Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205088.roa
File: AS205088.roa (raw, json)
Hash identifier: ci0h0OO6NygA6v2TfyqqTXHKHnZHaIO4jyPP6yCHmUk=
Subject key identifier: 58:13:B5:7D:4A:A4:E4:F3:01:A5:54:E2:8D:EB:A1:FC:01:2F:AE:B9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7BF092A8F42FACFD7BB29CCED30376A36BA586FC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205088.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 205088
IP address blocks: 2a06:a005:bc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f0:92:a8:f4:2f:ac:fd:7b:b2:9c:ce:d3:03:76:a3:6b:a5:86:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=5813B57D4AA4E4F301A554E28DEBA1FC012FAEB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:94:fc:b1:1b:18:93:75:01:0b:41:df:2d:
eb:45:0c:1b:76:9a:47:69:94:48:f4:3c:c9:98:61:
8f:f6:31:ea:b2:a6:5f:44:58:81:3a:65:11:80:9c:
46:d5:a1:88:70:98:d1:c1:07:ec:d3:0e:58:0e:3d:
2d:d6:e3:fe:26:a7:16:82:5f:56:3a:84:99:18:a5:
6a:59:23:ba:7a:9e:c5:d8:00:ed:46:4f:1b:c2:54:
4e:99:f2:aa:fd:2a:14:da:1c:f5:bc:bb:f9:16:f6:
5a:cf:f7:cb:73:5b:c2:d1:c7:0b:76:0a:f3:df:98:
0e:5f:0b:c5:76:37:5d:15:f6:5d:f0:11:b4:7a:58:
92:99:d2:5f:1c:82:90:f3:61:78:35:a2:a3:4c:04:
4c:11:61:82:8b:41:7c:a7:68:48:8b:45:15:5f:5e:
7c:09:ef:07:c8:77:ea:93:24:62:40:6b:1d:46:9f:
01:12:89:e3:fc:84:12:12:22:14:f4:ea:a0:44:2a:
4c:22:ae:b7:c4:e6:ef:f9:72:dc:0c:94:dc:0b:31:
07:91:89:87:8d:09:6e:b2:05:d1:f2:57:1d:63:05:
6a:96:2e:8b:44:90:32:f6:a2:8e:96:38:2f:05:b5:
44:68:60:3c:26:22:da:3e:0d:ad:c0:50:08:c7:a3:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:B5:7D:4A:A4:E4:F3:01:A5:54:E2:8D:EB:A1:FC:01:2F:AE:B9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:bc0::/44
Signature Algorithm: sha256WithRSAEncryption
0f:8f:a6:f8:74:51:04:39:c1:0d:21:2b:57:0d:f0:8b:c6:4e:
57:a6:6c:ca:45:54:4a:0b:37:71:c4:ac:47:24:8b:c8:77:c0:
8e:09:7b:23:f5:34:39:a6:38:59:e6:a7:cb:aa:52:89:2f:65:
ce:5f:b4:fa:42:df:35:67:b0:79:97:62:e4:4d:7d:a3:3f:ba:
40:9f:7d:f1:eb:3f:7a:1a:32:04:b3:d8:b7:9a:95:4b:85:bd:
bf:70:63:00:5e:18:00:40:31:55:f5:10:f4:e6:0c:f7:40:90:
19:da:40:86:7c:61:cf:e9:c1:fa:7a:83:81:bd:5d:45:81:73:
95:16:3b:5a:4a:0f:50:2c:6d:00:f2:20:07:4f:f3:a9:d0:c4:
41:71:d0:13:ab:84:55:f9:ec:13:8f:68:a8:82:01:76:73:ca:
3f:0c:29:f8:23:c3:18:f0:5e:7c:17:b9:50:67:4c:fa:07:54:
b5:f7:b8:78:18:b0:31:8e:8d:05:88:5e:77:c8:cd:f3:f6:af:
d1:34:7c:89:b1:ae:6c:c0:a8:cc:0a:fe:35:1b:b5:e5:2c:70:
f3:76:46:5d:e5:50:d0:99:d7:1b:37:3d:9e:54:ec:99:db:5b:
f2:9f:43:ff:f3:50:65:7f:d2:ae:17:94:d0:cd:3d:12:57:67:
b5:d0:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:24 2025 by rpki-client