Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204710.roa
File: AS204710.roa (raw, json)
Hash identifier: Px29+Zwf8zYU4szOjopncbot+eV0tmh5uhIaSmxwAj4=
Subject key identifier: 01:48:76:63:75:B9:53:52:5F:CC:14:C0:CD:4C:6E:11:E5:70:25:0B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 47CCAC491003E6FD0C255DBD46B4050F1AF383F8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204710.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 204710
IP address blocks: 2a06:a005:a0a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cc:ac:49:10:03:e6:fd:0c:25:5d:bd:46:b4:05:0f:1a:f3:83:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=0148766375B953525FCC14C0CD4C6E11E570250B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:a2:d9:97:06:14:50:9c:b1:0d:aa:ab:18:
ed:98:89:62:14:87:08:38:85:05:f5:54:ec:eb:6c:
31:e4:3a:6c:80:da:83:16:f7:a4:a0:35:80:a4:b8:
92:6a:25:f4:fb:91:1a:72:3c:1d:8f:ee:12:67:25:
f4:d4:4d:4e:cc:39:cd:b4:93:a3:2d:cf:f6:01:e9:
e4:15:16:c4:dd:11:cd:11:4a:2e:15:44:7a:5a:49:
11:71:2c:ce:e8:35:96:55:b2:86:da:a3:21:27:79:
89:f2:b8:78:a9:f7:e0:36:40:e0:48:02:03:98:b6:
5f:5c:25:d4:6a:48:d6:26:68:83:e2:ff:e1:3e:1c:
eb:e7:36:46:11:0d:f8:04:ea:c4:98:06:c6:b8:cc:
c6:84:58:fc:cc:3c:4e:54:da:3c:cd:0c:7d:97:ea:
60:dc:cc:5d:9c:2f:dc:5f:fa:f5:e1:c3:b4:c8:33:
b1:74:34:4c:ed:ba:98:e2:5f:8c:2d:eb:be:99:cc:
41:66:47:7c:a0:5e:ae:6f:3e:a8:84:b7:00:2f:b9:
cb:3f:0e:64:d0:6a:73:a3:6b:93:ac:61:1e:a3:ed:
ec:b4:31:b6:3d:af:70:d6:98:41:41:79:01:d2:40:
81:c2:93:a5:98:69:df:ed:51:d8:61:e2:68:58:ca:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:76:63:75:B9:53:52:5F:CC:14:C0:CD:4C:6E:11:E5:70:25:0B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0a::/48
Signature Algorithm: sha256WithRSAEncryption
71:b3:12:1c:04:1e:71:41:a9:aa:4d:78:7b:44:f7:b4:a1:04:
03:4f:85:41:9b:b4:51:c4:d7:77:b0:08:df:8b:67:2d:f6:9a:
b9:81:0c:f7:da:9c:ed:44:ef:bd:e4:f8:b3:a0:a0:db:a6:12:
df:74:a0:73:19:28:be:e9:e2:e1:79:7f:32:71:a6:93:76:22:
fa:86:d1:33:6d:c2:eb:36:77:56:7c:73:c3:f5:2d:5b:a9:c2:
f5:2b:a9:cc:ca:05:d7:ca:28:14:ba:a3:e3:20:2f:af:21:f4:
2d:9a:a3:7f:06:1d:c4:f3:9d:17:55:be:e4:42:75:83:a2:ce:
44:11:14:ee:13:8e:e7:6c:0e:8c:14:24:38:e4:b6:b3:cb:0a:
45:da:7a:47:66:93:b1:b0:25:66:09:9c:5d:2d:0b:74:ac:9b:
23:49:d6:3e:9e:e9:5e:ce:1f:d3:56:6f:72:dd:68:fc:44:16:
02:b6:b0:38:9f:d8:f0:92:e0:e5:63:13:53:6d:53:67:e8:4d:
7b:07:9c:91:cd:1b:03:1f:3a:93:06:7d:ce:62:f7:73:1c:31:
10:2b:19:b1:80:ba:38:df:98:48:c5:1b:7a:f5:30:80:ac:51:
1e:50:d7:87:24:f7:b4:7a:52:e9:62:98:88:b1:f8:96:94:ac:
c4:44:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:07 2025 by rpki-client