Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204740.roa
File: AS204740.roa (raw, json)
Hash identifier: 86498Q8i7khHkvwHPiQ4XZamC93BrEavUMjfHULvfUE=
Subject key identifier: BD:58:96:40:87:FF:C9:18:C1:02:20:AA:9A:FC:FA:1F:4A:76:BD:08
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2F04660987C44B9D7D23F71EBCA2079F514CA7A4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204740.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 204740
IP address blocks: 2a06:a005:a0d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:04:66:09:87:c4:4b:9d:7d:23:f7:1e:bc:a2:07:9f:51:4c:a7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=BD58964087FFC918C10220AA9AFCFA1F4A76BD08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:0c:5c:4d:2a:ee:f0:cc:b1:6d:1a:e8:85:
c0:c1:a7:21:97:93:ab:e4:95:a2:33:19:db:3f:09:
c1:e1:9f:2c:59:c4:f0:98:ce:c7:54:02:b4:88:3c:
67:38:58:0c:8c:ae:cf:16:36:89:c4:78:c1:cb:fe:
79:d1:17:b7:81:da:ff:2a:bc:ee:d7:3e:11:60:e8:
0b:73:c7:7a:32:4f:cc:6a:07:7e:87:28:00:03:af:
45:6f:8b:f0:9a:af:23:5f:3e:6a:38:6f:37:49:de:
30:58:3e:e3:2a:05:05:e0:66:74:d4:e0:b7:42:5c:
d3:24:ce:bb:ad:66:74:19:0d:17:b0:07:0f:58:d2:
18:7d:46:76:87:1f:e6:d9:13:d4:e5:de:df:be:7c:
cc:a9:63:ef:64:06:6b:52:f6:f8:67:ca:61:e0:b0:
81:07:09:62:55:01:6f:8b:56:f0:81:2e:54:5c:14:
d6:01:be:80:ab:83:fc:d1:b9:1a:70:3f:e7:60:44:
4a:1e:77:02:b4:8e:82:ed:31:97:8d:81:56:10:bd:
1f:5b:74:29:3e:d7:dc:d4:12:81:ff:83:23:f0:ba:
39:ba:63:a4:b0:f3:f0:f0:f8:05:02:6e:b6:da:57:
2d:4c:bc:c2:ac:61:be:67:96:78:1c:55:4d:20:53:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:96:40:87:FF:C9:18:C1:02:20:AA:9A:FC:FA:1F:4A:76:BD:08
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204740.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0d::/48
Signature Algorithm: sha256WithRSAEncryption
74:f6:b2:98:97:81:11:ab:d7:6b:fd:4a:61:b3:7b:a6:2a:3b:
f4:d0:85:a0:f1:fd:7e:2c:71:3a:3c:36:f6:9c:6c:4a:4c:d2:
4f:3c:50:8c:a2:9e:09:f5:f2:42:96:71:75:35:08:3a:8e:6e:
f9:b4:17:df:40:5d:9d:9b:c0:d9:51:2c:2f:32:c8:5e:28:33:
80:82:80:a8:f9:26:8d:64:38:ca:fc:29:08:4f:54:77:f5:b7:
14:dc:62:87:98:d9:1d:69:d2:d0:15:ad:18:27:83:57:db:7a:
13:31:d2:bf:a3:a8:a9:9e:a6:af:64:b5:40:b4:98:f5:b0:24:
79:cc:53:d4:6b:6c:46:68:1c:48:5f:a1:99:64:b7:71:a8:c5:
05:ac:09:2b:c7:1e:a6:e9:aa:55:fa:96:12:0c:7a:de:d5:7e:
6f:78:d0:1d:6b:f8:78:54:e9:7c:dd:cc:a7:fe:47:a0:d4:dd:
28:d7:e5:9e:51:3c:67:5d:b2:9d:5e:4b:67:eb:d6:5a:f1:8b:
96:42:ec:5c:1b:e8:12:04:4e:08:b5:8c:9b:35:7b:c7:74:46:
fd:56:8b:e1:19:d7:b1:bb:46:d7:7a:2e:ab:62:c7:ca:d1:d5:
54:c2:27:eb:8d:f2:78:23:cd:4a:25:7a:5d:fb:fb:b8:eb:65:
c4:cb:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:12 2025 by rpki-client