Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205794.roa
File: AS205794.roa (raw, json)
Hash identifier: lCDrVzNi+NuCbDTJHAze7qnRDuqs4Y0S8910pxNS1eE=
Subject key identifier: E1:FC:43:95:49:70:8E:3E:FB:4F:F6:BF:52:E9:74:C7:AD:F3:12:A0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 76260BF15A982B9F0B409B4FC741ED3C520381A6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205794.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 205794
IP address blocks: 2a06:a005:c50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:26:0b:f1:5a:98:2b:9f:0b:40:9b:4f:c7:41:ed:3c:52:03:81:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=E1FC439549708E3EFB4FF6BF52E974C7ADF312A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:2b:79:69:5d:50:8b:ae:19:a5:c4:a4:9b:
53:99:df:b7:86:29:6a:fe:84:18:ee:e4:c3:62:7a:
79:41:05:89:b9:1b:e3:07:ba:0e:f7:b0:a6:56:88:
de:07:44:1c:41:90:02:7f:a2:1a:85:a5:cb:68:89:
fe:bd:1f:58:7a:e0:82:47:fd:6d:7e:68:be:67:13:
d7:88:76:c2:33:ae:ca:e4:ad:97:cc:2d:93:af:38:
9c:a7:06:fc:b7:76:38:78:f2:34:a1:69:7f:d6:64:
bd:97:46:36:4d:fb:f0:f4:e2:cf:8a:b6:27:ee:45:
b9:d6:9e:70:b3:e6:30:f6:c7:d7:db:98:24:7d:ee:
8b:7c:33:a9:0d:6f:4b:eb:a9:79:2a:97:ed:5a:99:
cd:3d:3c:93:70:19:9f:68:ac:15:5a:6d:12:1c:47:
c7:72:59:26:58:30:18:b8:d1:9e:cd:28:a7:8c:6f:
71:30:95:10:a0:c8:55:32:5b:68:7e:c7:d3:19:1a:
3e:ee:51:27:ad:c8:d8:36:29:a5:81:2e:b2:c5:7e:
a1:88:a8:59:5e:55:a9:4d:fd:bc:29:03:02:8e:c7:
88:4d:d5:73:66:c4:58:2f:b1:a8:3f:65:20:da:21:
56:1d:86:ef:0b:8c:87:34:45:cd:f1:1a:c0:ed:c3:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:43:95:49:70:8E:3E:FB:4F:F6:BF:52:E9:74:C7:AD:F3:12:A0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c50::/44
Signature Algorithm: sha256WithRSAEncryption
2d:1c:ed:5f:0f:d4:fc:f2:61:47:58:7b:07:76:bb:27:55:ee:
1c:e0:6f:9e:79:06:10:47:fb:e3:50:06:5c:aa:83:46:6a:5e:
5e:41:b1:8b:50:2a:0c:e7:9c:89:95:b9:49:35:98:fb:11:ea:
d7:58:d5:76:27:dd:24:7a:c1:b7:b3:c3:86:e0:83:88:80:96:
5b:24:d6:cb:ac:9f:47:1d:55:82:0a:71:0d:a3:b8:2a:e5:08:
3d:46:7c:8b:4d:6a:13:0c:78:41:15:74:e5:24:f8:fe:0d:c0:
91:d9:cd:48:6a:5c:97:37:35:1e:cd:4d:ae:aa:39:a5:cb:56:
7b:47:8d:75:ce:c8:6d:d8:44:ad:53:24:a4:72:47:76:92:cb:
bf:de:90:cc:d4:e5:45:8e:5a:7b:64:90:0b:e0:c3:72:a6:ff:
2d:92:bc:e5:c8:1f:70:e2:f1:3b:4c:c4:33:a5:92:3e:58:a5:
c9:16:ab:2c:41:6e:81:1e:50:21:07:d5:ba:a2:a3:53:b2:5a:
4e:cf:8e:84:b5:b6:54:27:b8:91:8e:0e:33:86:ad:02:97:0d:
94:a9:d2:fe:de:0b:97:12:1c:e7:35:51:61:4f:e9:a5:ab:7c:
06:00:a1:39:8b:4c:fe:5e:01:11:e0:db:3c:fb:80:0d:9d:30:
1d:ce:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:21 2025 by rpki-client