Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204375.roa
File: AS204375.roa (raw, json)
Hash identifier: DPCxK9F2Fum/Qw7wHmSLyZsRRmr7Npp/tLaJvQ9wpHE=
Subject key identifier: 70:90:7B:A1:DD:47:48:42:AA:90:C9:8E:03:E6:29:FD:39:B3:AF:40
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0F44707DDA56CB3B0AF1B8CAD7B58C755C5B687D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204375.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 204375
IP address blocks: 2a06:a005:2d3::/48 maxlen: 48
2a06:a005:5a0::/48 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a06:a005:2270::/44 maxlen: 48
2a06:a005:2590::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:44:70:7d:da:56:cb:3b:0a:f1:b8:ca:d7:b5:8c:75:5c:5b:68:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=70907BA1DD474842AA90C98E03E629FD39B3AF40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:3b:a9:21:05:8a:fb:3b:04:e6:20:ce:0c:
05:2a:79:34:82:32:1c:a6:ed:a9:59:d7:9b:f5:5d:
6b:30:d0:27:54:f8:49:ff:05:ba:76:74:dd:30:36:
f9:76:6a:c1:5f:57:68:41:9f:d5:cb:58:fa:3c:78:
93:16:27:41:11:44:17:e0:2b:7c:e0:d7:ef:72:07:
84:fd:1c:73:9a:fd:e6:d8:e0:3a:5f:42:d1:f8:63:
9f:26:4a:3c:51:38:46:19:5b:55:a4:9f:d7:8b:5e:
cd:3f:d1:4b:71:5f:9d:75:a2:95:2b:74:ae:ca:4a:
ae:39:2a:a1:6e:bc:5f:0e:af:a2:e7:d7:83:d8:aa:
0a:2e:4b:d0:3c:be:0c:c6:e7:af:a0:0f:49:6e:22:
9f:9b:97:37:43:3f:5b:a1:9a:2d:b5:10:53:4d:5a:
72:2b:6c:e0:57:92:69:87:7c:dc:12:76:dc:4c:fc:
2f:dc:c4:29:9c:d0:92:01:e2:cc:9a:84:ef:df:fb:
b5:01:7a:cc:10:0d:a0:64:04:74:7e:4c:ef:4b:ef:
6b:b3:c0:73:93:e3:46:ce:c3:4c:20:02:5d:0a:3e:
d6:df:3f:df:57:fe:c6:6c:a1:74:46:27:a5:de:09:
8a:c3:05:cf:a4:b1:d6:a8:77:93:de:83:cd:fb:ff:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:7B:A1:DD:47:48:42:AA:90:C9:8E:03:E6:29:FD:39:B3:AF:40
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204375.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:5a0::/48
2a06:a005:ad0::/44
2a06:a005:2270::/44
2a06:a005:2590::/44
Signature Algorithm: sha256WithRSAEncryption
4d:0c:b8:52:07:0c:85:f6:b2:f9:f3:78:ec:bb:3b:c5:57:20:
c3:e3:07:8a:5c:44:6a:21:e3:64:75:d2:e1:d3:17:4e:56:b2:
5f:36:fc:63:92:ed:d2:dd:e4:f9:04:81:c1:ca:21:36:7f:9e:
84:03:f8:c5:a6:9a:ea:4a:68:98:14:8b:19:d0:66:da:30:37:
82:1f:d6:c7:15:53:ee:57:88:cf:68:dd:16:86:ef:96:8f:ca:
d6:c9:3b:e0:3c:70:b8:d5:4b:fd:5a:1d:65:e1:6c:58:63:60:
93:41:72:ca:17:38:8e:8b:20:f4:0d:75:33:1b:3b:c5:38:f6:
a7:58:bf:29:4e:fb:4d:af:6d:50:87:6e:32:5b:47:7c:93:22:
04:d3:8e:50:25:60:42:4b:33:42:aa:de:87:95:62:f7:bd:d1:
b2:d5:dd:94:64:5a:0b:f7:12:56:e4:f8:43:f4:01:d2:5e:d3:
9e:d6:03:ce:3b:d3:10:75:03:d1:7e:5b:a1:2b:3e:3c:d0:d6:
d4:b4:0c:3e:1f:c3:41:27:df:89:31:64:e5:8c:2a:e1:50:54:
b4:e7:ba:c6:fb:4a:92:e6:d2:2a:82:bc:c6:bf:65:bf:17:9a:
43:33:be:44:2b:77:52:78:50:d1:eb:7b:a4:d5:b2:1a:2e:d1:
02:70:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:11:25 2025 by rpki-client