Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204069.roa
File: AS204069.roa (raw, json)
Hash identifier: 5JaQteyLdDxQsZlq1gozRr7Mp/vXMHBxxrhrrU8YU0s=
Subject key identifier: 82:5D:D2:76:6C:4D:22:D0:A2:88:D7:F0:06:F7:B4:94:28:57:45:E4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 678F00ADF54B7AAD7B1707C63815C5A6C9BEEC66
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204069.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 204069
IP address blocks: 2a06:a005:a14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8f:00:ad:f5:4b:7a:ad:7b:17:07:c6:38:15:c5:a6:c9:be:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=825DD2766C4D22D0A288D7F006F7B494285745E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:29:99:0e:35:19:9d:a8:14:80:1a:d3:3b:
0d:0b:45:52:84:bc:3e:fb:91:52:27:e2:3a:3e:85:
c1:14:2b:e5:ac:82:cd:08:78:ab:85:ec:39:b8:c3:
49:6c:86:79:7a:b0:34:21:22:34:bb:df:90:7e:ca:
af:0e:88:f4:b6:f3:87:13:09:3d:a6:95:96:a4:78:
83:27:64:c9:5e:e5:d1:1a:58:29:9f:54:46:45:71:
1a:3f:5a:f9:ca:37:5b:f2:39:98:2b:69:76:e6:db:
99:0c:83:7c:5a:36:6f:a5:15:93:db:a2:6c:0e:6b:
91:18:dc:6b:6c:02:14:65:76:1f:60:46:2b:27:48:
d3:5c:7f:3c:f9:0d:1d:d3:3f:f1:ec:17:23:f4:6d:
67:09:9a:e5:2e:dd:d8:27:74:10:57:56:40:61:28:
ce:a5:02:73:3d:13:28:eb:7a:4c:57:ff:c2:b6:fe:
71:6c:f6:05:9d:9c:3a:f5:c2:d6:38:8a:56:d2:9e:
94:ad:93:1e:8c:84:e0:bf:22:a0:b9:9b:c2:8e:c2:
ca:2f:9e:e3:c5:05:f2:84:71:4d:c3:c5:86:e5:84:
85:0c:f5:a7:38:ec:8d:8a:21:49:e3:25:1a:ad:89:
c7:78:6f:a7:ff:33:8c:31:31:5e:77:e9:62:ab:6c:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:D2:76:6C:4D:22:D0:A2:88:D7:F0:06:F7:B4:94:28:57:45:E4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a14::/48
Signature Algorithm: sha256WithRSAEncryption
d1:ce:bb:0a:ec:2b:8b:e4:b1:72:d5:3e:99:2b:dc:e1:d8:3b:
a7:a9:ea:3b:fe:2a:a0:17:a0:65:88:c4:f8:fc:bc:54:c1:27:
99:36:dd:1f:ec:5b:60:75:1f:77:1d:f7:f9:65:1c:32:d3:6b:
ad:30:63:3a:1b:c1:11:24:74:d0:6e:a8:78:d9:04:80:64:ad:
65:04:bf:3e:a4:7d:c2:85:ea:65:f1:4d:7a:28:b9:7a:cf:51:
7f:be:ce:05:5f:44:dc:6b:a9:c0:ae:ed:b6:bd:7e:86:a5:0f:
a5:37:37:35:45:7f:fc:f9:b8:be:c0:78:b8:7f:4b:b2:8b:48:
0d:0b:d6:32:71:36:99:8d:6a:b2:5d:1c:1d:ac:18:cb:47:7a:
cd:24:55:3d:a7:cf:10:db:53:70:55:85:dc:8e:65:de:6c:c8:
0e:a0:4f:be:a1:02:95:4e:a4:d3:0c:59:9a:34:c2:0c:52:1c:
34:80:2c:f7:d5:06:ca:f3:05:94:84:45:61:ec:3d:82:4b:49:
e9:fe:f8:c8:f2:29:89:a6:c7:39:12:d5:4a:75:74:d7:fc:31:
38:00:90:32:db:c1:88:a8:90:74:70:00:6e:4a:45:00:65:f9:
d0:6e:2c:99:57:d8:ba:26:92:fa:f5:a6:58:94:d0:13:66:da:
21:94:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:39 2025 by rpki-client