Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205531.roa
File: AS205531.roa (raw, json)
Hash identifier: A11vuI0dO/57hJUYjuIGz4hlP8IcwT+WYKpEjYqG+Y0=
Subject key identifier: 98:7C:35:6B:DA:D4:70:4C:5D:74:9F:EB:8E:19:FF:84:E8:27:C0:D3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 30E037ECE0ED7D676E5FB420595C6280D4FFAB39
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205531.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 205531
IP address blocks: 2a06:a005:a0b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e0:37:ec:e0:ed:7d:67:6e:5f:b4:20:59:5c:62:80:d4:ff:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=987C356BDAD4704C5D749FEB8E19FF84E827C0D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:33:d8:85:08:1d:25:d5:eb:86:25:5a:c4:
1e:11:f1:49:37:72:60:ac:84:a0:87:0a:61:4f:42:
31:82:8b:72:39:16:41:b1:ce:f6:bd:32:36:16:75:
a2:6d:a9:9d:4b:24:ca:ea:7e:15:4d:a7:94:70:36:
4a:00:94:6f:77:49:c8:17:bb:24:f0:63:c8:12:8b:
93:1b:78:49:01:0f:e4:20:45:84:a5:d0:86:00:39:
62:db:39:2a:c5:78:b7:2c:f7:c5:55:d0:7c:23:30:
d2:13:99:53:53:d9:7f:eb:ee:dc:82:d6:a1:1c:4d:
3c:13:15:03:1b:2c:7e:2e:f8:5a:af:d7:b5:92:21:
04:54:d1:30:fe:f4:08:c1:93:0d:2c:97:5e:d4:9e:
38:29:81:42:6b:e6:db:c8:a3:c6:7d:14:15:75:7a:
8d:e4:92:95:73:6f:74:d6:8e:9a:7b:c8:b1:f4:7f:
9c:81:04:26:3b:43:d1:d0:4d:38:69:b7:6f:a7:7d:
84:f2:71:99:96:d1:cf:9b:2c:0d:0b:f4:4a:fd:d2:
eb:a4:3d:25:a5:eb:28:df:ae:88:6b:4d:ae:48:f9:
7f:8e:ca:7e:b8:83:fc:72:78:d1:6b:e2:8d:89:29:
9c:d0:35:0a:da:b7:62:bd:d8:ed:d3:ed:d7:65:1e:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:35:6B:DA:D4:70:4C:5D:74:9F:EB:8E:19:FF:84:E8:27:C0:D3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0b::/48
Signature Algorithm: sha256WithRSAEncryption
2e:6f:d4:84:2e:d3:4e:fa:0e:42:58:78:95:b9:cb:b6:fd:37:
4a:32:db:4e:17:e1:65:53:44:29:cd:bd:7f:4e:a4:b2:c3:e1:
be:dd:88:e1:0c:51:39:d0:80:6c:7e:6c:a6:20:8e:3e:1d:2a:
18:4c:5a:94:ab:fc:5c:70:f4:20:d5:54:5c:d0:d1:75:0e:db:
38:90:29:c9:47:1e:de:be:03:30:df:4e:31:f9:be:03:8e:e6:
0c:8e:d6:5e:66:ea:1b:a0:6b:92:af:08:c5:0f:1a:50:ec:e9:
af:cc:ee:e4:9e:be:e9:f0:07:ec:95:fb:0b:29:31:5b:c2:9a:
c2:ef:39:7f:9e:be:85:69:de:9e:5d:48:6f:e4:79:34:c0:f6:
5d:ce:fc:6f:a7:90:8c:dd:2c:82:c3:57:bd:2d:af:3b:08:f8:
bd:11:af:34:9f:fe:6e:11:0a:66:c3:31:f2:fc:91:4b:5d:5e:
0c:f8:ef:b6:95:a0:10:4f:d9:ee:a1:98:02:8e:7c:ac:a9:63:
af:90:33:f2:0c:d3:3b:44:35:e4:82:46:a7:96:ec:3d:e4:88:
0e:14:62:82:1b:0b:d8:ee:92:32:d9:36:4e:64:91:58:4e:52:
95:91:29:3d:c1:61:89:6e:6c:36:ae:d0:dc:c5:2b:43:85:fb:
93:6a:d4:0c
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUMOA37ODtfWduX7QgWVxigNT/qzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTJaFw0yMzEyMjAxNjU2NTJaMDMxMTAvBgNV
BAMTKDk4N0MzNTZCREFENDcwNEM1RDc0OUZFQjhFMTlGRjg0RTgyN0MwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55jPYhQgdJdXrhiVaxB4R8Uk3
cmCshKCHCmFPQjGCi3I5FkGxzva9MjYWdaJtqZ1LJMrqfhVNp5RwNkoAlG93ScgX
uyTwY8gSi5MbeEkBD+QgRYSl0IYAOWLbOSrFeLcs98VV0HwjMNITmVNT2X/r7tyC
1qEcTTwTFQMbLH4u+Fqv17WSIQRU0TD+9AjBkw0sl17UnjgpgUJr5tvIo8Z9FBV1
eo3kkpVzb3TWjpp7yLH0f5yBBCY7Q9HQTThpt2+nfYTycZmW0c+bLA0L9Er90uuk
PSWl6yjfrohrTa5I+X+Oyn64g/xyeNFr4o2JKZzQNQrat2K92O3T7ddlHnWVAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUmHw1a9rUcExddJ/rjhn/hOgnwNMwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA1
NTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQoLMA0GCSqGSIb3DQEBCwUAA4IBAQAub9SELtNO
+g5CWHiVucu2/TdKMttOF+FlU0Qpzb1/TqSyw+G+3YjhDFE50IBsfmymII4+HSoY
TFqUq/xccPQg1VRc0NF1Dts4kCnJRx7evgMw304x+b4DjuYMjtZeZuoboGuSrwjF
DxpQ7OmvzO7knr7p8AfslfsLKTFbwprC7zl/nr6Fad6eXUhv5Hk0wPZdzvxvp5CM
3SyCw1e9La87CPi9Ea80n/5uEQpmwzHy/JFLXV4M+O+2laAQT9nuoZgCjnysqWOv
kDPyDNM7RDXkgkanluw95IgOFGKCGwvY7pIy2TZOZJFYTlKVkSk9wWGJbmw2rtDc
xStDhfuTatQM
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:02 2025 by rpki-client