Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204005.roa
File: AS204005.roa (raw, json)
Hash identifier: Ou9m4viLP8Wvvn5i3Q11rmWnCfdryyqetZ63t0EvlXk=
Subject key identifier: 94:28:F8:41:73:A0:96:03:0D:B9:0E:B3:24:1E:77:23:79:98:69:6F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6FA23B0B842488A2A68CDB61A3C2BE0B5767D4D2
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204005.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 204005
IP address blocks: 2a06:a005:ba9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a2:3b:0b:84:24:88:a2:a6:8c:db:61:a3:c2:be:0b:57:67:d4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=9428F84173A096030DB90EB3241E77237998696F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3d:7c:f2:50:0d:5c:f0:02:bd:15:f8:f1:aa:
4a:59:96:1a:82:c4:29:e0:56:9e:dc:70:fb:7a:36:
6e:0a:d6:6d:c2:ad:96:17:db:f9:d0:91:c2:2c:d9:
f2:b3:9e:08:09:9c:d6:31:94:84:da:b3:d6:5f:69:
c1:ed:fe:d5:4c:da:ba:30:9e:57:a4:61:15:5d:bf:
f4:41:74:4b:c9:45:f5:3e:60:fa:2c:d7:cb:4a:b6:
65:7c:f7:d4:1d:af:6a:a1:90:89:ba:a5:47:60:7a:
f7:99:5f:1d:31:05:d5:7d:dc:6d:40:35:a2:21:e7:
83:61:90:43:33:f7:78:b8:d2:be:33:08:aa:26:a7:
78:02:a7:4a:69:cf:d7:cb:e1:fa:e0:55:93:64:08:
b8:e8:97:17:92:a7:5d:aa:12:f9:cc:82:4f:e0:22:
02:32:85:c0:d0:95:6a:bd:2d:ee:bc:44:c8:f3:2a:
3d:ec:85:9e:76:4f:c5:8b:3b:2c:0f:ca:45:6a:06:
c0:03:46:8f:40:79:03:c2:3d:85:d9:32:de:79:b9:
12:11:12:38:96:e7:fb:4d:3f:d6:f8:6e:a4:05:ab:
a8:52:11:77:74:20:c6:be:18:da:89:3d:76:c8:7c:
e9:76:d4:b0:b8:57:c1:07:f7:d3:ae:2a:3b:35:54:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:F8:41:73:A0:96:03:0D:B9:0E:B3:24:1E:77:23:79:98:69:6F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba9::/48
Signature Algorithm: sha256WithRSAEncryption
ba:13:be:28:92:0e:e2:ff:40:09:3c:1e:25:2e:6c:f2:68:64:
d6:f1:a2:e3:bd:ef:02:22:96:23:ea:2b:9a:5c:c8:81:0e:90:
f5:00:88:cc:80:38:3a:11:cf:21:25:5e:b5:5a:3f:18:bb:fc:
e4:05:73:26:63:65:e0:8e:e7:a1:0f:21:b8:cd:2a:21:cd:99:
d0:ac:15:4e:93:74:58:e9:fd:a4:85:fc:7e:04:19:1b:ae:5d:
fb:96:76:e8:8a:48:17:55:c9:d6:fa:34:98:0e:ef:63:b9:f1:
80:5e:69:3c:18:08:a8:18:84:ad:63:8b:f1:58:d9:5b:05:c8:
91:52:8e:f1:fc:ed:e6:80:b4:76:05:13:d3:e3:4c:94:c1:f2:
67:61:d2:47:a1:25:5a:06:37:d2:25:08:c9:8e:7a:64:56:df:
3e:40:f9:11:b1:5b:cb:cf:13:b5:d3:d4:34:06:37:ca:6c:a8:
d7:1a:e4:cc:47:1c:84:ca:25:70:03:e4:20:65:7e:26:d6:f3:
d9:3c:25:26:59:59:02:d6:45:d0:33:48:31:e2:da:95:25:bb:
ba:ba:19:79:03:99:24:d7:72:e9:f1:43:82:2e:48:b4:6f:d4:
0c:d3:5e:68:64:ae:d0:82:69:da:ae:ca:ba:5b:8f:9d:d0:09:
32:c5:10:d1
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUb6I7C4QkiKKmjNtho8K+C1dn1NIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTJaFw0yMzEyMjAxNjU2NTJaMDMxMTAvBgNV
BAMTKDk0MjhGODQxNzNBMDk2MDMwREI5MEVCMzI0MUU3NzIzNzk5ODY5NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzPXzyUA1c8AK9FfjxqkpZlhqC
xCngVp7ccPt6Nm4K1m3CrZYX2/nQkcIs2fKznggJnNYxlITas9ZfacHt/tVM2row
nlekYRVdv/RBdEvJRfU+YPos18tKtmV899Qdr2qhkIm6pUdgeveZXx0xBdV93G1A
NaIh54NhkEMz93i40r4zCKomp3gCp0ppz9fL4frgVZNkCLjolxeSp12qEvnMgk/g
IgIyhcDQlWq9Le68RMjzKj3shZ52T8WLOywPykVqBsADRo9AeQPCPYXZMt55uRIR
EjiW5/tNP9b4bqQFq6hSEXd0IMa+GNqJPXbIfOl21LC4V8EH99OuKjs1VKAbAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUlCj4QXOglgMNuQ6zJB53I3mYaW8wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA0
MDA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQupMA0GCSqGSIb3DQEBCwUAA4IBAQC6E74okg7i
/0AJPB4lLmzyaGTW8aLjve8CIpYj6iuaXMiBDpD1AIjMgDg6Ec8hJV61Wj8Yu/zk
BXMmY2XgjuehDyG4zSohzZnQrBVOk3RY6f2khfx+BBkbrl37lnboikgXVcnW+jSY
Du9jufGAXmk8GAioGIStY4vxWNlbBciRUo7x/O3mgLR2BRPT40yUwfJnYdJHoSVa
BjfSJQjJjnpkVt8+QPkRsVvLzxO109Q0BjfKbKjXGuTMRxyEyiVwA+QgZX4m1vPZ
PCUmWVkC1kXQM0gx4tqVJbu6uhl5A5kk13Lp8UOCLki0b9QM015oZK7Qgmnarsq6
W4+d0AkyxRDR
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:12 2025 by rpki-client