Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204841.roa
File: AS204841.roa (raw, json)
Hash identifier: KGHXhZc+9FK9ix4rqjo/MS7qpGFE3jz75jnwWuM+KSk=
Subject key identifier: 83:87:46:19:CF:70:26:4C:10:2A:6F:1E:12:43:FF:F7:EB:58:41:66
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 788E763BB4FD8D7D161F07C68882D4FF0E77D8FA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204841.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 204841
IP address blocks: 2a06:a005:434::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8e:76:3b:b4:fd:8d:7d:16:1f:07:c6:88:82:d4:ff:0e:77:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=83874619CF70264C102A6F1E1243FFF7EB584166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:e4:3d:a8:e5:fa:a8:1a:c5:8e:4f:5a:b2:
78:f3:e8:8b:e7:80:e1:51:b7:92:ee:7d:6b:fb:64:
28:44:c6:bf:91:f3:78:89:1a:40:37:57:cb:7f:dc:
08:c3:86:1e:89:d2:e3:6d:5f:04:03:1d:ad:24:c7:
05:33:37:14:1c:d5:d0:d7:75:df:70:9c:da:1b:9c:
b0:a4:67:98:b5:a7:cd:95:33:83:63:12:a4:f9:37:
f0:10:40:98:5b:44:10:54:1d:66:6f:c6:88:4f:98:
cd:8a:22:06:90:6f:6d:ce:9b:66:d1:b3:6a:12:98:
fc:8c:e5:9d:65:86:cc:5d:75:b0:85:0a:0c:2c:58:
6a:fa:65:0d:a7:69:8b:f4:6d:9f:e2:c8:4b:9f:22:
24:77:d0:7f:8a:ba:8f:d7:64:4e:39:c9:66:fe:c1:
8c:25:d7:5f:cd:70:4f:7c:20:ae:de:43:06:21:de:
74:11:ec:31:ea:af:19:cf:d9:9c:0d:3e:de:04:6a:
72:21:2b:ed:cc:54:de:26:0a:5f:74:5e:e7:07:65:
3a:ad:3e:71:74:27:bb:73:64:60:b1:d4:e8:99:35:
b0:fa:53:01:01:12:e7:ab:9c:61:85:8a:e2:b2:e1:
e3:b9:c3:52:65:d9:5b:fd:52:b8:09:20:8b:ab:8d:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:87:46:19:CF:70:26:4C:10:2A:6F:1E:12:43:FF:F7:EB:58:41:66
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
Signature Algorithm: sha256WithRSAEncryption
60:bf:e3:d2:42:c5:b7:4e:81:45:98:ed:37:ab:86:48:d6:a7:
38:32:60:78:72:28:af:8e:b1:e9:7e:ac:9a:1d:13:df:2a:a2:
c1:39:a9:ae:50:b5:e3:ce:eb:27:4f:f9:73:02:d0:1b:d5:36:
57:b0:a0:21:b6:fc:4c:2f:ad:9b:62:1e:74:ac:d4:4b:d6:67:
34:0f:fd:67:08:e4:82:c1:34:2e:a1:5e:ac:39:53:37:97:ec:
72:2a:1a:46:b6:48:d0:44:b6:ec:cf:6d:a1:f9:6e:c8:42:a9:
c9:17:48:42:37:a9:1d:06:88:72:2d:98:ce:50:ba:97:9f:c2:
3a:3c:76:25:a0:f3:51:79:98:a9:6d:db:2a:ae:6a:97:77:0b:
b1:a6:21:2c:44:53:11:52:15:d6:17:b1:54:3c:36:c1:a3:54:
bb:fe:0c:44:90:cc:e0:6e:80:de:77:89:93:b0:a0:e2:ff:f1:
ac:4f:8e:e8:31:0c:43:77:c4:8c:6f:31:f9:4a:b4:6e:d0:47:
ff:f1:7f:b7:34:82:fa:cf:61:7d:42:31:dc:0c:55:5a:14:6d:
10:99:51:6a:8d:ac:74:d4:20:f4:32:11:24:f9:c8:c0:87:31:
15:a5:9e:db:86:f3:75:2e:1a:82:41:c8:86:c4:af:f8:88:60:
c6:ec:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:43 2025 by rpki-client