Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205183.roa
File: AS205183.roa (raw, json)
Hash identifier: jbKd5e/LUGcAtgsF3MYBPH0ilBDwWogbdYWfE39P55U=
Subject key identifier: 3B:88:B6:1F:40:EA:5A:F5:07:39:A3:84:B6:36:7D:0F:7E:2B:38:F0
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 60FE71EB5CC8AA79BB01AF0659333C68835AD9B6
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205183.roa
Signing time: Fri 09 Dec 2022 07:58:41 +0000
ROA not before: Fri 09 Dec 2022 07:53:41 +0000
ROA not after: Fri 08 Dec 2023 07:58:41 +0000
asID: 205183
IP address blocks: 2a0a:6040:c080::/44 maxlen: 44
2a0a:6040:c0d2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fe:71:eb:5c:c8:aa:79:bb:01:af:06:59:33:3c:68:83:5a:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 07:53:41 2022 GMT
Not After : Dec 8 07:58:41 2023 GMT
Subject: CN=3B88B61F40EA5AF50739A384B6367D0F7E2B38F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:7b:4e:78:ac:47:ae:1d:80:2f:43:92:84:
ed:71:2a:f9:23:c4:e7:c0:fb:25:f8:28:42:7b:f9:
46:69:9a:d6:4c:2d:14:de:f3:7f:0c:db:8d:d5:26:
4b:48:82:05:26:d3:e5:60:4e:a7:92:e7:3b:77:a3:
a8:a4:39:24:56:41:ec:32:98:08:66:55:66:3c:ad:
25:a8:e2:7b:5e:51:4c:9d:44:80:52:8f:b6:8e:63:
c4:05:6f:2a:4e:84:1c:08:18:e4:a7:99:75:22:f7:
f1:d7:c0:0e:6d:6c:14:4e:24:8f:58:45:0b:d1:ef:
24:ab:22:15:26:e6:d7:b9:d7:17:b1:3e:61:d7:fb:
83:73:84:2b:fb:50:b6:e5:12:98:a0:3e:fc:96:ec:
27:ab:f7:aa:0e:c1:e3:30:e1:9a:16:df:64:cd:5c:
f0:af:29:35:a1:f9:45:ea:6b:3e:39:12:97:57:f2:
45:0a:bf:55:22:57:6c:a5:2f:8f:d1:2c:dd:35:03:
96:a5:11:f8:78:8a:66:a2:bf:10:fb:d8:d9:eb:7a:
6b:64:fc:f6:55:c2:69:4a:40:5f:cb:30:a0:04:3f:
90:76:78:f1:38:99:c0:fd:33:3a:d8:65:5a:b1:71:
d2:7c:e2:e0:6c:a7:ea:1d:bb:c4:92:eb:62:cf:3d:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:B6:1F:40:EA:5A:F5:07:39:A3:84:B6:36:7D:0F:7E:2B:38:F0
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:c080::/44
2a0a:6040:c0d2::/48
Signature Algorithm: sha256WithRSAEncryption
86:96:d5:ee:26:f3:2c:89:74:3e:ca:4e:b7:8c:6b:46:8e:7c:
45:29:b6:19:e9:4f:be:c0:6d:91:80:b6:c8:b9:70:9f:a3:b9:
e9:bf:a2:c9:d3:79:ec:36:e8:74:b9:4b:ca:45:9a:de:11:39:
b4:f0:01:fe:f3:da:8e:ca:cf:b0:c3:4e:67:8a:c7:f0:70:0e:
8e:0c:b7:8c:1d:bc:e9:96:b9:8e:2b:25:94:7c:23:ad:cb:99:
44:76:a9:15:1c:e5:6e:5c:3b:87:64:06:98:6f:12:2e:5b:fd:
a7:ce:1a:36:fd:9a:26:0f:1f:d3:ed:26:5c:7e:25:7c:73:0d:
ef:58:e4:29:ce:32:20:d2:56:7b:91:7a:5d:fe:da:45:78:79:
52:b0:56:0c:c6:a6:ee:fb:48:d6:41:93:84:dc:c4:a4:07:81:
4c:a1:9d:bf:1e:b9:c0:23:eb:52:2a:ab:f4:1b:12:86:2a:b8:
7b:26:fb:30:2f:3f:ac:fc:e5:77:a2:21:48:0a:f4:a8:62:ce:
3c:e2:5c:a8:37:29:7d:d4:9f:c3:92:22:95:70:ac:bc:74:aa:
28:c8:87:af:61:07:fb:bc:8f:01:78:5d:fd:f6:dd:0b:d3:3e:
c6:c0:71:4c:59:04:f5:b2:aa:be:73:e4:5d:bc:6e:de:9a:4d:
81:f8:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:09:35 2025 by rpki-client