Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203913.roa
File: AS203913.roa (raw, json)
Hash identifier: NPiu0vJI6Qp2bMBXjRmzDmBhMA8j3uz+DqL6zVIBbmM=
Subject key identifier: 1D:1D:05:91:D5:B1:F3:0C:58:DA:EC:3F:EC:35:DE:C5:4F:39:E2:47
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 17C62B1A4C3C5BCB5993D039D89F9246E0233EED
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203913.roa
Signing time: Fri 09 Dec 2022 06:58:49 +0000
ROA not before: Fri 09 Dec 2022 06:53:49 +0000
ROA not after: Fri 08 Dec 2023 06:58:49 +0000
asID: 203913
IP address blocks: 2a06:a005:a16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c6:2b:1a:4c:3c:5b:cb:59:93:d0:39:d8:9f:92:46:e0:23:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 06:53:49 2022 GMT
Not After : Dec 8 06:58:49 2023 GMT
Subject: CN=1D1D0591D5B1F30C58DAEC3FEC35DEC54F39E247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:f2:5b:94:41:fc:29:80:25:40:76:e2:a3:
b6:3b:b0:02:c9:ca:09:ed:50:0b:ed:12:39:03:12:
e7:0e:b3:1c:e4:9a:6c:1b:ac:1f:b4:fb:53:07:26:
66:2d:ce:78:cf:b8:3f:8f:e2:a4:cd:fe:d9:d6:d9:
10:b0:e5:dd:a2:cc:66:e8:08:63:df:02:2c:93:1a:
a1:9a:32:f6:fb:f1:2a:49:10:45:cb:09:65:43:ab:
6a:5e:1d:44:91:14:73:70:ed:00:37:78:1d:76:3e:
55:d5:6d:02:4e:1d:ee:1b:22:44:57:67:e1:4b:4b:
15:66:c4:16:a0:33:7e:13:0f:d5:57:9e:5c:7d:53:
15:c9:e2:7f:1e:0d:97:87:ff:cc:d8:1e:a3:01:68:
a9:91:8c:69:48:ea:82:c9:a5:d9:ea:14:5b:fd:89:
05:f1:ad:b6:a8:a0:1c:5a:8a:74:ed:44:08:68:8b:
5e:56:0a:80:23:b8:a2:d1:a3:b5:6d:cf:62:1f:e4:
9c:52:dc:0b:ea:f1:4e:48:0b:7c:5a:df:e6:dd:27:
00:8d:8b:04:c1:f4:a0:07:ea:14:60:9a:f5:85:ed:
2c:a6:fb:a3:6f:23:6c:56:65:3b:2c:a1:fa:1c:f1:
a4:ee:8d:77:ee:fd:74:0e:d5:87:27:2f:c5:9d:15:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1D:05:91:D5:B1:F3:0C:58:DA:EC:3F:EC:35:DE:C5:4F:39:E2:47
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a16::/48
Signature Algorithm: sha256WithRSAEncryption
03:54:34:0b:cc:be:6e:ff:b7:b6:a0:84:90:7a:03:21:b2:ee:
92:ac:47:4c:11:c7:29:f4:e8:89:d8:cc:34:c3:8a:9a:4b:be:
8d:be:f3:8e:81:73:7f:2f:62:42:0b:29:ed:32:2a:1f:d0:4f:
a7:39:2c:2f:00:8a:e5:39:43:a3:88:b9:f5:af:58:77:7c:50:
87:2a:bd:9d:68:f7:1d:fc:9d:39:92:fb:0d:d4:b4:e6:2f:0f:
eb:c7:6e:39:00:f8:a4:42:8a:3e:7c:ac:ca:f6:69:a3:ed:97:
1e:62:c5:c0:30:3d:53:da:01:95:4d:1e:2c:cf:99:a1:a0:75:
3e:b5:ad:5d:1c:bf:25:d7:ad:f1:69:47:bd:18:23:50:bf:2c:
d9:51:fe:ad:16:37:f5:83:ac:3f:57:9d:70:16:f9:be:74:a3:
f5:99:46:f9:e0:fd:87:2f:71:e5:df:32:4c:aa:09:72:63:59:
fc:04:22:04:3c:a8:95:ce:9b:c2:13:b8:ac:be:52:3d:95:d0:
9e:7b:bb:b1:85:2e:51:2b:97:f1:ca:58:f2:3b:89:f3:94:21:
44:06:db:c5:00:19:f7:1c:e5:24:d6:3b:ba:10:ee:a6:8f:ab:
c4:2d:e6:3a:4e:c5:1c:a5:8a:91:b1:a4:c4:80:73:36:82:41:
63:a3:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:18 2025 by rpki-client