Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205421.roa
File: AS205421.roa (raw, json)
Hash identifier: Ljxeyab1NGDpgV5Kd+b/VqJSOjxJ+roFv/3uoyA6wyg=
Subject key identifier: 50:7F:0C:24:85:1C:68:49:6C:8B:7D:03:40:1A:F0:2F:A4:DD:29:7D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2E22EA9665C927AA2AF320ED3E2832F894D258F0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205421.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 205421
IP address blocks: 2a06:a005:1b80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:22:ea:96:65:c9:27:aa:2a:f3:20:ed:3e:28:32:f8:94:d2:58:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=507F0C24851C68496C8B7D03401AF02FA4DD297D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7f:40:21:9e:f4:f4:2e:2d:b5:9c:77:37:e7:
97:60:fd:85:98:77:45:b5:41:8d:c3:a5:4a:32:6d:
af:48:4f:3a:20:f0:db:64:94:e7:f2:89:7e:d1:04:
6c:fd:75:cf:41:39:d4:59:74:d2:e2:84:ee:6d:fd:
17:61:5c:a6:cf:8c:ab:2a:89:d6:33:2b:4a:ba:b0:
99:c4:f0:47:4d:37:7e:96:35:14:e1:f5:53:9d:c9:
27:d3:5a:ed:29:2d:4a:40:05:00:e1:87:f9:45:39:
33:7f:4d:ef:38:9d:4b:02:2f:c0:dc:e9:c2:62:dc:
8e:d5:c1:45:d8:c4:36:c4:4d:96:a3:4c:99:60:a3:
12:d2:ae:2d:cc:04:4e:b6:d9:f7:15:dd:1e:cd:9a:
c0:b4:06:91:7a:0c:af:c0:06:18:87:bd:93:41:e2:
f1:f8:f8:2c:ed:51:f1:31:80:fc:74:3a:53:df:c6:
4d:3c:81:bd:3a:61:6b:43:e5:0b:ab:6f:5d:09:d4:
16:8f:71:ed:0f:28:9e:17:21:a0:1b:d8:09:28:cc:
06:a5:03:f9:1c:69:b8:6f:46:a1:62:68:a3:a7:4a:
47:13:8a:1b:ae:de:96:7d:18:c5:90:d6:e5:86:16:
24:9b:62:97:b2:f2:4f:01:c0:9e:99:86:74:e7:17:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7F:0C:24:85:1C:68:49:6C:8B:7D:03:40:1A:F0:2F:A4:DD:29:7D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1b80::/44
Signature Algorithm: sha256WithRSAEncryption
99:bc:9d:5f:a4:99:ef:3d:ea:32:d5:b6:d7:5c:ff:9e:85:dd:
57:3b:4f:6b:56:39:77:9d:44:6e:26:8a:e7:66:c4:72:ca:a3:
c8:f8:e3:52:e2:0b:bf:da:fa:73:16:ad:13:d9:8c:5f:b4:e9:
85:24:1e:e4:f0:b0:62:65:f7:41:9d:c5:fb:f9:fe:8e:6d:06:
32:af:d2:be:b5:1d:c7:c6:68:53:88:f6:d0:c6:73:be:c4:66:
6a:ec:db:c3:f5:e4:e0:84:24:0a:e3:d7:3d:0b:ae:f9:eb:83:
53:eb:16:fa:5d:70:04:59:7e:62:d6:2b:15:d6:4a:63:fa:1f:
97:11:97:4c:e0:d2:d2:d4:7d:40:a1:4f:bc:44:5b:7a:8b:fc:
1c:86:79:49:2c:61:69:4a:cd:05:06:9b:06:96:d7:5d:a5:81:
24:a1:3b:9f:2f:57:4d:e6:ed:e2:5e:e2:fa:54:c0:75:8b:a7:
ac:e9:27:e9:98:51:8e:14:da:5b:40:ac:0b:88:cb:cc:b4:c9:
f4:b9:67:5c:9d:29:69:e6:88:e3:13:d3:31:70:7e:16:59:5f:
9d:78:d4:2e:c6:64:dd:53:2a:45:6b:51:48:7c:d3:fa:d6:e0:
a7:4e:ee:08:14:d4:93:1a:08:20:ae:ed:eb:c5:51:92:e3:1e:
79:73:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:17 2025 by rpki-client