Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204136.roa
File: AS204136.roa (raw, json)
Hash identifier: xDzbgn8onIzfV8j+RE94uI+mb2EEyWcAu+6JtOjpENQ=
Subject key identifier: F1:47:CF:FA:D4:3A:89:D1:59:6C:3A:C0:02:AC:92:0B:0E:E0:9C:BF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3D0976D8543D0FD9ED47D3B17E78CD2D88E87730
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204136.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 204136
IP address blocks: 185.121.177.0/24 maxlen: 24
2a06:a005:8e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:09:76:d8:54:3d:0f:d9:ed:47:d3:b1:7e:78:cd:2d:88:e8:77:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=F147CFFAD43A89D1596C3AC002AC920B0EE09CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:27:9c:20:7a:2e:ff:b4:c8:d9:f8:09:a5:
ab:5a:19:37:34:da:90:9e:cf:a1:99:57:58:e5:53:
d6:b4:70:fc:0e:c4:6d:f0:08:30:4a:a4:8c:41:12:
ad:f5:52:59:45:07:bf:8f:46:3d:0b:b3:d5:5e:bb:
51:03:9d:9d:3d:93:2c:47:9e:02:3d:ad:a4:d0:de:
c8:3d:0e:a5:e4:14:aa:01:8e:25:7c:b6:79:34:71:
a3:5d:61:ad:50:c7:38:bd:3a:41:30:b8:55:87:f2:
46:7d:7a:af:17:59:6a:cb:9f:7b:ec:97:3e:80:1a:
ab:4f:c4:29:65:80:cf:b1:b7:f6:21:2a:27:b5:91:
d9:8b:2f:ea:ce:e0:85:b0:92:18:6e:bd:62:d0:96:
5e:92:5c:4b:4a:e9:58:c2:e2:fd:0e:f2:a3:89:7e:
4b:94:f2:47:e9:19:42:3a:b7:e9:d9:1b:da:3d:ad:
d7:f8:77:c4:eb:87:0d:bf:20:c2:c1:f2:7f:db:8c:
94:c7:fe:fe:49:8d:74:8e:57:7b:1c:dd:90:5a:95:
03:c4:1b:b7:69:76:b1:c8:1e:a0:8f:50:f0:55:f2:
ff:7a:d7:8d:59:03:9c:2b:e1:39:8f:c5:bd:91:32:
a5:5d:79:c9:e3:39:44:3d:eb:38:af:d2:3a:a5:36:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:CF:FA:D4:3A:89:D1:59:6C:3A:C0:02:AC:92:0B:0E:E0:9C:BF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.177.0/24
IPv6:
2a06:a005:8e0::/44
Signature Algorithm: sha256WithRSAEncryption
42:2b:e0:99:6b:31:e9:4b:28:d0:b2:73:da:dc:54:ad:af:46:
45:7f:fa:ec:cd:ab:13:f3:d0:e1:74:b0:57:cf:95:88:23:f8:
5b:a5:5b:ec:c6:84:d7:64:7a:1f:f3:fa:1a:61:f4:5d:2b:9d:
79:5e:71:2b:3d:7d:27:16:34:95:8e:18:bb:c8:b4:64:7d:99:
42:93:87:fe:75:db:72:90:66:95:60:1d:58:fb:f2:ac:db:6e:
9d:37:56:71:da:23:8d:c4:87:c7:c9:ad:f4:c2:67:d3:21:8f:
70:69:8f:95:6c:7a:d9:4b:16:f3:2a:e5:24:ce:67:cd:ef:29:
b9:a3:49:af:12:f8:24:ae:2e:58:df:41:92:ba:b0:1d:dc:40:
35:47:0c:4f:7b:77:21:71:f7:20:b3:f6:00:94:5c:53:a3:23:
04:18:a9:b6:56:06:e9:68:c5:f9:4a:16:46:7f:c7:52:69:20:
92:fc:30:d3:92:18:74:3b:49:9b:0b:44:75:68:43:de:f1:82:
cb:d7:f6:cd:4e:65:85:26:c1:d5:0a:db:d8:58:b0:70:d6:de:
ca:66:ee:70:c2:e5:82:bf:57:03:ca:80:f2:b8:51:fa:0e:b1:
f6:93:69:c6:d5:fa:bc:6f:36:d9:4f:59:57:b9:0f:6c:b8:28:
99:6c:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:04 2025 by rpki-client