Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204992.roa
File: AS204992.roa (raw, json)
Hash identifier: T5O3Qk8AQU4Iw8ruq66xmPJsfvbtBGmE5sJCYkLK9UA=
Subject key identifier: C3:8A:B2:91:0E:31:41:99:26:69:FB:06:ED:28:E4:11:78:73:B2:7F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7EFDF4EC608A42753B57A72704EC459373101110
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204992.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 204992
IP address blocks: 2a06:a005:5f3::/48 maxlen: 48
2a06:a005:a11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fd:f4:ec:60:8a:42:75:3b:57:a7:27:04:ec:45:93:73:10:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=C38AB2910E3141992669FB06ED28E4117873B27F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:38:c6:0d:89:ad:d1:1f:31:0e:20:64:6d:
0d:01:91:9c:2c:46:d4:44:2b:7a:8b:d6:ca:40:ca:
06:68:06:9a:96:0d:88:18:30:0c:be:f8:f0:92:f2:
cf:cf:74:4f:02:b2:d7:61:a9:c1:d8:6c:15:8b:ee:
42:d9:db:cc:73:99:66:db:e2:2e:43:54:5f:8b:0f:
9b:df:07:49:21:30:b9:95:01:c8:75:de:dd:d7:de:
a3:0c:6e:ac:4f:3e:f3:b1:07:00:56:62:3e:8e:26:
16:b3:c5:98:75:09:60:ec:b3:5f:9d:42:ef:4f:2f:
23:f0:1c:2b:fa:e5:71:14:f5:c9:dc:61:ec:9c:2e:
a4:c4:81:4d:d0:5a:4f:23:f2:05:6e:e6:e3:21:d3:
a1:b8:af:ee:ee:99:4f:3b:e6:59:a1:4b:13:8f:8c:
2e:6f:e7:c0:40:a4:84:46:50:92:2d:44:0a:f2:03:
0b:d6:11:fe:b9:24:bb:d8:e5:27:3f:94:f3:0b:a0:
22:6d:e5:4e:9c:4e:53:ea:d4:ee:b6:1c:36:cd:1e:
e6:46:27:b6:08:cf:ea:81:96:3d:bc:71:51:58:c4:
13:53:0b:75:ff:43:41:bd:60:6f:93:ed:a3:0e:a5:
0e:f4:9d:a8:75:43:ca:19:ae:d4:ab:3b:49:68:fb:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:B2:91:0E:31:41:99:26:69:FB:06:ED:28:E4:11:78:73:B2:7F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f3::/48
2a06:a005:a11::/48
Signature Algorithm: sha256WithRSAEncryption
e0:9a:48:8a:a3:09:5a:48:7d:61:43:72:22:96:a1:a5:1a:22:
4d:36:ad:8c:37:73:3e:f0:f1:d4:f8:ae:f2:b0:91:81:17:7a:
7c:e5:5b:fd:6b:4d:a2:64:15:ef:d5:2f:58:37:46:32:bd:28:
0e:34:73:f9:31:c8:0b:d9:e7:0f:bc:7e:a4:6a:50:dd:c7:e7:
e7:e4:e7:21:25:5e:8a:d2:73:23:20:a4:53:fc:91:74:44:e3:
77:e2:21:cf:1b:48:dc:1b:fa:38:d8:1b:96:5e:cc:f9:d5:90:
d8:02:86:6f:34:16:92:77:8a:63:52:0b:25:c5:ba:56:d0:c3:
e6:2c:85:5b:c2:3b:4c:a5:ee:5c:02:49:41:89:5c:46:89:8a:
82:07:cf:d6:57:cb:a2:02:d1:d1:94:0f:9f:06:03:aa:f0:55:
d9:97:22:cf:70:6b:05:67:a8:10:64:db:f9:bc:5f:58:b4:80:
e5:4c:67:bf:a3:90:38:9d:a3:7d:59:07:94:a8:97:3e:9b:95:
61:30:71:17:d8:c7:bb:f5:86:40:34:0a:36:f3:8c:a9:78:5a:
4d:be:f3:a6:b1:e4:82:ea:ff:28:a2:62:9b:9e:11:d5:a0:1d:
c4:48:00:a6:5e:9e:de:ca:7a:57:05:72:cd:5e:6b:a9:3a:f3:
be:c2:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:05 2025 by rpki-client