Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: UPCPW+7lDKvmygwxVrLlTPIJ+e7VGcdpXkFVvrKTIZc=
Subject key identifier: 39:D7:8D:A9:71:B9:D6:63:5D:AB:78:91:14:30:07:03:1F:C0:45:C3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6918DA35FCF94FA7FB2AA1CB83A416A954050CF1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS20473.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 20473
IP address blocks: 2a06:a000:170::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:18:da:35:fc:f9:4f:a7:fb:2a:a1:cb:83:a4:16:a9:54:05:0c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=39D78DA971B9D6635DAB7891143007031FC045C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:b6:e6:60:ce:61:ae:5a:12:4e:bc:e0:c3:
b5:c4:0f:0a:68:89:1b:2d:be:5f:52:45:76:df:a8:
dc:e7:f0:c2:94:8d:71:22:8a:80:89:f5:af:f4:ce:
87:83:d3:71:a2:dd:43:07:45:a9:3f:4e:1e:c2:84:
a8:8a:b1:86:8f:fc:a2:bc:87:1b:bc:43:29:3d:29:
7b:c4:b3:d9:66:a0:fa:ec:b1:04:79:0a:06:97:59:
b9:1b:89:bb:4d:b5:25:48:61:80:05:97:5f:e6:2c:
a7:3e:d6:50:aa:c3:a5:98:7b:9c:d3:6c:70:97:40:
de:b3:f2:25:04:06:69:5f:1a:21:1c:35:f5:58:20:
c7:fe:ed:65:a0:14:e8:72:81:be:b6:ec:2f:09:ca:
31:50:54:d4:d7:a8:a5:82:27:65:85:5a:1c:18:f2:
2c:f6:fc:9c:9e:82:8d:bf:22:13:06:73:17:da:a8:
39:8d:bf:89:eb:ec:35:3c:e7:c2:2e:8c:c3:b6:b6:
7c:d6:d0:77:a6:e1:f9:02:b4:1c:b8:c4:78:bc:a9:
32:ad:85:2a:98:f0:26:77:61:e0:80:37:6b:f2:82:
1d:4e:22:2e:01:8b:21:99:d1:52:cd:be:1e:aa:5c:
36:ca:95:a8:e5:2f:fd:ce:2b:15:33:40:17:71:2d:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:8D:A9:71:B9:D6:63:5D:AB:78:91:14:30:07:03:1F:C0:45:C3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:170::/48
Signature Algorithm: sha256WithRSAEncryption
9f:58:ad:6b:eb:5c:e4:15:37:18:af:78:00:90:38:ff:e5:85:
8a:6c:21:9d:ec:ea:0c:ad:da:eb:b1:8c:6e:6f:fc:34:9b:7c:
b3:51:61:49:9a:c0:1d:bf:53:4f:83:d3:54:0a:5d:a2:c7:ca:
63:28:5a:92:23:94:6b:87:ed:f8:8e:0b:59:15:1e:9d:45:5a:
be:2d:85:d5:49:70:90:8b:43:bc:d3:55:a6:19:5a:d9:23:92:
37:e2:76:34:a2:45:67:90:ce:15:75:12:0a:25:a7:ac:62:70:
14:e0:8a:d2:07:03:36:8e:5d:09:26:c5:b4:34:1e:07:f5:9d:
81:e5:70:79:cc:1c:3b:50:10:9b:b9:00:04:6a:b7:4b:be:96:
be:1a:9a:39:8e:5b:22:04:fb:8b:62:ca:5c:d7:2a:b2:ea:ee:
33:a7:8d:33:f6:6a:cb:03:0e:82:bc:68:38:bd:38:8f:de:42:
e3:f6:45:31:21:2c:a0:e8:72:08:b9:d6:1b:72:5b:a7:70:31:
c4:23:b7:33:77:3a:6f:7e:87:6f:9d:a5:c9:32:cf:43:ed:4a:
76:fa:b1:4d:f5:0f:62:ee:30:2e:bd:0b:6a:90:c9:e1:ce:45:
27:95:fa:9b:b9:08:7d:a7:44:80:27:c7:0d:03:73:97:37:6b:
0c:eb:d7:65
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUaRjaNfz5T6f7KqHLg6QWqVQFDPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTNaFw0yMzEyMjAxNjU2NTNaMDMxMTAvBgNV
BAMTKDM5RDc4REE5NzFCOUQ2NjM1REFCNzg5MTE0MzAwNzAzMUZDMDQ1QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnj7bmYM5hrloSTrzgw7XEDwpo
iRstvl9SRXbfqNzn8MKUjXEiioCJ9a/0zoeD03Gi3UMHRak/Th7ChKiKsYaP/KK8
hxu8Qyk9KXvEs9lmoPrssQR5CgaXWbkbibtNtSVIYYAFl1/mLKc+1lCqw6WYe5zT
bHCXQN6z8iUEBmlfGiEcNfVYIMf+7WWgFOhygb627C8JyjFQVNTXqKWCJ2WFWhwY
8iz2/Jyego2/IhMGcxfaqDmNv4nr7DU858IujMO2tnzW0Hem4fkCtBy4xHi8qTKt
hSqY8CZ3YeCAN2vygh1OIi4BiyGZ0VLNvh6qXDbKlajlL/3OKxUzQBdxLUrbAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQUOdeNqXG51mNdq3iRFDAHAx/ARcMwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA0
NzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAqBqAAAXAwDQYJKoZIhvcNAQELBQADggEBAJ9YrWvrXOQV
NxiveACQOP/lhYpsIZ3s6gyt2uuxjG5v/DSbfLNRYUmawB2/U0+D01QKXaLHymMo
WpIjlGuH7fiOC1kVHp1FWr4thdVJcJCLQ7zTVaYZWtkjkjfidjSiRWeQzhV1Egol
p6xicBTgitIHAzaOXQkmxbQ0Hgf1nYHlcHnMHDtQEJu5AARqt0u+lr4amjmOWyIE
+4tiylzXKrLq7jOnjTP2assDDoK8aDi9OI/eQuP2RTEhLKDocgi51htyW6dwMcQj
tzN3Om9+h2+dpckyz0PtSnb6sU31D2LuMC69C2qQyeHORSeV+pu5CH2nRIAnxw0D
c5c3awzr12U=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:26 2025 by rpki-client