Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205431.roa
File: AS205431.roa (raw, json)
Hash identifier: 15SJwwZAbkdS8MlEmsGTMpXo4fNgbbZ8oFXZTd7Pb9M=
Subject key identifier: A1:25:24:82:17:3A:42:80:B0:42:BF:0E:6E:F6:78:E3:F9:D6:55:A1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 090346E45CF498F97A12A0E817CD5AB4E1404D0D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205431.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 205431
IP address blocks: 2a06:a002::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:03:46:e4:5c:f4:98:f9:7a:12:a0:e8:17:cd:5a:b4:e1:40:4d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=A1252482173A4280B042BF0E6EF678E3F9D655A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:0e:bc:15:69:db:76:35:3e:fe:87:f3:1b:
52:51:92:ae:4e:4d:07:0d:ba:d2:fe:50:8e:60:69:
90:cd:28:bd:d9:f3:2d:7e:61:ec:09:0f:7f:30:6c:
fb:94:6f:aa:e5:b0:a7:c9:38:d9:88:d6:70:16:33:
7a:14:fc:5b:53:c1:cb:cf:f3:55:4b:a8:3f:81:6b:
2a:7f:f4:4e:ba:fc:e9:63:2e:7e:ec:1c:c7:aa:79:
d7:c1:25:d5:23:a7:f3:08:80:ef:f8:ab:15:32:88:
32:cd:f7:30:b8:3b:69:0e:91:e8:37:66:4e:46:f8:
d9:6f:d1:38:22:39:96:ad:19:d1:f7:15:16:5f:8a:
01:0e:35:80:02:12:00:6e:44:28:e8:49:70:aa:e8:
b9:d1:8d:a3:db:3c:27:25:a0:54:61:61:2d:6d:e7:
04:a6:61:86:00:c3:6c:cc:71:50:ff:72:d4:68:5a:
26:c0:c3:6f:0e:79:36:12:81:bd:70:94:6e:a4:09:
98:25:69:f6:da:ad:4b:3a:84:b9:95:16:2f:a7:4f:
9b:3c:01:ff:fa:e3:03:75:d0:90:b5:0a:da:7c:7d:
14:f1:b9:be:68:aa:85:d1:b0:de:78:22:00:30:72:
4c:0c:9a:f1:11:5b:3e:64:03:6e:db:98:83:29:56:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:24:82:17:3A:42:80:B0:42:BF:0E:6E:F6:78:E3:F9:D6:55:A1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a002::/32
Signature Algorithm: sha256WithRSAEncryption
3d:f0:76:9b:79:ce:17:7f:03:83:85:d3:3b:43:fc:63:f8:aa:
c5:97:3d:a3:50:01:a3:c2:39:5c:e5:2d:b6:06:64:9f:ae:7a:
0b:72:68:53:cd:27:1f:0b:7b:b2:3e:8f:bd:ad:07:e2:f6:c8:
a7:ed:d6:2a:3b:4c:07:55:d4:d9:6d:66:0a:d1:06:ca:76:db:
55:83:5c:2a:b0:b5:d6:6d:c3:a1:68:65:01:e2:33:f9:06:fb:
17:ed:13:ce:d1:da:13:59:7d:12:56:d8:78:1b:d7:9f:39:ad:
1e:e8:96:6c:a9:83:b3:a9:e2:b9:0c:d1:3c:b7:70:fd:0a:01:
b5:95:d0:21:bf:ae:e3:55:54:83:15:d3:91:a6:38:93:f4:ea:
6c:e3:68:3b:6c:8f:0d:fc:d1:90:7d:1d:cb:6e:51:7f:29:e1:
ef:27:04:3f:60:32:e9:82:20:8d:91:e1:e8:87:7b:7d:1a:26:
71:46:a2:92:c8:56:e7:5f:4c:d0:ab:0c:a9:07:cc:8e:4b:7b:
ec:e1:2f:26:f8:95:23:30:89:a0:94:28:05:18:03:15:53:ba:
f6:82:0d:39:e0:80:7d:db:e5:7c:ac:77:fd:79:2c:3e:9e:28:
d5:cb:e7:0b:dd:3a:a3:73:63:0a:1d:f7:e2:45:08:d5:ba:4e:
69:b8:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:09 2025 by rpki-client