Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205398.roa
File: AS205398.roa (raw, json)
Hash identifier: sousZrWOOwZruqvWhRk2W7sQrou8ExTPYQxaFWvN99s=
Subject key identifier: DD:70:B8:B0:3E:58:EC:94:06:39:97:19:A8:32:E1:33:B4:C9:52:D2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 74B6FD64295C334F4C499A88840E467AF51A2A4C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205398.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 205398
IP address blocks: 2a06:a005:2db::/48 maxlen: 48
2a06:a005:5ab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b6:fd:64:29:5c:33:4f:4c:49:9a:88:84:0e:46:7a:f5:1a:2a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=DD70B8B03E58EC9406399719A832E133B4C952D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:29:91:98:c8:cb:71:f5:8a:e0:ef:21:34:
79:6b:59:a9:41:aa:c2:ea:18:57:48:7e:d8:b2:94:
c5:6b:99:b5:bf:1f:9d:38:b6:d8:5a:0d:e4:b7:a0:
40:16:82:7b:17:09:b4:ef:d7:8a:96:ef:56:69:f1:
a7:04:6b:97:8d:43:f8:8c:f5:ce:e0:19:a1:02:08:
17:2a:5d:dd:17:e9:ed:3f:d1:02:9d:76:c1:04:55:
43:0e:e0:c9:1c:eb:ce:3f:16:4f:0c:ff:8b:d6:44:
7c:ab:b1:75:f7:91:9e:2c:1e:21:44:0f:3d:74:15:
ce:dc:cc:2c:9a:69:74:c0:f9:c3:fd:f6:6f:55:5a:
71:75:cc:75:0b:0c:27:e0:03:ce:7e:e8:4e:7d:27:
12:93:8a:2f:e8:d9:8e:0d:4e:27:c8:86:3f:e1:77:
90:74:db:5c:4b:ca:9b:20:0b:41:f2:ce:11:db:a8:
23:78:0a:ed:44:e9:4c:56:f1:98:c1:c3:69:fe:c0:
c4:ec:75:4d:28:af:61:23:8d:e8:92:f0:62:b5:ae:
18:5a:74:c0:4a:e0:38:fa:23:17:b7:3c:e4:aa:bc:
58:c4:b1:f7:fc:16:73:e0:ce:5d:99:65:10:b0:e0:
5a:39:e5:c7:9e:ab:1a:28:e9:92:f1:f2:b7:ac:9f:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:B8:B0:3E:58:EC:94:06:39:97:19:A8:32:E1:33:B4:C9:52:D2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2db::/48
2a06:a005:5ab::/48
Signature Algorithm: sha256WithRSAEncryption
21:61:00:f0:bf:69:8a:53:ae:69:5e:5b:ea:4b:4d:40:5d:1a:
09:5c:25:28:e7:7a:6e:b5:50:02:c7:89:ca:9f:9e:7a:31:1f:
f7:0c:09:21:ba:e8:0a:c5:4c:cc:72:f5:ee:bf:46:49:99:d4:
57:8a:ea:01:fe:04:24:c3:8c:a1:8f:9d:8c:0a:f5:a6:6f:31:
db:ed:a0:78:d7:a9:69:85:52:0e:aa:c6:7b:dc:30:be:9e:1f:
91:ad:47:bf:7c:cc:e9:a1:13:c5:ea:a8:2a:f0:43:bd:b6:6a:
01:3f:0c:e7:68:98:fc:e6:00:e8:ab:9f:58:c4:0a:ad:89:17:
dd:e9:67:a7:30:5d:f2:2d:b8:40:72:0b:39:9c:46:74:f9:b4:
b6:4a:62:ec:a7:cc:ae:c3:45:15:d1:89:1d:f3:1d:70:c5:a9:
3c:75:94:38:d3:6e:56:d1:f7:70:2f:52:98:50:8b:e1:4e:16:
f5:fb:e5:cb:99:3f:7a:5f:b0:35:5e:27:3f:61:55:fd:e5:57:
e1:d7:b1:da:b1:f4:f1:cf:35:24:8c:03:e7:fa:95:f0:8f:37:
e3:b1:8e:20:7d:bb:ab:bd:16:60:d4:7b:32:28:2a:7f:f7:4a:
72:0b:d1:51:79:70:06:93:ee:db:76:79:c8:a5:7c:9a:0e:24:
e6:82:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:07 2025 by rpki-client