Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204842.roa
File: AS204842.roa (raw, json)
Hash identifier: Jkq6KWaRVCqYLVz5qbdjr1a8YZDO5Lxs+74ev09rSaU=
Subject key identifier: D4:E9:B7:A4:F9:3F:1C:0D:22:36:2F:4D:9B:6A:40:92:89:4C:42:32
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 10A736A1B49A5AC31E120198BBCFD49DC5E36AB8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204842.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 204842
IP address blocks: 2a06:a005:4d9::/48 maxlen: 48
2a06:a005:cc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a7:36:a1:b4:9a:5a:c3:1e:12:01:98:bb:cf:d4:9d:c5:e3:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=D4E9B7A4F93F1C0D22362F4D9B6A4092894C4232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:74:86:06:d1:2d:c3:c2:93:64:f6:d3:7f:
2d:ea:cb:22:87:16:ae:d6:21:d3:43:17:70:ed:3d:
98:84:0c:82:85:24:b5:d9:e9:45:05:5f:9b:a5:9d:
4c:80:de:c8:6e:59:8f:72:85:33:df:c7:d7:af:3b:
32:f8:b9:d0:0b:0b:20:f4:38:d8:54:00:9f:b4:55:
e4:be:c4:b8:d6:98:4b:6b:9f:48:55:f3:03:8c:d4:
f6:c3:55:97:2e:69:e9:1b:01:4e:28:7a:fb:8e:f3:
e5:4c:9f:a9:b5:46:ff:6e:3a:cd:70:01:e6:4f:04:
cf:2c:2b:69:b2:4e:94:3f:0d:15:a9:51:cb:d7:9c:
9a:f1:88:42:8c:b8:2c:00:00:53:67:6c:d3:4f:da:
f0:de:e4:27:5a:80:d4:09:1e:69:4b:cc:7e:51:38:
be:03:61:40:f1:fc:f2:b8:1b:62:81:30:93:b7:e2:
3d:27:cc:e2:90:a6:ab:dd:c6:49:e8:d9:de:06:25:
f7:c5:bf:22:92:ae:6f:53:22:59:0f:39:4e:60:e2:
ff:9f:25:24:52:08:0b:ad:49:dd:bd:bd:07:f5:d9:
64:d1:34:7d:db:92:ce:31:fd:10:7f:61:69:f2:58:
4d:e3:16:d7:01:b1:bd:a3:73:a5:b7:50:41:ab:31:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:B7:A4:F9:3F:1C:0D:22:36:2F:4D:9B:6A:40:92:89:4C:42:32
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d9::/48
2a06:a005:cc0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:74:6a:f2:5d:ea:31:6d:dd:32:16:37:7c:c0:92:c0:fd:99:
f9:84:22:ca:0d:6e:29:19:90:bb:e4:a9:a3:0b:70:be:32:86:
f4:6b:e3:04:87:69:9e:26:a2:bc:6b:b3:d0:92:0e:03:83:fb:
db:c2:a4:b1:bb:fe:aa:a9:2f:66:35:ba:0b:57:49:af:bb:15:
53:16:fd:9b:06:09:38:60:c8:b9:b0:bf:d8:5c:3e:9f:be:f1:
f5:6f:ad:af:2c:0d:5a:f4:0b:09:76:25:83:b7:be:55:94:fd:
d8:ed:b4:28:60:a5:2a:cc:ce:82:1e:f0:64:01:26:37:d5:ee:
9a:44:80:f1:71:a5:48:97:a4:8d:7a:a0:b4:41:f8:2a:5e:1d:
ac:fb:58:fc:85:77:6e:ba:81:e2:8b:32:4a:e2:83:7d:e4:52:
8a:5c:07:36:ed:95:05:7a:09:1f:0f:d8:21:7b:b1:5e:9c:5c:
93:ad:45:97:6a:a0:11:32:74:01:40:13:0e:ad:31:52:e9:3d:
a7:0b:2d:f1:1d:dd:d1:be:5e:f3:ec:66:02:27:30:0a:5c:0a:
08:18:e4:a0:f0:6e:79:f9:9b:31:c8:f7:2d:91:d5:6d:b3:c3:
eb:2c:bb:2a:55:2d:19:7f:4e:3a:77:50:7c:19:c1:68:6d:35:
e6:5e:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:32 2025 by rpki-client