Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204406.roa
File: AS204406.roa (raw, json)
Hash identifier: Z/BMInvhgkRkZ1rnQdtSC6b/m8v7pqxw9i5mjspnfgo=
Subject key identifier: 8C:E1:36:6B:CB:EF:AC:DB:0B:A2:3D:1D:6A:69:22:A8:53:10:21:ED
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7DCAB15E1CF754F778BA361B7D34658FFCCB52E3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204406.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 204406
IP address blocks: 2a06:a005:1660::/44 maxlen: 48
2a06:a005:1c90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ca:b1:5e:1c:f7:54:f7:78:ba:36:1b:7d:34:65:8f:fc:cb:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=8CE1366BCBEFACDB0BA23D1D6A6922A8531021ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:0a:da:fd:9a:bf:5c:59:fd:c8:bb:a5:df:
34:e9:24:85:89:37:58:e8:ec:61:dc:fb:11:e6:c7:
26:6b:fb:05:f6:b2:24:01:0e:02:a8:a9:ac:c3:05:
62:9c:38:c3:49:96:89:d2:c3:b3:85:3a:f5:58:39:
f7:15:5c:61:2b:17:93:35:69:9f:7c:aa:b1:3c:95:
9b:6f:80:b2:2e:f3:47:87:1a:fb:a4:c2:d1:03:b2:
c1:d7:77:77:fa:7d:ee:d0:9b:d2:75:41:65:3b:97:
eb:5f:bf:0e:f3:9f:19:13:e0:58:11:12:9d:58:78:
71:9b:6e:7a:6c:14:c6:e0:30:80:ff:0e:c1:49:07:
70:f4:a0:18:1c:5f:18:01:5c:12:d2:e4:98:6f:bf:
86:e7:46:f2:66:40:d7:ca:92:45:73:d5:3e:0c:2b:
b4:bb:ec:3b:b6:90:5c:fb:ed:e4:28:cf:1f:9f:d5:
73:26:5d:26:fb:6b:a7:7c:0c:50:86:61:4a:15:a7:
e5:2b:e9:1e:6a:b5:c1:34:d6:fc:76:67:76:6d:fd:
31:03:7f:84:c6:7f:1d:24:b9:7e:da:6d:a1:98:dd:
84:e9:91:a1:09:65:31:09:a3:7e:39:10:c5:75:6d:
e0:5e:75:3d:07:8f:1d:85:d4:a6:1c:22:83:07:81:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E1:36:6B:CB:EF:AC:DB:0B:A2:3D:1D:6A:69:22:A8:53:10:21:ED
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1660::/44
2a06:a005:1c90::/44
Signature Algorithm: sha256WithRSAEncryption
3a:52:c5:e9:15:7f:40:bf:5d:31:19:4b:37:90:37:08:39:e1:
19:78:c1:84:c8:d1:a1:58:0f:7d:6c:57:cd:bb:a2:3e:b3:54:
4f:df:d0:f8:f6:2c:ff:14:56:84:9c:07:81:c6:6c:7a:6d:72:
77:64:8c:87:10:31:4d:52:b5:0a:b2:f6:4f:7f:a3:97:a0:7a:
5d:f8:f0:fb:5c:9d:3b:14:67:9c:80:cd:0b:24:b8:b6:4a:34:
81:ef:7b:b1:3d:c5:91:fd:0b:67:14:ab:16:f9:a8:cb:dd:95:
cf:b7:91:4e:fd:3a:55:82:11:fa:30:01:6f:02:5c:70:fe:4e:
53:2f:19:85:3a:58:c7:1b:23:8b:ef:87:a0:d3:7c:80:ea:d7:
af:18:f5:64:08:1a:95:46:a1:76:6b:fe:5f:d8:78:ca:20:eb:
a9:16:06:cf:48:29:b9:d9:7e:10:6f:e5:46:46:19:cd:65:7d:
1a:9a:1e:e2:d9:07:ed:09:44:f3:30:6b:e4:20:13:0a:b0:6a:
27:8c:66:34:61:88:1f:81:61:0f:4b:b4:fd:7c:f6:27:83:96:
cb:bd:0f:aa:fb:dd:28:fd:aa:f9:80:d7:cd:a8:95:f0:ef:85:
cd:62:c1:3a:6b:39:b5:67:41:50:3c:91:ae:6c:e8:0f:b4:bc:
8a:61:d5:f9
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUfcqxXhz3VPd4ujYbfTRlj/zLUuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDlaFw0yMzEyMjAxNjU2NDlaMDMxMTAvBgNV
BAMTKDhDRTEzNjZCQ0JFRkFDREIwQkEyM0QxRDZBNjkyMkE4NTMxMDIxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbQra/Zq/XFn9yLul3zTpJIWJ
N1jo7GHc+xHmxyZr+wX2siQBDgKoqazDBWKcOMNJlonSw7OFOvVYOfcVXGErF5M1
aZ98qrE8lZtvgLIu80eHGvukwtEDssHXd3f6fe7Qm9J1QWU7l+tfvw7znxkT4FgR
Ep1YeHGbbnpsFMbgMID/DsFJB3D0oBgcXxgBXBLS5Jhvv4bnRvJmQNfKkkVz1T4M
K7S77Du2kFz77eQozx+f1XMmXSb7a6d8DFCGYUoVp+Ur6R5qtcE01vx2Z3Zt/TED
f4TGfx0kuX7abaGY3YTpkaEJZTEJo345EMV1beBedT0Hjx2F1KYcIoMHgVg7AgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUjOE2a8vvrNsLoj0damkiqFMQIe0wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA0
NDA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcEKgagBRZgAwcEKgagBRyQMA0GCSqGSIb3DQEBCwUAA4IB
AQA6UsXpFX9Av10xGUs3kDcIOeEZeMGEyNGhWA99bFfNu6I+s1RP39D49iz/FFaE
nAeBxmx6bXJ3ZIyHEDFNUrUKsvZPf6OXoHpd+PD7XJ07FGecgM0LJLi2SjSB73ux
PcWR/QtnFKsW+ajL3ZXPt5FO/TpVghH6MAFvAlxw/k5TLxmFOljHGyOL74eg03yA
6tevGPVkCBqVRqF2a/5f2HjKIOupFgbPSCm52X4Qb+VGRhnNZX0amh7i2QftCUTz
MGvkIBMKsGonjGY0YYgfgWEPS7T9fPYng5bLvQ+q+90o/ar5gNfNqJXw74XNYsE6
azm1Z0FQPJGubOgPtLyKYdX5
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:32 2025 by rpki-client