Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204829.roa
File: AS204829.roa (raw, json)
Hash identifier: bnQgeJrPvoh1Zt3k7CqdAE6NCiSxWCNMxey/Lrir8dg=
Subject key identifier: 4D:09:3A:AD:DF:CA:15:63:58:46:82:70:31:9E:13:CE:86:28:4C:07
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 25F91BEF0AE7E221CD4393F80CACA9B8CD97F446
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204829.roa
Signing time: Wed 21 Dec 2022 16:56:39 +0000
ROA not before: Wed 21 Dec 2022 16:51:39 +0000
ROA not after: Wed 20 Dec 2023 16:56:39 +0000
asID: 204829
IP address blocks: 2a06:a005:9e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f9:1b:ef:0a:e7:e2:21:cd:43:93:f8:0c:ac:a9:b8:cd:97:f4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:39 2022 GMT
Not After : Dec 20 16:56:39 2023 GMT
Subject: CN=4D093AADDFCA156358468270319E13CE86284C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:76:bc:82:f8:17:f2:90:3c:ab:b7:58:e8:
7f:0d:3d:77:4f:56:aa:4d:b4:ca:c7:bf:a1:2b:fc:
83:42:47:32:1c:aa:ba:7a:aa:ac:c5:c8:c1:cf:cd:
d7:7a:b3:32:f8:ce:26:5e:0e:77:94:ef:2d:13:5e:
50:c5:78:15:0e:7d:ab:af:1e:5a:47:42:0e:31:af:
99:56:38:3b:22:be:33:d6:60:8e:18:4a:54:4c:59:
a7:79:df:8d:8f:95:04:ad:1e:f0:c1:eb:6a:f0:ea:
8b:b9:c2:6e:24:47:22:d3:73:ca:af:af:7a:d6:77:
41:d0:92:cf:c3:6a:3a:90:4d:f4:0d:b3:94:da:da:
a3:cd:fe:11:9a:6b:d2:ec:7a:ec:0d:3c:9d:9b:51:
e3:e2:66:6f:d6:c7:ca:38:de:9c:3c:50:22:97:4d:
ed:c8:b5:40:38:20:a6:d6:9a:97:a0:e0:f2:15:a0:
d4:61:dd:aa:4b:f0:8b:72:9c:7e:54:f2:46:cf:12:
0f:90:eb:9f:62:60:93:96:41:46:99:59:51:7e:b3:
50:54:b0:d4:66:32:82:d0:bc:08:17:a2:62:08:de:
17:10:2a:5c:e7:d1:f3:81:0d:ef:b1:84:1d:98:99:
0d:99:6c:a8:bd:37:5f:76:32:bb:2c:f2:63:71:b1:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:3A:AD:DF:CA:15:63:58:46:82:70:31:9E:13:CE:86:28:4C:07
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:9e0::/44
Signature Algorithm: sha256WithRSAEncryption
3a:4a:02:64:f7:9b:58:55:26:7b:69:6e:71:ac:c6:b1:d3:aa:
71:a5:a5:38:21:cd:da:a9:87:2b:b3:67:c7:56:5c:f9:a9:b5:
e2:6e:7b:af:70:2f:40:de:97:94:4c:bd:5d:5e:ab:d6:5b:8c:
67:67:fe:8d:d3:a6:cd:7e:49:12:e1:09:26:99:53:a8:7b:76:
b2:50:1e:c7:fb:0b:5b:5d:b7:e7:8c:11:f3:c1:f2:e1:32:14:
47:e5:f4:45:3d:61:e6:91:7b:8f:5a:85:01:29:a6:36:27:21:
29:04:04:19:97:96:29:29:cc:5b:26:2e:65:2a:59:c5:8a:4c:
84:45:b7:6a:7c:4d:3a:77:c6:5f:b5:d5:9d:35:25:2b:33:1b:
0d:7b:2d:ac:5d:fb:99:f0:bd:d7:ee:17:ea:1d:f6:96:f3:b0:
74:08:69:40:a8:1b:2f:2a:a6:47:a6:d5:33:43:ea:5f:e5:ae:
3e:50:d7:99:c2:a3:99:14:a4:a7:d0:ab:8f:a0:bf:e9:79:80:
32:21:60:41:eb:e2:d5:cd:0b:0f:37:95:5f:1d:17:11:f7:6c:
18:3d:54:70:01:1d:54:60:c8:50:19:2c:93:f5:93:e9:62:77:
47:e8:0b:df:66:bf:58:21:a4:eb:af:94:ab:d0:c0:d0:72:ec:
28:be:81:f0
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUJfkb7wrn4iHNQ5P4DKypuM2X9EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxMzlaFw0yMzEyMjAxNjU2MzlaMDMxMTAvBgNV
BAMTKDREMDkzQUFEREZDQTE1NjM1ODQ2ODI3MDMxOUUxM0NFODYyODRDMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpna8gvgX8pA8q7dY6H8NPXdP
VqpNtMrHv6Er/INCRzIcqrp6qqzFyMHPzdd6szL4ziZeDneU7y0TXlDFeBUOfauv
HlpHQg4xr5lWODsivjPWYI4YSlRMWad5342PlQStHvDB62rw6ou5wm4kRyLTc8qv
r3rWd0HQks/DajqQTfQNs5Ta2qPN/hGaa9LseuwNPJ2bUePiZm/Wx8o43pw8UCKX
Te3ItUA4IKbWmpeg4PIVoNRh3apL8ItynH5U8kbPEg+Q659iYJOWQUaZWVF+s1BU
sNRmMoLQvAgXomII3hcQKlzn0fOBDe+xhB2YmQ2ZbKi9N192Mrss8mNxsU0/AgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUTQk6rd/KFWNYRoJwMZ4TzoYoTAcwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA0
ODI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQngMA0GCSqGSIb3DQEBCwUAA4IBAQA6SgJk95tY
VSZ7aW5xrMax06pxpaU4Ic3aqYcrs2fHVlz5qbXibnuvcC9A3peUTL1dXqvWW4xn
Z/6N06bNfkkS4QkmmVOoe3ayUB7H+wtbXbfnjBHzwfLhMhRH5fRFPWHmkXuPWoUB
KaY2JyEpBAQZl5YpKcxbJi5lKlnFikyERbdqfE06d8ZftdWdNSUrMxsNey2sXfuZ
8L3X7hfqHfaW87B0CGlAqBsvKqZHptUzQ+pf5a4+UNeZwqOZFKSn0KuPoL/peYAy
IWBB6+LVzQsPN5VfHRcR92wYPVRwAR1UYMhQGSyT9ZPpYndH6AvfZr9YIaTrr5Sr
0MDQcuwovoHw
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:35 2025 by rpki-client