Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205245.roa
File: AS205245.roa (raw, json)
Hash identifier: REy2DeaTy3Q+3wLWWorRVxpUWvnLe09b/2Q03Y0khko=
Subject key identifier: B0:4A:FC:95:1D:6F:EC:F5:B7:6E:AA:08:69:46:8D:59:32:5D:DF:2E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5CA88E5216A3F8C9B9369C978F2A5581E73F81C5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205245.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 205245
IP address blocks: 2a06:a005:7a0::/44 maxlen: 48
2a06:a005:7b0::/44 maxlen: 48
2a06:a005:820::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a8:8e:52:16:a3:f8:c9:b9:36:9c:97:8f:2a:55:81:e7:3f:81:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=B04AFC951D6FECF5B76EAA0869468D59325DDF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:44:56:b4:4a:26:d9:a4:00:39:84:67:99:3c:
a4:8e:8a:c6:5a:20:a8:ac:8b:b4:38:9e:99:4e:6a:
15:7a:1f:16:28:68:de:fa:5c:d4:04:02:00:c8:de:
a8:ac:3c:a2:83:d4:f2:b6:16:41:24:19:14:32:f5:
b2:c1:68:41:ae:de:d7:35:1e:31:66:6c:dc:f6:48:
08:6d:a7:aa:55:af:d4:4b:be:ef:5c:7b:80:e0:f7:
ec:46:fb:f2:66:59:f8:26:c8:24:fc:df:40:d4:75:
91:52:37:86:1b:37:ec:d3:fe:2f:e4:e4:51:05:9b:
e5:2e:88:7b:88:01:ca:0e:b5:e2:9b:db:09:48:db:
2d:b7:3d:6a:43:b8:84:cd:c9:5d:08:f5:f2:c3:f3:
68:c2:87:df:44:52:33:5b:43:2f:62:b8:0a:bf:ba:
1b:7b:f3:4d:8e:db:2b:5f:5e:f5:8b:fd:d3:20:16:
cf:99:01:bb:39:3a:fc:58:07:cd:67:3a:36:ef:5c:
a0:93:09:65:bc:d4:2b:39:f1:fb:59:d2:09:64:48:
55:78:ff:a8:2f:bf:6b:dd:1f:69:f2:89:a6:74:30:
38:6a:e0:a6:60:ca:b2:12:62:a5:f1:f6:93:b5:c5:
cd:92:ee:40:08:d4:37:dd:f6:a2:fc:fd:ab:50:22:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4A:FC:95:1D:6F:EC:F5:B7:6E:AA:08:69:46:8D:59:32:5D:DF:2E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7a0::/43
2a06:a005:820::/44
Signature Algorithm: sha256WithRSAEncryption
1b:f6:47:51:fe:86:8a:3f:05:fa:c8:ad:33:63:80:bf:45:20:
89:0f:14:47:25:81:91:07:50:11:6f:36:84:b5:e2:21:32:4d:
fb:31:3a:90:ca:74:8c:33:79:2e:3f:b6:18:f2:ca:54:fc:62:
db:de:4e:4d:41:e1:96:4d:e3:56:6d:bc:26:a1:dd:83:81:00:
a0:b2:71:0e:8a:07:7f:93:c8:73:e2:32:f3:1a:c8:d4:02:8e:
6b:7f:47:9a:96:fc:69:d0:7a:04:52:e8:e7:ee:24:e5:cb:41:
0e:a3:97:22:07:f6:29:49:10:dd:d0:1b:ad:a5:f4:e9:15:89:
33:31:08:4f:21:db:76:b1:bb:02:a5:16:3c:82:e3:c7:5b:38:
13:4b:96:79:c9:51:26:3c:19:d0:8b:55:ae:b0:1d:7d:b0:75:
b5:61:fd:ef:8e:dc:c2:9f:df:a1:f2:32:76:4e:16:a8:d4:dd:
d1:10:f2:10:09:98:51:31:b8:ce:93:d5:96:bd:5f:83:5a:db:
e2:4c:45:39:e0:cf:23:75:57:11:38:74:f6:be:02:16:d7:91:
10:19:ab:b9:37:80:27:49:58:1e:0f:13:ed:6a:0a:5d:fc:bd:
07:0e:09:1a:fb:6f:7d:f9:84:7e:da:81:90:8a:7a:b7:f2:cd:
88:c8:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:44 2025 by rpki-client