Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204508.roa
File: AS204508.roa (raw, json)
Hash identifier: tHyYyFgA4En6I98d+7m5IYA+RPWfIxWqn6lgm67VXEw=
Subject key identifier: 68:43:52:C7:10:14:54:91:4D:A4:A6:39:C3:BA:00:2C:76:21:2F:63
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6E4EFC03F009B524E554610409E89C9931F6B0CD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204508.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 204508
IP address blocks: 2a06:a005:5f2::/48 maxlen: 48
2a06:a005:5fa::/47 maxlen: 48
2a06:a005:d29::/48 maxlen: 48
2a06:a005:f50::/44 maxlen: 48
2a06:a005:1930::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4e:fc:03:f0:09:b5:24:e5:54:61:04:09:e8:9c:99:31:f6:b0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=684352C7101454914DA4A639C3BA002C76212F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:97:d3:d1:9f:e7:0e:b1:2b:1d:39:99:c4:
61:9b:2f:99:1a:2f:76:54:74:ea:1e:88:ce:6f:d6:
28:10:8f:60:dc:d4:30:63:22:d3:06:50:26:f1:62:
1b:c2:53:82:75:0e:f1:51:08:f5:e6:c1:91:c4:fd:
28:90:db:74:df:12:a0:d8:72:cd:14:a9:1f:79:79:
38:0b:8c:f2:08:f7:fa:d2:27:e9:a9:91:f0:1d:ca:
6c:95:65:01:a1:c9:b4:41:f1:43:f2:17:05:43:da:
cc:2c:5b:33:97:9e:19:db:f9:41:4e:1c:51:96:4c:
4e:34:06:91:3f:1e:47:5d:d2:1f:ec:92:4b:d4:e5:
17:73:5a:97:ee:1c:e8:89:88:40:72:c2:ce:ca:15:
fe:41:cb:dc:1a:e9:6b:22:8d:02:5d:31:c9:da:54:
b7:23:06:7e:c6:ad:f7:40:ec:aa:38:93:9c:a9:c0:
b0:aa:cb:8a:21:ea:ba:d0:67:dd:75:e3:4d:74:1c:
f2:17:7a:16:0d:79:b0:f3:22:32:44:4c:f1:8d:7a:
1b:85:ea:cf:f3:0a:a3:25:d2:82:fc:fb:b5:6c:95:
20:69:fc:d8:c1:44:89:75:60:1d:90:27:86:7b:af:
f8:0d:ba:d3:eb:16:21:8c:22:d7:e3:3b:7c:c5:52:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:52:C7:10:14:54:91:4D:A4:A6:39:C3:BA:00:2C:76:21:2F:63
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204508.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f2::/48
2a06:a005:5fa::/47
2a06:a005:d29::/48
2a06:a005:f50::/44
2a06:a005:1930::/44
Signature Algorithm: sha256WithRSAEncryption
89:64:95:43:49:aa:fa:68:1e:d4:d9:8d:b1:84:f9:84:2d:4b:
9e:07:85:78:08:b4:5a:ac:f6:0b:1d:a5:90:47:e1:9c:9c:d4:
40:64:4a:e6:c1:21:ef:25:51:c4:93:ca:27:4f:fa:7b:33:dc:
13:1f:d5:23:9c:d9:c5:10:19:dc:15:14:dc:aa:96:b3:88:90:
da:2d:a2:bb:67:23:fa:13:3c:c0:21:98:c8:76:ac:97:ba:ba:
05:4d:34:85:31:b8:e2:3f:c3:27:0d:b3:26:e6:90:9f:91:fe:
66:f4:d3:ff:76:82:3a:f6:51:aa:d8:2a:07:fe:55:75:95:f2:
ea:26:6d:b0:95:3b:8a:82:d8:b5:30:79:21:8f:a4:e4:e5:d7:
27:9b:a0:5e:1b:f4:fa:81:2a:59:b9:81:e5:ea:53:d2:08:c4:
f9:6f:2f:04:0c:83:09:20:3f:ff:d4:92:e3:e2:47:96:1a:24:
b6:bf:c3:cd:0f:e9:39:9e:23:05:e0:38:ed:da:55:7c:d7:6e:
8a:13:09:64:d1:d8:9e:fc:a2:03:c8:c0:a8:71:ca:6a:0d:bc:
0d:cd:bb:85:7e:85:7b:5e:90:59:19:34:82:a8:aa:49:fd:18:
6b:04:4c:0b:58:9a:56:52:6d:57:75:27:3e:30:8f:d9:60:fa:
57:65:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:06 2025 by rpki-client