Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204518.roa
File: AS204518.roa (raw, json)
Hash identifier: CSwBV3o3oFUQ7aRIBX8Q8+UCfZlnKLBFhXPnM2O3Wh8=
Subject key identifier: 74:49:3F:4A:C0:A9:FA:73:34:C7:A0:09:13:32:83:A1:A3:B1:65:90
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 191785A56E8C9DF2AAC633829FD13D72F3107CBB
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204518.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 204518
IP address blocks: 2a06:a005:d90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:17:85:a5:6e:8c:9d:f2:aa:c6:33:82:9f:d1:3d:72:f3:10:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=74493F4AC0A9FA7334C7A009133283A1A3B16590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:25:bd:fe:5c:5a:47:ac:51:59:66:01:8d:
8a:b4:45:4c:c5:8c:df:9d:38:2f:09:89:58:43:93:
97:cd:27:95:39:04:41:a4:02:fb:27:9f:ed:7c:50:
e7:2a:5a:d7:e6:ea:dc:82:c4:9f:26:9b:47:03:18:
c6:68:c4:ad:5d:27:b5:c6:27:3b:7f:d4:0b:2d:d5:
e7:f1:bf:57:56:b2:cc:3e:f6:0d:d4:59:62:31:57:
38:29:d8:f9:a0:57:9e:6c:f2:11:b8:40:3e:14:a1:
69:c3:ca:61:4d:56:48:8b:16:3e:52:5f:42:82:8a:
d0:8e:fe:14:f8:d1:cc:4f:b5:59:c3:56:9c:73:6c:
62:33:9f:01:54:a4:c3:ba:2c:31:9e:14:51:b9:ed:
58:42:49:73:06:c5:32:f5:42:f1:3d:61:2b:65:fb:
c2:30:2a:91:bd:8a:86:24:1c:71:f7:75:b5:74:0c:
1b:f4:93:51:4b:77:2b:6b:20:f8:ff:5c:0f:6c:2c:
c3:97:d1:9b:6d:a6:b3:8c:a7:9e:ca:3c:35:4c:1c:
ae:5d:b8:a3:3d:8e:6c:08:8b:83:02:12:81:09:6e:
d1:02:21:83:07:59:e1:11:8b:69:4a:30:2e:68:0c:
a9:10:d8:d3:a1:c9:42:26:46:84:13:d4:76:e6:b7:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:3F:4A:C0:A9:FA:73:34:C7:A0:09:13:32:83:A1:A3:B1:65:90
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204518.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d90::/44
Signature Algorithm: sha256WithRSAEncryption
3c:58:bf:4d:03:48:db:6b:81:b9:23:b1:88:15:23:be:d0:c8:
e5:72:90:ab:56:bf:95:99:39:de:90:09:90:22:22:e6:7c:47:
d5:cf:da:f9:e2:f8:bc:4f:53:d3:15:79:83:c6:0d:3b:af:e0:
ab:b2:2f:c1:b6:f7:59:37:82:3b:c3:a8:d8:b4:c5:da:05:37:
f6:a6:cc:ee:1e:cc:74:e1:9b:95:6e:45:10:79:4c:e0:66:71:
a8:be:df:b1:c5:fb:81:61:f0:0b:9d:81:51:c8:bd:6b:ce:34:
41:ef:13:55:8d:5b:ac:c4:af:ce:9f:cc:21:60:c7:26:5c:2c:
98:98:4a:b4:ba:1b:29:44:39:f7:a0:35:1f:38:07:43:06:d3:
d8:ac:9e:8c:95:6f:6b:39:ea:82:f3:cd:b2:93:7f:ba:f3:cc:
ee:9d:ee:09:29:b5:ca:bd:44:de:e8:18:b6:84:ce:6a:14:ef:
9c:25:cf:a9:08:e0:30:1e:33:88:de:67:92:d4:2a:c3:60:24:
d0:b3:1b:0d:eb:2d:74:13:24:6d:30:54:6c:a0:75:9d:33:92:
88:87:ab:49:d7:1a:d9:d4:3e:de:d9:5b:cb:4a:4a:cf:27:61:
b5:51:6e:b4:bf:6c:66:32:a0:cc:b9:16:fc:e1:ae:e2:02:47:
c5:7b:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:43 2025 by rpki-client