Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204268.roa
File: AS204268.roa (raw, json)
Hash identifier: GVyyWGfcWhwcnaSoWnOIcL4Nq8XRM2/P3/+JhGm7bQw=
Subject key identifier: 4C:B0:74:8F:07:28:15:B3:5B:10:38:84:20:77:80:70:CA:DF:0B:79
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1316A1F71EDC8448CE1A1A7F5B5AE7BBA8CDB6B0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204268.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 204268
IP address blocks: 2a06:a005:a0e::/48 maxlen: 48
2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:15b0::/44 maxlen: 48
2a06:a005:1d59::/48 maxlen: 48
2a06:a005:2320::/44 maxlen: 48
2a06:a005:2820::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:16:a1:f7:1e:dc:84:48:ce:1a:1a:7f:5b:5a:e7:bb:a8:cd:b6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=4CB0748F072815B35B10388420778070CADF0B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:3f:6f:34:51:8d:29:ec:aa:d8:55:fd:bc:
60:7e:34:eb:76:36:5b:10:bc:33:a3:34:4e:5b:cd:
15:45:d5:4a:88:7d:22:f1:56:60:62:40:94:69:58:
b5:4e:8c:e5:13:63:79:3b:67:bb:3c:ca:98:d6:1e:
7c:22:45:dd:61:be:9d:15:73:43:b7:b3:4c:81:b2:
06:c8:4e:64:da:05:24:c4:01:b6:fc:b9:7c:5c:3c:
6c:d4:ba:29:99:32:55:ac:60:df:8f:be:a0:bc:0d:
c8:08:60:9e:a8:8a:90:ae:c3:db:be:81:fe:c6:ec:
9c:c9:fb:3f:30:14:67:66:22:42:2a:0d:03:65:06:
6e:ee:c9:7b:30:3c:ed:38:c3:3b:18:ac:fa:f1:49:
6d:48:98:4d:fa:51:3a:56:90:56:db:b4:ae:59:01:
04:70:0c:70:90:43:e5:67:02:43:a6:41:26:b4:29:
16:bc:53:5f:56:97:78:85:e1:64:f5:17:0c:2e:26:
aa:e4:9c:d5:ea:56:1e:56:6d:53:44:93:53:9b:62:
02:1b:06:59:70:49:22:75:c8:ce:1c:56:d0:91:b0:
3e:60:4e:92:71:11:96:ad:53:f1:c6:ec:d2:75:d5:
56:81:48:cb:aa:6f:d1:20:8f:95:a8:21:0b:23:77:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:74:8F:07:28:15:B3:5B:10:38:84:20:77:80:70:CA:DF:0B:79
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
2a06:a005:15b0::/44
2a06:a005:1d59::/48
2a06:a005:2320::/44
2a06:a005:2820::/44
Signature Algorithm: sha256WithRSAEncryption
3e:70:e5:a2:68:98:ca:2b:dc:8a:b4:6d:0f:1e:e2:d4:24:f2:
af:99:cf:4d:68:84:28:0d:d3:49:ae:61:0e:1b:f7:41:dd:3c:
1a:36:b0:8f:54:28:b2:0a:6f:6f:72:75:08:ac:27:b4:ab:f9:
2a:e1:68:d6:82:25:49:97:cc:07:d9:a8:ce:99:c4:98:48:3c:
7c:9d:19:70:aa:ed:16:43:8f:89:c9:00:6d:a2:a6:d8:bb:3b:
69:30:c5:62:07:3e:40:db:35:cb:01:31:24:5b:96:6a:4d:df:
2d:5d:ab:eb:5d:71:3e:e9:b8:e9:b2:67:24:1d:7c:96:b1:9f:
cf:d8:ef:70:72:11:8d:79:34:67:f3:cc:58:64:33:20:f5:9d:
b3:48:b5:d4:0e:ce:a3:f3:d3:2a:9c:af:be:49:59:14:d6:78:
8b:e7:84:01:16:47:59:c9:62:cc:bc:ec:f7:10:2c:bc:1c:4e:
57:11:ce:4d:a6:4c:6c:1f:60:74:db:6b:cd:b1:3d:72:45:46:
93:23:d0:4d:4f:71:29:cf:c0:c8:e9:15:4e:cb:fb:82:12:47:
91:06:db:b8:2a:65:87:8d:a2:b2:bf:ab:6b:70:c3:52:9b:bb:
07:4c:c8:95:25:65:e7:35:1b:a8:1f:b3:d0:42:85:bd:4e:d8:
81:3e:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:56 2025 by rpki-client