Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205848.roa
File: AS205848.roa (raw, json)
Hash identifier: aKsCxYKyvvF+zUEbXKiRV5N/zB66If3bwVla0uOROY4=
Subject key identifier: 02:A1:A9:85:DB:A9:84:5B:7E:23:A0:DC:22:10:E1:0A:9D:5D:87:DD
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 210D71B473CC91D11D869BE48302F2058A06F87C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205848.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 205848
IP address blocks: 2a06:a005:cf0::/44 maxlen: 48
2a06:a005:1271::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0d:71:b4:73:cc:91:d1:1d:86:9b:e4:83:02:f2:05:8a:06:f8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=02A1A985DBA9845B7E23A0DC2210E10A9D5D87DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:b4:e6:24:8a:c2:79:cd:af:cc:c7:d8:8a:
01:16:d4:3c:d6:da:83:30:b2:41:8d:c6:60:39:34:
03:78:4c:e8:06:aa:56:39:24:2b:3f:52:8b:81:e1:
45:e6:61:a4:b1:1d:fb:4d:4e:7b:d4:32:b5:f6:26:
6c:79:32:0b:3f:68:f6:fe:ba:ef:42:a5:8d:63:64:
a6:e7:f9:2e:fb:3c:16:09:11:67:18:7c:15:0c:be:
94:82:cd:79:9c:18:eb:a0:5c:f6:62:52:d4:9c:4b:
d8:5d:4e:6b:83:98:05:13:a2:41:3b:ff:af:b6:b5:
6d:f9:89:ae:5c:d0:67:b1:4f:c0:2b:f6:74:83:89:
f3:b4:e4:5c:92:2c:b7:ec:e6:d3:8b:ed:e9:64:96:
74:19:75:8a:50:52:f3:f4:db:bd:46:f4:b9:90:77:
53:64:1b:54:90:c0:d7:76:84:4f:b5:50:cf:af:53:
fc:98:71:cd:4a:14:91:08:8f:9b:ac:3c:e8:1a:a1:
6e:f1:d8:01:92:7a:12:67:87:22:19:03:9e:68:5e:
2c:4d:ea:17:fc:8d:a1:7f:c8:d1:d1:24:6f:4e:45:
ec:ab:3a:49:65:a2:54:9c:04:fb:99:c0:c2:da:e5:
f1:c6:6c:0c:f7:c3:24:56:a0:bc:bc:47:2a:f2:5f:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A1:A9:85:DB:A9:84:5B:7E:23:A0:DC:22:10:E1:0A:9D:5D:87:DD
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:cf0::/44
2a06:a005:1271::/48
Signature Algorithm: sha256WithRSAEncryption
a7:2b:71:21:62:7b:01:2c:9c:2c:f4:02:e7:cd:64:d7:f1:66:
9e:3f:ee:65:25:23:37:7c:b4:5b:96:2d:c1:90:c2:51:6f:27:
d8:54:84:95:f5:ea:37:75:86:45:76:ea:4f:c0:ec:26:ba:57:
fd:f8:67:cb:a5:f9:e4:de:14:1d:32:ec:37:87:49:a7:a7:b7:
d1:5b:b0:97:ab:cc:9d:d2:d0:da:24:21:3b:f1:38:4c:7c:c0:
4b:c7:ae:38:5a:a3:ca:55:e1:50:dd:d3:f4:a0:fd:88:ac:9f:
0c:2e:54:0a:00:18:70:be:80:0c:e8:38:22:dc:d0:8a:3d:17:
eb:4b:82:40:a2:17:22:1e:ef:c3:9e:fb:85:93:45:a4:61:dc:
12:3e:9b:e4:43:6a:1b:8f:c5:2a:68:eb:89:c9:4f:2d:7d:20:
33:59:f2:f1:f4:8e:0c:21:74:d1:03:63:ed:cd:3c:8d:a0:59:
2f:dd:6c:ec:06:9a:39:c6:22:00:26:f7:a5:c3:d6:98:27:a1:
ef:99:0d:52:47:6b:62:3c:39:a3:76:8a:6a:d2:f1:f7:ca:93:
20:1f:d5:d0:df:8e:75:2f:8e:ef:e1:0a:c0:51:de:b2:ee:8b:
78:32:1a:73:99:0a:93:6c:24:1d:2a:d1:16:08:2e:9f:b3:de:
7f:92:12:19
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUIQ1xtHPMkdEdhpvkgwLyBYoG+HwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDdaFw0yMzEyMjAxNjU2NDdaMDMxMTAvBgNV
BAMTKDAyQTFBOTg1REJBOTg0NUI3RTIzQTBEQzIyMTBFMTBBOUQ1RDg3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqrTmJIrCec2vzMfYigEW1DzW
2oMwskGNxmA5NAN4TOgGqlY5JCs/UouB4UXmYaSxHftNTnvUMrX2Jmx5Mgs/aPb+
uu9CpY1jZKbn+S77PBYJEWcYfBUMvpSCzXmcGOugXPZiUtScS9hdTmuDmAUTokE7
/6+2tW35ia5c0GexT8Ar9nSDifO05FySLLfs5tOL7elklnQZdYpQUvP0271G9LmQ
d1NkG1SQwNd2hE+1UM+vU/yYcc1KFJEIj5usPOgaoW7x2AGSehJnhyIZA55oXixN
6hf8jaF/yNHRJG9OReyrOkllolScBPuZwMLa5fHGbAz3wyRWoLy8RyryX43bAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUAqGphduphFt+I6DcIhDhCp1dh90wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA1
ODQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcEKgagBQzwAwcAKgagBRJxMA0GCSqGSIb3DQEBCwUAA4IB
AQCnK3EhYnsBLJws9ALnzWTX8WaeP+5lJSM3fLRbli3BkMJRbyfYVISV9eo3dYZF
dupPwOwmulf9+GfLpfnk3hQdMuw3h0mnp7fRW7CXq8yd0tDaJCE78ThMfMBLx644
WqPKVeFQ3dP0oP2IrJ8MLlQKABhwvoAM6Dgi3NCKPRfrS4JAohciHu/DnvuFk0Wk
YdwSPpvkQ2obj8UqaOuJyU8tfSAzWfLx9I4MIXTRA2PtzTyNoFkv3WzsBpo5xiIA
Jvelw9aYJ6HvmQ1SR2tiPDmjdopq0vH3ypMgH9XQ3451L47v4QrAUd6y7ot4Mhpz
mQqTbCQdKtEWCC6fs95/khIZ
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:07 2025 by rpki-client