Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204914.roa
File: AS204914.roa (raw, json)
Hash identifier: Y6KatoJDGMpUdA71vei/B0StA97LBUHsFKeiAIZi6p8=
Subject key identifier: DC:AB:1B:2F:79:45:87:AF:7D:A0:F5:89:1B:15:F7:05:A6:14:0A:89
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5B2C7806394563DC31C8BD94AA0C7F7427823052
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204914.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 204914
IP address blocks: 2a06:a005:d24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:2c:78:06:39:45:63:dc:31:c8:bd:94:aa:0c:7f:74:27:82:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=DCAB1B2F794587AF7DA0F5891B15F705A6140A89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:76:fa:55:90:7c:a0:40:77:2b:bf:4d:73:
36:88:17:b3:2b:3d:c4:42:e1:f7:ad:ca:73:6a:ed:
98:a3:00:a6:0f:2b:16:6d:1a:8a:8f:40:87:4c:5b:
13:66:12:d6:6e:59:49:a1:07:66:e3:54:f6:6f:d4:
ee:3d:83:52:ed:71:76:97:f1:fc:34:70:4b:f1:a6:
d4:25:c5:6d:03:7d:6b:2f:89:db:1a:ce:af:0a:70:
0b:51:1c:fa:42:f7:c5:ec:cc:14:80:55:4b:65:8c:
43:af:61:b6:4d:5c:1b:2a:da:bb:28:2f:28:80:54:
77:d2:66:ad:a1:be:c0:d8:03:02:b5:c4:09:b9:06:
39:fd:73:49:4a:be:6a:b3:ff:b3:0f:c4:85:d7:24:
b4:1f:80:6d:0b:1e:57:1d:5f:67:6b:24:89:3a:43:
f4:ca:8b:c4:ea:6c:46:44:79:15:3e:af:60:07:4d:
2f:b5:33:f9:c4:bc:b1:45:80:25:6a:9d:36:50:56:
46:c2:29:ce:42:a2:94:54:ab:4b:58:4c:62:ae:10:
a9:a7:3f:92:13:1b:a7:96:fe:5d:fc:f2:df:4a:53:
8b:7c:64:2d:3f:58:91:30:e8:09:b3:4a:1c:00:db:
e9:11:70:62:66:5d:df:99:95:6e:3a:e7:f0:49:12:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AB:1B:2F:79:45:87:AF:7D:A0:F5:89:1B:15:F7:05:A6:14:0A:89
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d24::/48
Signature Algorithm: sha256WithRSAEncryption
db:20:0b:a7:94:b5:d7:e7:3b:b9:46:c9:a8:1c:d5:ca:f4:44:
a0:00:01:39:21:7e:17:09:dd:76:11:b6:21:2a:6f:94:d4:6d:
b3:37:53:f7:0d:b7:ce:b4:29:7a:9c:ad:b7:06:96:c3:3f:1f:
b1:3b:ac:5d:43:55:57:8e:4c:d5:cd:49:2f:37:83:7e:00:b4:
2c:3d:1a:29:fa:ad:ca:97:8e:9e:78:4a:8d:bf:be:f8:a3:96:
65:84:27:87:7e:bd:23:2d:9d:57:a1:16:f9:8e:49:95:b3:0a:
3b:b3:96:32:e1:ce:b9:67:78:62:c5:52:e5:32:26:26:9e:42:
7e:99:9e:4e:4c:4e:fe:56:ac:6b:b3:5b:c9:73:7e:0e:a7:77:
9d:1b:b7:12:89:b4:20:59:43:09:e5:26:da:e1:18:97:13:15:
a3:24:7e:bb:2a:48:7e:6e:18:7a:f7:ff:f8:64:a5:53:47:48:
1a:02:13:c3:53:4e:f9:62:6f:46:70:49:2c:81:44:ff:0a:e9:
88:19:10:a4:6f:ff:29:a4:96:5c:9e:a6:f9:6d:59:b5:08:1b:
0b:5d:13:a0:b7:ea:ff:ca:9c:ee:a3:db:d1:c4:52:d3:03:fb:
fb:ac:e4:d0:97:5d:a4:46:4a:71:46:5f:74:3e:3b:9f:25:7c:
2f:74:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:42 2025 by rpki-client