Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205214.roa
File: AS205214.roa (raw, json)
Hash identifier: p2Ag/VFcZ6SjgienCTi3bW9oiYd03IbIU/CgVNdIoeY=
Subject key identifier: BC:4D:65:2E:EC:DD:C9:5D:66:5A:2C:FB:D7:52:58:D6:CD:F9:3B:0F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3C656D6C560FC76D825234A25999D9DDE72171AB
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205214.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 205214
IP address blocks: 2a06:a005:830::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:65:6d:6c:56:0f:c7:6d:82:52:34:a2:59:99:d9:dd:e7:21:71:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=BC4D652EECDDC95D665A2CFBD75258D6CDF93B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0f:0c:37:24:2e:2e:99:6b:53:0a:38:c8:19:
ce:06:2e:52:b7:cd:81:86:07:fd:cb:7b:60:7f:a3:
1b:2c:dd:e2:d2:64:12:ef:f6:ce:28:01:06:8d:a1:
be:a3:bf:76:de:f0:ee:59:49:34:31:ab:5e:31:01:
28:66:49:ad:a7:ca:d9:42:de:b7:d1:6c:7f:96:cf:
ed:90:78:f5:d4:b1:0e:7b:b5:14:0c:92:f7:c4:71:
55:86:e3:d1:a8:ca:6f:9b:b6:48:08:59:5b:83:27:
51:c5:0e:3e:f5:5b:6b:c9:5c:e7:8f:2a:dd:99:c5:
07:50:f7:6b:74:41:7c:2b:6d:3f:ce:ae:18:36:a6:
c4:91:2a:d1:da:27:30:e9:0d:0f:2e:68:31:52:33:
f3:0b:2d:30:ec:23:a4:d2:8e:49:f7:26:b9:9a:06:
a4:b2:43:71:82:d9:ad:e1:13:ad:09:a5:9d:5b:ae:
86:1b:7f:9b:1b:b8:83:70:45:e6:02:f1:f6:13:11:
45:7d:a3:be:e7:05:d7:af:62:54:8e:fc:8c:56:4a:
d7:54:51:1d:eb:85:99:91:ef:53:f4:e8:7c:20:82:
0f:23:02:a5:da:71:b8:9d:43:a4:2c:c2:00:9d:18:
62:62:8b:d4:dd:56:5c:e0:99:f2:07:7e:fd:06:66:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:65:2E:EC:DD:C9:5D:66:5A:2C:FB:D7:52:58:D6:CD:F9:3B:0F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:830::/44
Signature Algorithm: sha256WithRSAEncryption
6c:25:03:c9:70:a1:37:5e:42:44:a4:04:04:ae:f6:96:42:8b:
a4:3e:c4:ae:04:01:5e:6c:1d:03:cc:ff:15:c6:a0:99:42:f0:
4e:c7:2b:e1:bd:98:b2:b2:d1:32:ad:e5:d5:86:c5:b0:4a:91:
eb:5b:45:b6:51:f9:cd:00:63:54:61:79:e2:16:a8:86:d0:d5:
55:5a:55:6f:65:51:bd:29:2a:ff:9d:81:75:ad:f9:d5:b3:cc:
35:9a:8c:cd:b1:09:7e:c0:6c:df:ad:1f:63:1c:d1:34:1b:74:
53:c7:52:1b:e0:a7:a0:22:b7:17:e0:09:bd:fb:9a:e5:d1:85:
6c:60:a8:d1:2e:96:4b:36:c9:83:9e:8a:9b:50:db:b8:de:48:
d5:d1:40:20:d5:b0:81:a7:c6:00:b7:0e:e2:a5:31:47:3f:89:
c0:74:36:76:cb:73:9b:62:94:c5:85:60:d6:f4:41:48:4b:18:
68:ee:cf:e2:bc:c9:28:a1:7d:d0:5f:2d:16:e4:02:7c:81:8f:
74:22:5b:b2:81:68:fa:b6:a2:bc:90:65:61:4d:dc:ec:54:d5:
5c:ee:fc:03:e5:8d:bc:b7:8f:12:88:9f:c5:f9:45:ab:5f:1a:
ee:bf:d3:ab:4b:e9:1c:2d:a8:c9:bf:3c:9b:47:97:18:4b:ed:
2a:b9:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:23 2025 by rpki-client