Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205432.roa
File: AS205432.roa (raw, json)
Hash identifier: WPAvGAfdAU08a9+P1H07pZoRv2hPJnspl0G1qNUBUG0=
Subject key identifier: 37:43:23:A1:79:B5:85:26:36:61:7F:3D:79:BF:79:14:1E:BD:91:FA
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1BB58AE1CC14CF6B6935B2459E39D783AEBD340B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205432.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 205432
IP address blocks: 2a06:a005:1a::/47 maxlen: 48
2a06:a005:5e2::/48 maxlen: 48
2a06:a005:680::/44 maxlen: 48
2a06:a005:690::/44 maxlen: 48
2a06:a005:6a0::/44 maxlen: 48
2a06:a005:85c::/47 maxlen: 48
2a06:a005:9d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b5:8a:e1:cc:14:cf:6b:69:35:b2:45:9e:39:d7:83:ae:bd:34:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=374323A179B5852636617F3D79BF79141EBD91FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:48:a6:d8:a2:f6:16:99:93:d6:b2:74:f0:
8e:f5:0a:d3:78:9b:48:5e:6b:0c:c6:79:e2:66:af:
05:f7:99:16:c0:68:df:c9:3f:ab:39:9c:ee:a7:ca:
06:d6:82:01:f2:5e:16:50:a1:d3:2b:48:bd:b9:c8:
01:69:63:39:7a:07:4d:fe:27:06:ee:f0:fd:13:43:
50:c1:07:0b:6e:e3:64:6f:96:c4:ba:f0:56:09:78:
aa:50:9e:db:7e:17:0e:7f:9f:3c:9b:26:e9:be:33:
bf:85:d5:c8:ab:f8:17:ec:1b:45:75:71:02:3f:58:
a0:77:2d:81:6a:e8:94:3d:5a:73:fd:60:54:8a:09:
67:cf:24:8a:cc:22:d4:78:1c:6e:6b:18:55:c4:18:
c3:d8:51:1c:cc:5a:e2:15:33:62:7f:30:7e:1a:a5:
06:ed:61:55:f3:de:16:02:35:9c:d6:91:1d:f3:45:
8c:7b:70:30:21:12:bd:b6:ff:0f:53:13:29:03:d6:
e2:7c:5b:45:ee:66:9c:cc:2c:28:f7:d1:0c:11:bb:
b1:5d:64:e5:38:9a:6b:e2:c0:44:65:c7:c6:a5:81:
e7:21:e5:1a:cc:df:36:3b:5c:17:f7:33:f1:f3:67:
3d:c2:3b:f8:7d:10:62:7e:47:4b:58:c6:f7:23:85:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:23:A1:79:B5:85:26:36:61:7F:3D:79:BF:79:14:1E:BD:91:FA
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a::/47
2a06:a005:5e2::/48
2a06:a005:680::-2a06:a005:6af:ffff:ffff:ffff:ffff:ffff
2a06:a005:85c::/47
2a06:a005:9d0::/44
Signature Algorithm: sha256WithRSAEncryption
db:cb:97:39:66:b6:e7:8c:ca:2b:3a:a0:f1:53:62:38:e1:33:
be:25:1c:75:69:cb:f0:9e:f1:6f:43:56:f7:1e:51:4e:7a:a7:
01:35:03:ab:1d:89:82:a7:10:9b:07:d8:c8:24:fb:b2:99:43:
a3:31:3e:fe:87:9b:68:61:81:eb:fc:28:42:2a:78:ba:bd:cd:
a4:1d:01:6d:09:a3:20:00:52:8a:6f:af:e6:19:6e:e3:53:13:
44:96:2d:f9:10:c0:48:2d:ea:19:56:0d:bd:95:7f:2e:63:65:
7e:ec:fe:35:97:a2:fa:7c:5a:ac:1c:9f:6e:e7:7e:73:92:8a:
9e:f3:75:fa:8d:6d:4a:e4:9d:a4:3a:82:6b:1c:35:21:68:41:
20:8d:9b:83:a2:cc:75:4a:8b:8f:fb:a4:7b:43:85:5d:e5:59:
72:6a:f0:b4:db:49:fa:f2:9d:4e:4b:b3:06:24:bf:4e:59:c3:
6c:48:67:24:5a:9c:c9:63:6c:91:42:66:a5:f6:ff:95:56:2b:
94:26:57:60:52:41:cc:6b:8a:a2:91:2e:bd:13:49:3e:a1:0a:
ea:4d:2e:b2:83:89:54:ab:8b:02:af:d9:5a:fd:e0:1a:4e:11:
89:77:b2:19:e0:d1:0b:32:53:f6:17:b5:ac:b4:eb:67:ea:c4:
0b:e8:9e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:08 2025 by rpki-client