Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203979.roa
File: AS203979.roa (raw, json)
Hash identifier: 5/Zmvu7QIcdYQKSPOuV8cGEnoVvnRxMl1Kva7pabePQ=
Subject key identifier: 97:1A:1C:D0:5C:8E:DB:A9:5F:D6:8F:47:0E:89:52:6E:8C:E2:9B:49
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7C2E0CB29DDA5704414B0E0E587FB56F07A3DAAC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203979.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 203979
IP address blocks: 2a06:a005:454::/48 maxlen: 48
2a06:a005:455::/48 maxlen: 48
2a06:a005:45a::/48 maxlen: 48
2a06:a005:5a8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2e:0c:b2:9d:da:57:04:41:4b:0e:0e:58:7f:b5:6f:07:a3:da:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=971A1CD05C8EDBA95FD68F470E89526E8CE29B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:a5:01:03:b7:3b:7f:90:01:ef:a6:1c:66:
95:bd:9a:64:67:04:0c:bf:1b:69:72:a5:04:39:ac:
65:73:52:6c:88:d8:cb:d3:ee:11:95:eb:3d:be:82:
d0:da:9a:72:00:94:43:c0:f1:88:be:9f:56:43:81:
50:88:37:c0:d4:ab:91:62:0a:f4:08:3c:b6:d0:29:
38:e4:6a:a7:82:f4:f4:f3:35:44:80:76:dc:0a:06:
1f:77:e3:68:d7:d6:7b:4c:88:db:a1:6d:9b:e6:2e:
72:0d:fe:60:1f:ac:0f:b6:d1:42:94:4f:1e:2b:cc:
64:31:eb:df:f1:ef:23:b4:74:4d:0c:53:d9:cd:aa:
83:fb:6d:53:2e:4a:4d:08:1f:09:d0:ee:b5:8b:05:
66:98:6b:76:3a:b6:62:b8:0b:34:aa:3a:44:5a:73:
99:54:ba:40:41:2b:7b:bf:e3:a4:09:a9:ff:aa:4d:
e9:08:45:0b:75:05:94:de:2b:1e:fb:63:6c:53:18:
f6:a5:96:42:e0:17:f1:8e:5c:40:ef:79:3d:a8:40:
a2:f3:90:15:04:34:9a:1b:10:bd:16:81:fe:8d:67:
cc:d7:b5:ac:6b:96:d1:71:1c:f0:4f:62:33:da:5d:
24:e9:63:42:ad:0c:1d:d2:1b:23:4c:c3:4c:cb:ac:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:1C:D0:5C:8E:DB:A9:5F:D6:8F:47:0E:89:52:6E:8C:E2:9B:49
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:454::/47
2a06:a005:45a::/48
2a06:a005:5a8::/48
Signature Algorithm: sha256WithRSAEncryption
dd:2c:10:4b:ea:cb:26:83:8b:09:fa:c7:9b:cf:de:3c:9d:d5:
78:41:ff:17:73:57:62:77:28:ef:fa:e9:a1:39:22:f8:77:8c:
c9:4b:f2:e3:85:83:40:47:4f:1a:df:ac:d7:9a:de:f1:a8:31:
54:f1:0d:07:3c:aa:52:da:bd:f9:b9:5c:7c:80:0c:f3:5e:e9:
fd:9e:05:0c:94:c8:7a:fa:8a:3f:c4:04:81:e5:e0:49:9d:41:
76:ea:a1:2c:28:2f:69:f2:a7:fe:23:98:6c:a6:dd:e3:cd:fd:
cb:82:e4:55:7d:88:19:b1:4e:6d:74:57:50:78:9b:e4:0b:2d:
3b:15:77:07:99:87:2c:d2:5b:bd:51:01:d2:cf:eb:ab:6b:9d:
59:8d:d6:38:81:37:11:9a:ae:b8:3d:d4:0e:2a:ce:2c:4b:2d:
20:17:2d:14:51:a1:30:bd:16:ec:db:72:7c:10:c7:2e:fd:c0:
9a:cb:51:33:5f:29:14:e2:0c:c5:69:ce:75:ca:39:9d:9d:e2:
8c:d3:8f:0b:e4:06:8d:4f:d3:f0:c4:0a:1b:1b:7b:70:7f:e5:
55:67:c9:ff:97:27:ed:90:c8:8f:02:8b:50:17:cb:38:3d:e0:
86:f4:3d:23:f5:b6:32:9a:a3:ca:3a:7d:72:f1:a3:61:c4:4d:
ce:24:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:31 2025 by rpki-client