Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205092.roa
File: AS205092.roa (raw, json)
Hash identifier: JEk1Jdn4CJN9j6AYAnbUFqcexXYXvBGxWaoRbuGMd6E=
Subject key identifier: 35:B0:12:67:6C:DB:CD:FC:82:61:C2:0F:56:79:07:01:04:45:A1:5D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0E1BB9A6E6C954DF93BB146FB5899586261AAD76
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205092.roa
Signing time: Wed 21 Dec 2022 16:56:56 +0000
ROA not before: Wed 21 Dec 2022 16:51:56 +0000
ROA not after: Wed 20 Dec 2023 16:56:56 +0000
asID: 205092
IP address blocks: 2a06:a005:930::/44 maxlen: 48
2a06:a005:940::/44 maxlen: 48
2a06:a005:960::/44 maxlen: 48
2a06:a005:970::/44 maxlen: 48
2a06:a005:980::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1b:b9:a6:e6:c9:54:df:93:bb:14:6f:b5:89:95:86:26:1a:ad:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:56 2022 GMT
Not After : Dec 20 16:56:56 2023 GMT
Subject: CN=35B012676CDBCDFC8261C20F567907010445A15D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:0b:3d:7f:cc:c7:d9:39:2a:d2:18:64:6b:
70:3f:c9:73:15:87:42:29:40:d9:61:dc:76:fd:66:
a0:d8:20:e5:fd:8b:35:95:af:39:01:ae:65:88:3c:
92:27:ef:4d:fe:c7:8e:62:16:a1:ab:1d:de:1c:0a:
e0:8e:69:27:7c:32:8b:ce:a4:56:45:82:c1:bb:25:
de:9e:a1:ed:3d:d9:e2:61:a4:90:c1:c0:14:8b:23:
5e:c3:bf:b8:3b:5d:2f:8f:65:4b:17:ed:0c:98:c7:
42:99:81:69:bb:b0:4d:d6:e8:a2:8c:de:df:49:95:
aa:fe:27:71:bd:d3:db:5d:12:6e:23:1a:02:c3:2a:
ea:9e:df:1f:1a:08:b7:7a:62:e3:9d:4b:f6:fe:95:
30:7b:44:40:bb:b3:84:3f:6f:82:ea:15:68:60:b0:
96:6e:b7:34:03:13:27:c1:59:92:8f:43:c4:13:4d:
a5:04:8a:95:d9:88:59:f8:4d:d1:3b:4b:79:97:9b:
a7:16:7c:86:5d:5f:4e:1d:ca:01:b8:fc:39:17:17:
67:6b:2d:b5:9c:2b:9b:c5:9c:54:0c:40:67:5d:bf:
86:9c:25:de:f5:6c:34:21:00:f5:f2:e0:d0:08:12:
d9:a9:ca:3f:58:a0:c1:aa:88:3e:5a:ea:f8:12:2a:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B0:12:67:6C:DB:CD:FC:82:61:C2:0F:56:79:07:01:04:45:A1:5D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff
2a06:a005:960::-2a06:a005:98f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:15:7e:00:6a:38:a0:be:f1:52:7b:1a:bf:ad:74:10:71:a2:
cf:9f:0c:2a:92:85:a3:2f:96:30:49:5c:13:f7:3a:60:cf:79:
1a:72:fc:c3:0d:28:1b:5a:05:c3:3e:e6:9b:5c:21:56:d7:8b:
ef:11:c0:26:0b:ea:58:f7:27:8c:11:de:b6:8d:e5:70:2f:99:
d7:5e:ea:d2:5f:06:3d:40:4f:f0:0f:a1:f3:0a:98:58:bb:28:
ca:34:27:ed:02:49:05:e0:f5:f2:8b:dc:a7:a3:b3:1b:79:3c:
73:18:63:c7:01:76:d4:1e:19:22:48:ef:96:83:23:9d:09:d4:
d0:85:fa:2d:9f:50:41:a0:ac:3e:7f:18:11:30:2b:d1:9c:d3:
df:6f:8c:c6:29:56:3c:23:e6:31:1c:05:01:51:0e:31:ed:ba:
94:5c:a5:cc:01:fd:9c:f0:94:08:99:33:4e:4c:5a:55:2c:31:
4e:ac:20:0c:86:d7:c8:e6:9b:d7:87:a5:57:98:65:75:0a:f3:
e5:2a:da:9f:9a:35:f0:a7:15:be:6c:f3:4c:0a:3a:13:83:86:
16:76:3c:9d:38:06:16:85:82:a5:b3:df:b3:61:af:60:02:55:
7c:7b:1a:2d:0c:2b:63:d2:25:4b:09:c5:df:e7:a8:77:6a:94:
42:1d:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:11:25 2025 by rpki-client