Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204789.roa
File: AS204789.roa (raw, json)
Hash identifier: TMcIczkEyQUsrPq0THK6VKZo9a3j9U+w4yow6zx8JXE=
Subject key identifier: 71:CD:63:A6:13:FF:78:93:23:23:44:E9:14:AC:12:38:24:95:74:21
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 52162F3D4A58A096B08C787A52EC2369435ECAF8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204789.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 204789
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a005:1db0::/44 maxlen: 48
2a06:a005:1dd0::/44 maxlen: 48
2a06:a005:1de0::/44 maxlen: 48
2a06:a005:1df0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:16:2f:3d:4a:58:a0:96:b0:8c:78:7a:52:ec:23:69:43:5e:ca:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=71CD63A613FF7893232344E914AC123824957421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:30:d5:8c:a5:bc:02:5b:00:0c:02:01:45:d6:
a9:88:d7:46:6d:74:24:ea:5b:12:5f:6b:c2:59:c8:
3d:6d:6c:b3:0a:0a:54:1e:a9:ea:74:92:20:f7:de:
75:a5:db:d8:fe:8c:1d:39:18:d1:d6:3c:e1:01:7b:
6a:80:69:d9:4e:14:b6:c6:5e:a4:48:c2:fc:46:d0:
e6:b5:7a:7e:33:b5:fa:0a:1c:d4:21:3b:6b:f7:e1:
cc:a5:88:59:0f:1f:34:1b:e0:25:f1:09:61:aa:08:
53:19:82:b2:53:93:9c:b2:a5:35:65:9e:b8:66:5a:
3c:b2:e0:f1:26:63:41:86:b7:00:a7:85:77:70:70:
7b:5d:58:07:ea:0e:1a:0d:ce:66:b2:d0:83:35:7f:
6f:fd:ad:40:0c:85:be:1d:27:9f:bd:ce:49:bc:a3:
1d:6c:77:c0:09:63:8d:5c:34:47:41:d7:ba:ef:fa:
be:97:b5:2c:a9:1a:ad:13:94:2a:7f:58:a0:23:88:
23:29:31:4b:7b:8d:1b:02:73:cd:41:f1:a6:01:06:
ac:e0:ff:9e:18:b3:bf:a2:9c:76:a3:62:43:03:f4:
6f:d5:c5:1d:4c:f6:8f:65:68:8b:5d:77:ce:4e:30:
7d:05:7e:0a:70:b3:2e:14:de:0e:98:de:8a:b4:93:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:63:A6:13:FF:78:93:23:23:44:E9:14:AC:12:38:24:95:74:21
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:a005:1db0::/44
2a06:a005:1dd0::-2a06:a005:1dff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:15:d0:f3:22:e7:41:26:16:b0:90:72:0f:ea:eb:1a:f1:a0:
d7:6a:6c:38:15:39:44:c5:75:a1:a9:b9:92:43:8c:00:35:6a:
46:b5:e0:83:19:0f:ce:4a:d4:7e:ab:ff:5b:4a:91:f3:b4:84:
58:2d:69:f7:5c:eb:e3:f7:e2:c3:69:f9:eb:14:ce:02:3b:7b:
77:c0:97:c3:3c:cc:b5:0e:f5:ff:3b:69:7d:fa:66:b6:44:cd:
f7:08:2d:78:cd:1d:e5:f0:b0:62:76:7f:ca:d6:cf:3c:93:71:
31:0b:9b:5b:c8:1b:25:3a:01:6e:77:db:f2:72:49:f9:86:94:
82:a8:1d:a7:d4:0d:80:52:28:d6:81:cc:c4:0b:14:6e:64:22:
d2:ff:de:a8:54:e2:e0:7c:cc:ba:08:fd:23:43:12:5f:e1:3c:
ae:6d:b2:7a:ad:74:f4:27:f3:94:c1:18:f3:de:dc:86:b6:f0:
8f:fa:d7:4a:00:0f:83:93:3e:22:34:55:d6:8c:3c:f1:de:f2:
d3:eb:c8:9d:81:66:77:2e:2c:fe:02:54:b7:c8:ae:8b:c5:1f:
11:76:87:5a:22:d7:18:ca:59:d4:5e:7e:37:76:e7:e3:d5:4d:
4e:d5:01:fd:fd:c0:c6:86:0e:0f:c9:6f:34:e3:35:ca:d8:83:
ee:2c:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:50 2025 by rpki-client