B:13:02:C9:50:0A:B9:7B:77:73:D1:81:DD:56:0C:01:C9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1200::-2a06:a005:124f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:b6:f2:31:12:b0:d2:e7:cd:fa:9a:fe:05:13:75:7b:64:d1:
f9:25:92:04:47:db:90:6d:dd:d3:06:c0:81:00:25:a2:4c:ed:
9e:d9:c5:b9:88:ef:9e:ef:1d:54:0d:87:bf:5d:af:57:87:6e:
ca:df:df:c3:db:a9:08:5b:c2:b6:94:ec:50:5e:90:75:90:8a:
60:88:92:15:d8:56:1d:f1:a2:ff:55:82:d0:48:ef:1e:42:3d:
c4:79:ea:9a:11:94:24:0f:0b:d5:aa:b8:1a:ab:62:78:f3:2a:
bb:a2:3f:87:24:86:0d:c3:fb:2b:53:c1:a5:60:4f:00:35:34:
26:87:e5:aa:19:67:a4:dd:b6:44:29:8d:7c:4d:47:8b:2d:8b:
f1:15:40:aa:c2:ff:8b:bf:27:6d:50:3e:96:b1:a8:f4:80:0e:
85:80:9c:85:48:13:45:9e:0b:5f:9b:b7:45:08:2a:6f:75:1e:
30:22:ef:a6:5c:8b:1c:31:81:e9:11:be:5c:37:13:d3:32:fe:
f5:fb:76:b4:c1:a6:db:6b:a3:80:47:87:3f:90:91:be:83:31:
e5:fa:cd:f5:15:56:03:d3:bb:4d:8b:86:6b:65:79:66:72:c0:
30:82:2e:4b:33:99:06:d0:9e:62:cf:a4:55:6b:78:6d:6a:bc:
99:ce:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:39 2025 by rpki-client