Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205539.roa
File: AS205539.roa (raw, json)
Hash identifier: AQJOS+jEzpCrfVjTyWtl+5cUIM7gwjLqrCpJy7yvX0g=
Subject key identifier: BC:CC:E3:8C:78:06:C1:89:34:26:D6:73:AC:A6:C6:96:BE:6C:66:44
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 650617B9A7526017BC90A79A50092A7C9071BBCE
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205539.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 205539
IP address blocks: 2a06:a005:4df::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:06:17:b9:a7:52:60:17:bc:90:a7:9a:50:09:2a:7c:90:71:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=BCCCE38C7806C1893426D673ACA6C696BE6C6644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:7b:40:f8:16:d8:6f:bb:2b:3f:ab:21:23:
fb:12:9d:7a:4c:3d:08:7c:3d:f7:b4:c3:ba:d3:0a:
e9:21:33:26:2e:db:9c:78:be:91:40:26:56:80:63:
4a:70:d8:f5:eb:e2:bb:18:f1:6a:40:74:b4:93:d3:
ba:0c:15:8d:b9:11:41:d6:7e:3b:f4:ef:a3:5a:f8:
b2:2b:51:51:2b:7b:72:57:b0:06:db:e0:13:66:82:
e6:94:cf:8e:c4:42:c6:36:f6:d5:53:f2:44:79:05:
8d:e5:2d:81:5f:55:62:c5:25:b4:5d:da:7c:83:9c:
55:b5:65:0c:6d:7c:37:6f:03:cf:55:ad:c9:86:e8:
21:da:fb:21:ba:dc:79:57:35:8a:c0:d7:f0:e8:68:
b2:fa:a8:26:96:62:65:34:62:60:08:3e:75:dd:62:
cf:3b:6e:fc:79:e9:e5:7a:c8:db:96:ef:42:31:f9:
cb:87:d4:23:87:bf:16:f9:92:bd:96:04:f4:6d:43:
0a:86:75:03:8f:66:9a:fe:86:32:73:53:b0:d4:f8:
29:74:3f:17:5c:91:0d:5a:f0:c3:28:d5:34:ff:57:
73:d8:36:49:e9:4f:4e:af:79:84:97:a1:56:52:cc:
42:ba:5c:19:b4:f2:df:6d:66:70:ea:75:a0:0a:8a:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CC:E3:8C:78:06:C1:89:34:26:D6:73:AC:A6:C6:96:BE:6C:66:44
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4df::/48
Signature Algorithm: sha256WithRSAEncryption
28:05:b6:6b:a5:37:3d:b4:b4:56:83:c5:b0:49:88:6c:03:24:
71:ab:7c:d2:65:84:0b:e5:07:b8:c1:b7:12:d6:46:6c:ce:02:
fb:4c:35:48:b5:7c:98:ab:df:11:ca:b7:d2:bf:28:cd:9b:c0:
9c:f0:ea:e8:6c:9e:c6:3e:5d:9e:db:8a:93:f8:5c:60:af:7c:
7e:60:08:c8:b5:79:91:3e:a2:54:6d:02:6c:77:74:ef:53:a4:
c8:ad:62:55:b0:86:ed:97:3e:50:f5:3f:d4:93:92:7c:5a:d6:
99:e8:e2:56:3f:f6:a7:0d:25:0f:b4:2d:b9:34:b4:6a:40:30:
df:7e:62:5d:25:fc:7e:9b:65:cd:bb:99:e3:37:ae:1e:f2:36:
48:7a:00:45:24:af:11:b5:26:60:90:8f:52:c7:43:5f:b8:92:
24:3d:71:d6:53:78:84:c8:67:40:ed:8c:90:8d:45:76:6c:ff:
44:f0:db:fb:9d:36:39:bf:da:0b:ca:bf:f5:2e:5a:15:3a:97:
ab:a3:75:24:e6:f9:5b:cb:30:62:56:9b:25:a5:fb:58:22:e5:
8d:62:3b:9b:fa:95:07:7d:d6:3c:e3:35:c6:7d:32:e0:66:6e:
71:9f:e6:d5:28:5e:a4:a0:ce:2d:77:ed:2e:d1:30:30:5a:95:
1e:ec:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:12 2025 by rpki-client