Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204901.roa
File: AS204901.roa (raw, json)
Hash identifier: ay0S+UsQN1WxjSbyiu1vp+Akr1x/uyYQq0U8eDJebHY=
Subject key identifier: 3D:D7:AF:66:BB:59:5B:F2:B6:72:DD:2F:CF:4B:9A:52:3C:94:91:8D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 69132716AE34F1797B83D58A9BD706D0B7873174
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204901.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 204901
IP address blocks: 2a06:a005:1690::/44 maxlen: 48
2a06:a005:1c20::/44 maxlen: 48
2a06:a005:2830::/44 maxlen: 48
2a06:a005:2840::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:13:27:16:ae:34:f1:79:7b:83:d5:8a:9b:d7:06:d0:b7:87:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=3DD7AF66BB595BF2B672DD2FCF4B9A523C94918D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:12:f8:51:95:b2:20:c9:53:11:03:d5:19:
05:b0:14:51:dc:2a:8a:f8:8d:5a:76:6f:f0:70:20:
0e:95:85:39:4a:77:85:ef:bf:15:7d:df:f2:5c:73:
44:1f:a1:3f:10:51:b5:35:f8:f3:71:2e:56:64:80:
af:6d:ce:6b:d2:f4:22:d8:c4:75:05:d4:d7:d9:45:
0a:b8:32:69:7d:1c:3d:ae:22:ca:5d:f3:82:ee:78:
88:25:26:d4:48:30:34:ec:76:e5:95:5e:ce:4a:5f:
f9:15:17:3d:78:e3:1a:63:27:fa:66:50:09:bd:2d:
b5:00:d1:e3:06:c0:83:88:42:10:1c:78:d7:9c:e9:
54:d1:39:98:3a:be:6c:d3:16:31:83:13:81:6d:12:
35:03:96:27:41:41:6c:86:6e:36:50:49:52:b8:d0:
e4:18:d2:8e:7e:a1:7d:a6:36:cd:0c:89:c2:8d:db:
7f:ab:18:88:d7:34:80:81:5c:ab:d2:42:42:11:ec:
b9:7b:a4:ac:e9:24:53:2f:64:99:0b:d1:43:a5:0d:
36:9f:53:9c:ff:f2:e2:3d:33:7a:09:a5:30:7f:73:
5d:8a:f7:06:6b:b9:c1:0c:67:fa:37:11:ca:e8:7f:
20:a5:92:f9:3b:ea:af:75:3c:3f:b1:8a:58:e0:f0:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:AF:66:BB:59:5B:F2:B6:72:DD:2F:CF:4B:9A:52:3C:94:91:8D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204901.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1690::/44
2a06:a005:1c20::/44
2a06:a005:2830::-2a06:a005:284f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:67:4d:26:f2:7e:07:02:17:59:49:44:45:99:9a:0b:e7:33:
38:dc:9b:69:92:7d:98:3a:43:cb:60:f7:74:40:60:b4:80:fe:
56:fe:48:86:d4:ac:82:7d:23:2c:3e:d3:7b:0a:b5:20:a1:4d:
8c:4c:ce:e9:4e:91:c1:5e:34:60:5c:06:71:b9:bd:75:7d:5c:
06:42:30:b6:b8:99:ee:65:ac:7d:3b:4b:85:f0:c2:a1:7d:c1:
7b:d4:1a:10:98:9e:d6:bb:7a:dd:f5:6c:51:2b:57:f6:2c:01:
e9:73:1d:83:23:12:03:5d:6b:6e:ee:c8:94:16:5d:47:be:71:
6a:38:28:18:dd:f8:98:ed:ef:0a:ed:40:fd:ee:7e:ca:63:79:
89:b3:93:ef:55:1b:2c:ea:6f:7e:47:52:28:20:8f:97:bd:52:
e1:4f:09:3e:92:40:dd:da:f2:34:14:b5:1f:73:6c:4d:74:4c:
70:94:29:91:9c:ca:e2:50:34:66:e2:db:64:a8:19:fc:62:a4:
ca:34:cb:56:12:7e:ff:04:7c:7a:de:5b:2b:4c:e1:37:d8:0c:
51:c3:58:05:e1:8c:9b:1c:b8:a0:e6:54:8f:9c:d4:2d:62:33:
8d:3c:63:37:ab:cb:d7:b3:7a:be:17:8d:e5:3c:57:20:06:cf:
a7:5e:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:54 2025 by rpki-client