Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204186.roa
File: AS204186.roa (raw, json)
Hash identifier: LEYih4m3WuBh/Mn4tFSeD4RiRdT4bm0daE7khELb5ng=
Subject key identifier: 5A:99:68:F8:63:77:40:69:C9:6D:AB:FD:E1:E9:D5:0A:B3:C5:F5:C8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 327296018D3FFEA63A8F9440AA2B6633E4D6A9DC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204186.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 204186
IP address blocks: 2a06:a005:150c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:72:96:01:8d:3f:fe:a6:3a:8f:94:40:aa:2b:66:33:e4:d6:a9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=5A9968F863774069C96DABFDE1E9D50AB3C5F5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f0:0e:e8:0a:d5:36:f8:39:12:e8:8b:22:27:
fb:38:5c:c4:d0:b7:0b:64:24:c6:77:bd:4b:4c:a5:
71:bc:22:29:51:64:6e:06:b1:8d:ed:40:87:2d:33:
97:7f:32:58:56:ce:4e:73:fe:ab:3f:a7:29:3d:20:
6f:49:64:05:c0:e9:72:0f:3e:2c:c6:b0:c1:3d:2a:
9b:c2:ab:7c:f7:4f:14:1c:6a:86:bc:67:0d:e3:b7:
20:15:48:b1:ee:58:c4:de:15:b8:3f:f6:72:61:29:
e6:0e:54:0b:ea:af:04:74:46:50:fc:7a:c3:20:fc:
0c:5a:fc:c1:7c:1b:1a:63:ef:d7:a8:e3:80:55:eb:
d0:12:e7:84:04:61:5b:ff:9a:c2:08:48:4c:f1:c4:
ee:ad:be:90:d1:0e:25:f1:bd:2c:a1:50:88:57:29:
05:c3:ae:33:08:39:2f:bd:53:90:52:23:d8:32:21:
b9:e6:83:73:d1:c2:3c:ce:ea:19:d4:71:e9:e1:a5:
c0:bf:13:d6:00:95:5a:61:d2:49:2a:0b:05:2c:af:
be:2d:dd:1f:6a:18:56:dc:7c:e6:6a:7d:af:21:fc:
a1:7a:09:53:8e:00:ce:bc:03:08:c9:0a:c1:44:02:
fa:68:5c:c7:64:ff:8f:71:47:97:97:62:2f:1f:eb:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:68:F8:63:77:40:69:C9:6D:AB:FD:E1:E9:D5:0A:B3:C5:F5:C8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150c::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a4:ab:a1:7b:32:fe:e1:56:59:ae:ba:ca:29:b6:77:ac:46:
a5:b7:87:f6:81:b9:45:37:5b:f2:fb:13:ef:68:90:49:37:7a:
f8:77:31:a4:c8:82:4a:2c:05:71:b9:1a:51:ad:a7:ce:f5:5b:
9b:e1:c6:f2:a3:32:5c:0b:62:1c:82:dd:ec:c6:31:a5:af:00:
c8:8f:69:de:c0:05:21:66:a5:1e:cb:5d:82:64:1b:4d:74:54:
42:20:45:16:44:18:52:ae:f0:5a:01:18:65:52:50:b0:93:a1:
8e:55:91:d0:5a:db:dc:fe:88:ae:14:be:ac:c9:79:b6:b7:b0:
f2:7a:51:3e:b9:bd:88:46:c0:79:32:98:0d:f7:68:10:fb:f2:
e6:9f:69:f2:8a:b4:89:7e:bc:7e:d1:cf:89:5c:54:a5:a6:ca:
4c:aa:a8:19:e9:28:75:db:2c:05:0b:3f:73:cb:18:40:b9:3a:
7f:c1:39:b2:5d:d2:8d:69:fc:bf:20:e8:49:c0:ca:0b:c8:80:
e5:3f:2b:5f:8d:db:0b:03:29:cf:d6:55:29:b5:a0:97:3d:c4:
f3:41:ac:e0:1a:6b:65:bd:22:24:6b:e7:21:fd:46:0f:0b:77:
33:36:73:2b:28:da:b6:ab:27:e5:73:b4:c4:20:53:2b:45:11:
0e:6d:63:dc
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUMnKWAY0//qY6j5RAqitmM+TWqdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTRaFw0yMzEyMjAxNjU2NTRaMDMxMTAvBgNV
BAMTKDVBOTk2OEY4NjM3NzQwNjlDOTZEQUJGREUxRTlENTBBQjNDNUY1QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD08A7oCtU2+DkS6IsiJ/s4XMTQ
twtkJMZ3vUtMpXG8IilRZG4GsY3tQIctM5d/MlhWzk5z/qs/pyk9IG9JZAXA6XIP
PizGsME9KpvCq3z3TxQcaoa8Zw3jtyAVSLHuWMTeFbg/9nJhKeYOVAvqrwR0RlD8
esMg/Axa/MF8Gxpj79eo44BV69AS54QEYVv/msIISEzxxO6tvpDRDiXxvSyhUIhX
KQXDrjMIOS+9U5BSI9gyIbnmg3PRwjzO6hnUcenhpcC/E9YAlVph0kkqCwUsr74t
3R9qGFbcfOZqfa8h/KF6CVOOAM68AwjJCsFEAvpoXMdk/49xR5eXYi8f66L9AgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUWplo+GN3QGnJbav94enVCrPF9cgwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA0
MTg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBRUMMA0GCSqGSIb3DQEBCwUAA4IBAQAdpKuhezL+
4VZZrrrKKbZ3rEalt4f2gblFN1vy+xPvaJBJN3r4dzGkyIJKLAVxuRpRrafO9Vub
4cbyozJcC2Icgt3sxjGlrwDIj2newAUhZqUey12CZBtNdFRCIEUWRBhSrvBaARhl
UlCwk6GOVZHQWtvc/oiuFL6syXm2t7DyelE+ub2IRsB5MpgN92gQ+/Lmn2nyirSJ
frx+0c+JXFSlpspMqqgZ6Sh12ywFCz9zyxhAuTp/wTmyXdKNafy/IOhJwMoLyIDl
PytfjdsLAynP1lUptaCXPcTzQazgGmtlvSIka+ch/UYPC3czNnMrKNq2qyflc7TE
IFMrRREObWPc
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:29 2025 by rpki-client