Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204340.roa
File: AS204340.roa (raw, json)
Hash identifier: rHw1zCVYAAoPraaZ1XllzvDj0aqk5nT1QsIrELFEV3Y=
Subject key identifier: 69:32:B3:51:A8:BD:C2:03:66:95:A8:4B:B4:4B:17:F1:4C:7E:7B:A6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 31B408C52B047A2D748D4055F64190D318AA65D6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204340.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 204340
IP address blocks: 2a06:a005:8b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b4:08:c5:2b:04:7a:2d:74:8d:40:55:f6:41:90:d3:18:aa:65:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=6932B351A8BDC2036695A84BB44B17F14C7E7BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:b1:93:27:c2:7c:82:d4:fe:98:6b:c5:bb:
d0:7f:7f:5f:92:cb:f9:b1:da:b4:7f:b9:6b:1f:28:
07:e7:fd:79:da:30:81:81:d8:d6:32:e7:5f:ce:89:
08:d0:ab:5b:06:4c:6e:51:ea:be:1a:85:46:ec:8e:
c9:9c:99:7d:0c:d7:9e:35:7c:54:29:b4:89:33:08:
b0:56:17:5e:c0:f7:3e:53:14:e1:20:39:f7:8e:09:
3c:7d:da:5b:a0:08:df:c6:88:18:5d:0f:d7:bd:a9:
5e:2a:69:73:69:67:b7:80:57:ed:e9:66:e4:b1:88:
ea:84:48:9e:6f:da:63:b4:35:a0:83:42:7b:8d:7b:
5e:e4:77:fc:1c:0f:87:99:98:7d:27:c1:57:e1:79:
e4:7a:ae:bb:d2:56:59:41:78:3b:c0:ad:ac:dd:4e:
58:f8:da:3e:3c:d3:db:41:ee:20:84:58:63:da:7b:
5d:32:64:7b:5d:2f:d8:aa:da:ac:ba:e5:a1:53:cf:
17:fb:cd:fd:33:39:41:91:c2:2d:94:f4:e6:c5:3b:
3b:ba:d4:9d:ce:39:df:ba:58:73:65:53:4a:8b:aa:
eb:4a:57:24:7f:37:be:26:95:e2:86:59:49:09:71:
97:7c:38:55:32:01:07:09:8f:23:45:47:54:30:a1:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:B3:51:A8:BD:C2:03:66:95:A8:4B:B4:4B:17:F1:4C:7E:7B:A6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8b0::/44
Signature Algorithm: sha256WithRSAEncryption
33:d6:fc:1e:7f:6b:72:ea:d2:0b:e4:a0:d0:a0:97:0f:ad:6a:
2a:68:98:58:01:f3:5e:f4:65:86:a8:2b:6f:86:e0:68:44:b2:
52:48:cc:13:ca:ea:58:21:dc:63:79:e8:0c:94:62:37:70:48:
1f:bd:02:dd:8c:40:a6:06:a2:30:1e:98:5d:fa:c1:47:d9:04:
1d:ad:48:60:38:6a:64:41:5e:ea:3d:d1:77:aa:69:da:59:c0:
89:db:f4:93:94:9a:d6:ae:25:31:3b:0c:5c:aa:80:a1:01:55:
5f:19:2d:e6:9c:09:a6:08:b9:fc:bd:21:81:81:14:3e:e0:9a:
ae:ec:15:4d:12:1e:e4:3d:31:71:4f:b1:4e:eb:99:5b:3f:f0:
16:18:74:99:c8:05:94:84:7f:19:7e:e6:6c:8d:a6:88:f7:e2:
13:00:89:0f:71:3e:40:78:1a:36:d8:15:98:5a:48:0e:67:53:
00:88:11:3b:2f:9e:e7:dd:a9:e4:b2:7f:02:d1:94:8d:41:d4:
88:22:48:87:df:fe:62:01:4c:03:ab:5c:0f:30:99:57:3c:a9:
f0:c1:69:3a:fb:d1:cc:d0:3a:a4:94:84:b5:63:a6:e3:c1:8f:
14:db:cb:9a:48:cd:b2:4c:f3:c5:8d:31:f8:17:3b:47:00:9b:
ea:ba:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:36 2025 by rpki-client