Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204857.roa
File: AS204857.roa (raw, json)
Hash identifier: /vd5v/M2+0Hedouw7JGWd2wtzXb99PJnzvcA9WReDLY=
Subject key identifier: FC:EC:19:68:48:48:D1:0E:AB:28:3B:4F:2F:9A:0F:C7:F6:AB:83:29
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 39EB19CD09E86764692174B7A738B97CD94215BD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204857.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 204857
IP address blocks: 2a06:a005:b70::/44 maxlen: 48
2a06:a005:b80::/44 maxlen: 48
2a06:a005:b90::/44 maxlen: 48
2a06:a005:bd0::/44 maxlen: 48
2a06:a005:be0::/44 maxlen: 48
2a06:a005:bf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:eb:19:cd:09:e8:67:64:69:21:74:b7:a7:38:b9:7c:d9:42:15:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=FCEC19684848D10EAB283B4F2F9A0FC7F6AB8329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:62:f0:87:0d:3f:58:7e:5e:16:c3:88:70:
42:e6:d9:db:89:cd:d9:eb:e7:3f:ad:d6:3e:5c:5e:
98:47:a3:6f:24:0a:17:22:76:bc:3e:b0:b1:1f:6c:
c6:a9:08:15:4d:69:3b:4c:25:ac:f8:8a:0c:60:f8:
50:ac:8b:d1:ae:30:7e:d6:a2:db:4a:35:f9:28:ee:
5b:7a:aa:9b:57:07:e5:11:68:a4:06:00:27:89:c0:
98:2d:6e:a4:43:1a:eb:8e:87:c0:e1:1d:46:0d:16:
ee:a8:c8:64:a2:30:33:fb:ce:b2:0d:f8:fe:8d:83:
bc:67:10:e0:ed:86:e2:2b:d7:87:46:13:57:5e:1e:
ef:b9:1f:c8:d4:b4:b2:1e:58:37:cb:42:da:98:5c:
36:7a:08:65:72:de:23:9a:46:e1:e6:42:f1:6e:6f:
58:f9:d7:8f:a3:e6:51:a3:57:78:ab:18:77:f3:bc:
41:a7:cb:9b:f1:02:34:1b:0b:4b:4e:4e:1b:2f:e8:
5e:37:34:cb:98:9a:82:8d:1d:59:fe:df:1a:6d:a1:
7f:23:ba:b1:1f:22:b5:ba:98:02:72:96:4a:ba:b7:
1a:8a:27:5c:48:10:19:4c:17:c3:28:50:f6:ba:19:
12:08:6f:85:4b:0b:e9:a8:5a:1c:71:f8:e7:24:c9:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EC:19:68:48:48:D1:0E:AB:28:3B:4F:2F:9A:0F:C7:F6:AB:83:29
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
2a06:a005:bd0::-2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:5c:40:b7:fa:a5:86:84:81:79:9d:70:85:fe:fd:e6:43:75:
37:b5:c7:2a:17:18:01:dc:8b:a8:93:05:8f:5b:04:d3:f7:68:
73:94:fd:85:99:9d:aa:b9:f6:8f:e1:0a:23:fe:ff:82:65:52:
97:8c:40:97:cd:b3:6c:21:45:23:59:bc:8c:ff:d2:58:1c:0f:
4e:e0:ea:65:55:59:19:3d:57:df:7e:ff:36:17:de:64:58:bf:
2a:c2:cb:74:99:5d:7b:b4:eb:0a:a0:cd:70:b9:aa:be:0b:a5:
d0:98:f1:95:38:00:29:af:5a:f7:12:a5:b0:d7:b2:0b:48:ab:
32:55:f6:7c:28:bb:a9:2f:7b:63:f3:05:a1:90:2c:97:2b:66:
ee:cf:6e:52:35:30:b2:a2:18:ba:b9:f5:33:ee:cb:76:01:91:
8d:ef:2e:38:3a:2e:09:d0:c6:b3:b3:85:e3:51:d3:7d:5f:f1:
fc:03:97:c3:13:6d:d0:1f:d8:95:b6:5b:92:ab:f0:33:ee:b5:
23:29:2e:d0:50:a0:b8:12:1e:08:79:70:ef:df:6f:07:34:e6:
16:55:59:77:fd:82:d6:f2:7f:5e:22:34:b1:ea:38:75:61:03:
7e:75:c2:22:ae:e3:b6:8d:8a:4c:6d:bc:f3:82:98:b1:b9:05:
b5:d3:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:29 2025 by rpki-client