Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203915.roa
File: AS203915.roa (raw, json)
Hash identifier: RRnWynA4LvwGm35lPajVf9Tw1AvAP0V2M6m1+O8Zk0A=
Subject key identifier: 90:A4:A5:28:3C:A6:66:F1:35:4F:8D:F7:CE:FD:88:F6:D1:F3:11:F3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2C627AC6A39C292EF07EC6664A4BADB1B4F48685
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203915.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 203915
IP address blocks: 2a06:a005:ba8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:62:7a:c6:a3:9c:29:2e:f0:7e:c6:66:4a:4b:ad:b1:b4:f4:86:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=90A4A5283CA666F1354F8DF7CEFD88F6D1F311F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:7d:10:49:27:e9:83:90:ed:c1:b1:39:18:
dc:93:e8:4a:c0:7d:2a:1f:9c:19:43:5b:ce:5b:e1:
59:ad:c2:3d:36:79:ee:b7:88:0f:b0:c0:f2:b4:00:
bd:72:ab:70:bd:fd:22:25:85:e4:6f:83:85:cf:ab:
74:b2:1c:b6:74:7d:8f:9f:17:c5:2e:82:62:c8:1f:
74:a1:a6:f1:da:c6:45:28:01:94:1d:b6:f9:4d:06:
a4:d6:c5:ab:c7:1a:3f:76:7b:dd:09:3a:9a:90:2e:
ad:6a:81:c6:58:df:ff:aa:52:f2:a2:15:86:88:90:
a0:54:2c:b1:78:e6:0e:8e:2c:6d:11:b4:67:d8:02:
4a:fa:ac:bd:a0:a9:4e:06:f3:ea:88:5f:ad:62:6a:
b6:13:5e:f8:6b:9e:6f:35:15:a1:22:a3:d9:94:66:
e9:2c:00:44:df:17:3c:7c:6f:6a:36:67:c0:30:78:
4f:aa:ff:0f:be:ea:05:b1:d0:a4:a9:b1:e9:51:bf:
d5:20:75:c8:3a:45:5e:78:33:46:96:5e:4c:32:29:
54:4d:4d:00:f4:36:78:aa:49:da:aa:90:03:a0:e4:
ca:0d:e4:fe:66:84:bf:09:60:54:87:48:f9:11:08:
49:60:7d:cd:e9:33:8f:9b:f4:f7:0c:f0:83:ff:da:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A4:A5:28:3C:A6:66:F1:35:4F:8D:F7:CE:FD:88:F6:D1:F3:11:F3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba8::/48
Signature Algorithm: sha256WithRSAEncryption
55:e2:37:21:fa:c0:84:7b:04:41:f7:43:4a:98:2b:4d:23:b0:
a1:b8:ea:b1:54:79:7b:1a:d8:4a:22:0f:85:da:c6:49:9e:e0:
2f:0c:f6:bf:d0:e2:a0:2f:4b:80:97:5f:e2:10:60:40:87:e6:
d2:ce:b8:45:79:80:34:fe:51:e1:cd:09:0d:e8:e6:02:5d:78:
4f:8b:f0:1e:19:95:58:20:21:21:05:ef:a0:0a:25:fc:e2:3d:
48:9d:ec:31:b4:ab:d8:ef:7a:dc:31:a4:3f:20:3e:43:c3:b4:
f2:75:c7:ad:25:7d:ad:f1:dd:6e:b5:fa:c5:af:ae:8c:6e:30:
76:3c:be:04:ce:39:b0:a4:e5:39:6d:cb:a5:48:1f:95:5b:1c:
16:97:1e:87:b8:0e:a7:74:7e:9b:a4:f6:22:f6:f6:3c:fa:74:
38:72:96:b6:32:f5:6a:d0:e5:06:b9:41:82:c7:3d:ec:77:cf:
46:13:10:d2:e7:44:0b:de:3e:e1:b3:d5:2e:d3:2c:fd:73:77:
18:c0:29:72:16:d5:5c:47:6a:52:33:f1:3e:7b:9e:a1:e4:4a:
b3:d0:8e:ed:62:f6:c3:21:e8:44:8a:fe:f0:01:36:fc:7e:ef:
0d:43:2a:40:6e:9f:70:1f:29:92:f0:0c:28:11:0b:cf:6c:30:
6e:11:63:cb
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIULGJ6xqOcKS7wfsZmSkutsbT0hoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTBaFw0yMzEyMjAxNjU2NTBaMDMxMTAvBgNV
BAMTKDkwQTRBNTI4M0NBNjY2RjEzNTRGOERGN0NFRkQ4OEY2RDFGMzExRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXan0QSSfpg5DtwbE5GNyT6ErA
fSofnBlDW85b4Vmtwj02ee63iA+wwPK0AL1yq3C9/SIlheRvg4XPq3SyHLZ0fY+f
F8UugmLIH3ShpvHaxkUoAZQdtvlNBqTWxavHGj92e90JOpqQLq1qgcZY3/+qUvKi
FYaIkKBULLF45g6OLG0RtGfYAkr6rL2gqU4G8+qIX61iarYTXvhrnm81FaEio9mU
ZuksAETfFzx8b2o2Z8AweE+q/w++6gWx0KSpselRv9Ugdcg6RV54M0aWXkwyKVRN
TQD0NniqSdqqkAOg5MoN5P5mhL8JYFSHSPkRCElgfc3pM4+b9PcM8IP/2hv/AgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUkKSlKDymZvE1T433zv2I9tHzEfMwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAz
OTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQuoMA0GCSqGSIb3DQEBCwUAA4IBAQBV4jch+sCE
ewRB90NKmCtNI7ChuOqxVHl7GthKIg+F2sZJnuAvDPa/0OKgL0uAl1/iEGBAh+bS
zrhFeYA0/lHhzQkN6OYCXXhPi/AeGZVYICEhBe+gCiX84j1InewxtKvY73rcMaQ/
ID5Dw7TydcetJX2t8d1utfrFr66MbjB2PL4EzjmwpOU5bculSB+VWxwWlx6HuA6n
dH6bpPYi9vY8+nQ4cpa2MvVq0OUGuUGCxz3sd89GExDS50QL3j7hs9Uu0yz9c3cY
wClyFtVcR2pSM/E+e56h5Eqz0I7tYvbDIehEiv7wATb8fu8NQypAbp9wHymS8Awo
EQvPbDBuEWPL
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:26 2025 by rpki-client