Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204374.roa
File: AS204374.roa (raw, json)
Hash identifier: lHMx/y92bI54WrM2V9RbOssCBhnXd+Yu5dU3N5IxKRg=
Subject key identifier: 51:6A:C2:E1:55:10:9C:D9:05:04:D4:41:8F:96:AE:F3:DF:E8:54:A4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7BC8C59BDFAA94BB8132FD7D1B572693D55708A2
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204374.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 204374
IP address blocks: 2a06:a005:5a7::/48 maxlen: 48
2a06:a005:85f::/48 maxlen: 48
2a06:a005:1090::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c8:c5:9b:df:aa:94:bb:81:32:fd:7d:1b:57:26:93:d5:57:08:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=516AC2E155109CD90504D4418F96AEF3DFE854A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:3d:b2:b2:21:87:4f:fd:75:09:f9:60:e8:
dc:c5:74:11:1a:4e:17:6d:79:82:a0:76:88:02:3a:
84:c7:cf:34:7c:0b:ac:5f:e2:46:c7:fd:9f:bd:92:
44:36:bf:d8:ca:e3:90:70:ad:16:49:46:4c:3f:45:
ce:dd:e0:7d:38:13:9d:61:31:a7:ca:0d:6e:4b:2b:
cc:22:78:a2:be:97:a3:39:db:3a:41:e7:b8:97:b6:
93:04:e8:fb:06:7b:0b:47:84:00:53:0e:12:96:2a:
b8:2c:78:84:bb:d1:bc:52:2e:bb:66:d0:b3:46:cb:
c7:ff:d2:61:ea:ee:2c:4b:1d:94:93:df:0e:8d:09:
d1:d9:d7:4d:df:ba:cf:f2:77:ce:16:f9:85:a2:57:
c2:fd:d8:a4:f8:1f:e0:6c:c4:f7:f8:8c:24:69:8e:
35:1f:75:2f:4c:a4:4d:58:66:eb:46:71:56:30:1a:
4d:8c:44:c0:80:27:e1:2d:74:96:c7:6d:31:62:6f:
bc:29:5c:97:f5:69:f0:c2:2e:d4:69:b0:05:7d:d5:
8b:1c:eb:39:fb:23:4a:4b:86:1a:ca:32:4e:dc:11:
80:db:bb:e0:0c:10:5b:0f:e0:8a:bb:4a:ca:a4:c9:
66:50:e8:2c:43:65:b4:86:14:f5:4e:90:69:e2:f5:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6A:C2:E1:55:10:9C:D9:05:04:D4:41:8F:96:AE:F3:DF:E8:54:A4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a7::/48
2a06:a005:85f::/48
2a06:a005:1090::/44
Signature Algorithm: sha256WithRSAEncryption
4b:d7:71:fa:89:43:f3:7d:4d:cd:cb:92:3e:8c:b4:6a:32:ce:
c0:16:4b:07:ca:95:39:76:11:e8:87:d9:2a:1c:69:97:9b:29:
f6:dc:13:49:45:bd:26:f2:67:da:87:83:7f:e4:c1:bc:e9:70:
01:03:d3:26:df:54:b9:75:1d:a6:3d:60:b6:74:9f:e9:6f:1f:
53:2b:97:20:46:5a:61:26:9b:0f:2a:7a:8d:95:d3:6d:22:2f:
f8:3a:98:45:3a:47:90:c9:b8:01:23:66:2f:22:25:cd:1b:90:
ce:ec:ae:47:0f:b6:d4:23:48:b8:c1:58:99:53:4c:2d:56:76:
e8:6f:20:27:86:fe:fd:57:b3:35:09:14:65:55:4c:3e:b6:8c:
b1:bb:f9:55:81:cf:a0:45:c9:05:92:84:b5:a9:cc:f1:5a:ac:
73:fe:37:ac:a6:3e:f7:24:f8:57:ea:b6:71:1a:96:53:9f:35:
00:d0:81:fd:ce:56:67:33:cd:84:e1:c1:71:af:e1:f9:bf:02:
45:0d:91:54:2c:aa:01:d1:3a:69:bc:3d:3c:b1:f7:d9:0e:17:
12:f3:d4:82:3e:a2:8a:d1:28:ca:9e:ff:64:44:ca:73:6b:e6:
b0:7e:b4:95:96:3b:54:47:19:0c:ea:f3:b1:09:81:f5:0b:d1:
83:68:d2:58
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUe8jFm9+qlLuBMv19G1cmk9VXCKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKDUxNkFDMkUxNTUxMDlDRDkwNTA0RDQ0MThGOTZBRUYzREZFODU0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVij2ysiGHT/11Cflg6NzFdBEa
ThdteYKgdogCOoTHzzR8C6xf4kbH/Z+9kkQ2v9jK45BwrRZJRkw/Rc7d4H04E51h
MafKDW5LK8wieKK+l6M52zpB57iXtpME6PsGewtHhABTDhKWKrgseIS70bxSLrtm
0LNGy8f/0mHq7ixLHZST3w6NCdHZ103fus/yd84W+YWiV8L92KT4H+BsxPf4jCRp
jjUfdS9MpE1YZutGcVYwGk2MRMCAJ+EtdJbHbTFib7wpXJf1afDCLtRpsAV91Ysc
6zn7I0pLhhrKMk7cEYDbu+AMEFsP4Iq7SsqkyWZQ6CxDZbSGFPVOkGni9ZpxAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUUWrC4VUQnNkFBNRBj5au89/oVKQwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA0
Mzc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/
BCUwIzAhBAIAAjAbAwcAKgagBQWnAwcAKgagBQhfAwcEKgagBRCQMA0GCSqGSIb3
DQEBCwUAA4IBAQBL13H6iUPzfU3Ny5I+jLRqMs7AFksHypU5dhHoh9kqHGmXmyn2
3BNJRb0m8mfah4N/5MG86XABA9Mm31S5dR2mPWC2dJ/pbx9TK5cgRlphJpsPKnqN
ldNtIi/4OphFOkeQybgBI2YvIiXNG5DO7K5HD7bUI0i4wViZU0wtVnbobyAnhv79
V7M1CRRlVUw+toyxu/lVgc+gRckFkoS1qczxWqxz/jespj73JPhX6rZxGpZTnzUA
0IH9zlZnM82E4cFxr+H5vwJFDZFULKoB0TppvD08sffZDhcS89SCPqKK0SjKnv9k
RMpza+awfrSVljtURxkM6vOxCYH1C9GDaNJY
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:05 2025 by rpki-client