Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: 5q+pdh/kALTJ/aOTGsgCWko2ULvg9+ddFOJkvR+Pym0=
Subject key identifier: 67:8B:6A:F7:7C:BC:28:BA:27:04:0F:9C:00:88:59:13:B6:FB:28:36
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 62D81A3BF13891E4EBC04FD4836DDA17B24F41AC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204844.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 204844
IP address blocks: 2a06:a005:14f0::/44 maxlen: 48
2a06:a005:1b40::/44 maxlen: 48
2a06:a005:1be0::/44 maxlen: 48
2a06:a005:1d60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d8:1a:3b:f1:38:91:e4:eb:c0:4f:d4:83:6d:da:17:b2:4f:41:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=678B6AF77CBC28BA27040F9C00885913B6FB2836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f0:51:af:72:2d:56:74:7e:24:9b:3e:dc:4f:
80:90:66:d9:1e:2e:5a:4f:9e:89:07:bc:07:b4:cf:
f3:25:e9:b4:a4:68:5c:e0:22:cc:e8:32:4f:bc:1b:
c4:37:00:de:53:52:4f:07:32:ec:5b:05:63:d4:41:
70:79:ab:a9:90:0e:c1:59:bf:2c:6b:f4:6a:6f:32:
44:33:c7:44:87:4f:bb:a8:e7:a0:37:7b:c7:43:47:
eb:b6:85:27:57:a5:65:87:4c:0a:88:f1:f3:f6:32:
5e:c0:f0:51:15:9e:e8:ed:84:99:cb:ee:8f:15:59:
8f:96:79:8d:ff:46:76:2e:17:db:e1:b5:9d:32:65:
76:df:35:04:7b:f7:54:fe:46:6f:11:62:7d:08:58:
a5:a2:46:7f:54:16:da:60:f2:60:a3:41:05:c4:ec:
08:65:2b:0f:62:8e:62:4c:25:b5:a6:e2:02:21:6a:
78:48:bc:4e:c3:6e:9c:08:eb:ea:ed:05:d3:f6:5d:
50:90:d7:ef:be:7d:77:3c:ac:6b:d5:b3:2d:72:c1:
01:b4:eb:e9:f0:5f:64:25:d8:21:eb:6a:3b:70:a1:
ff:ea:48:a9:2a:ff:d2:90:73:9a:c1:b8:07:7c:d4:
45:02:47:87:f0:f5:8e:ca:13:a6:0e:de:d1:7d:4e:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8B:6A:F7:7C:BC:28:BA:27:04:0F:9C:00:88:59:13:B6:FB:28:36
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14f0::/44
2a06:a005:1b40::/44
2a06:a005:1be0::/44
2a06:a005:1d60::/44
Signature Algorithm: sha256WithRSAEncryption
a3:ac:3d:fa:9e:53:3c:df:17:82:23:05:1f:56:eb:e7:e2:98:
9b:c3:99:c2:1e:78:98:8a:05:5b:a9:0e:bb:bf:42:c9:dd:d1:
14:3e:54:8c:a4:98:94:8c:d9:ab:38:df:57:49:8b:04:9d:69:
8f:9f:b2:7a:19:c1:cb:7b:09:d0:db:50:c4:d3:13:39:3e:e6:
02:eb:fa:36:92:8f:f4:86:81:90:57:2b:ac:17:25:43:a5:3b:
5b:51:29:80:d5:35:a2:f3:c3:ca:c0:64:36:0e:ce:8b:da:19:
45:cd:fc:44:40:b7:49:11:f4:2f:14:4c:53:f3:08:cb:66:55:
32:cb:67:e3:ba:1c:2f:87:49:94:e9:8d:77:4d:8d:b9:db:ff:
80:ba:2a:fb:b0:5b:9d:c3:d7:94:3c:29:32:14:f2:72:2a:26:
fb:37:a0:89:e2:fe:34:83:f2:26:53:59:95:2a:bd:eb:7c:e7:
19:7d:35:71:b2:72:dd:31:f5:a4:18:8e:d5:a6:47:4b:09:79:
a6:23:f4:54:13:a4:00:87:26:41:90:1c:94:69:00:07:c4:77:
d4:90:dc:78:15:ea:cd:89:4b:1f:7c:3a:4d:9d:e4:ce:c1:ed:
a4:e6:61:0f:78:a4:c2:f1:24:67:c0:8e:5d:6f:d2:f9:86:29:
a7:90:cb:cc
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIUYtgaO/E4keTrwE/Ug23aF7JPQawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKDY3OEI2QUY3N0NCQzI4QkEyNzA0MEY5QzAwODg1OTEzQjZGQjI4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD28FGvci1WdH4kmz7cT4CQZtke
LlpPnokHvAe0z/Ml6bSkaFzgIszoMk+8G8Q3AN5TUk8HMuxbBWPUQXB5q6mQDsFZ
vyxr9GpvMkQzx0SHT7uo56A3e8dDR+u2hSdXpWWHTAqI8fP2Ml7A8FEVnujthJnL
7o8VWY+WeY3/RnYuF9vhtZ0yZXbfNQR791T+Rm8RYn0IWKWiRn9UFtpg8mCjQQXE
7AhlKw9ijmJMJbWm4gIhanhIvE7DbpwI6+rtBdP2XVCQ1+++fXc8rGvVsy1ywQG0
6+nwX2Ql2CHrajtwof/qSKkq/9KQc5rBuAd81EUCR4fw9Y7KE6YO3tF9TtR7AgMB
AAGjggHaMIIB1jAdBgNVHQ4EFgQUZ4tq93y8KLonBA+cAIhZE7b7KDYwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA0
ODQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/
BC4wLDAqBAIAAjAkAwcEKgagBRTwAwcEKgagBRtAAwcEKgagBRvgAwcEKgagBR1g
MA0GCSqGSIb3DQEBCwUAA4IBAQCjrD36nlM83xeCIwUfVuvn4pibw5nCHniYigVb
qQ67v0LJ3dEUPlSMpJiUjNmrON9XSYsEnWmPn7J6GcHLewnQ21DE0xM5PuYC6/o2
ko/0hoGQVyusFyVDpTtbUSmA1TWi88PKwGQ2Ds6L2hlFzfxEQLdJEfQvFExT8wjL
ZlUyy2fjuhwvh0mU6Y13TY252/+Auir7sFudw9eUPCkyFPJyKib7N6CJ4v40g/Im
U1mVKr3rfOcZfTVxsnLdMfWkGI7VpkdLCXmmI/RUE6QAhyZBkByUaQAHxHfUkNx4
FerNiUsffDpNneTOwe2k5mEPeKTC8SRnwI5db9L5himnkMvM
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:23 2025 by rpki-client