Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205965.roa
File: AS205965.roa (raw, json)
Hash identifier: OMGWMuZAuXU9wGGpef2yIpCE/THaFulcCmaFC3L8LS8=
Subject key identifier: 1A:2C:AB:23:41:A1:3D:E7:52:8A:BA:B1:E2:4D:96:A1:9A:2A:96:14
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 469F1FE742407B89CC307F3E50843717426F3B42
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205965.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 205965
IP address blocks: 2a06:a005:2240::/44 maxlen: 48
2a06:a005:23a0::/44 maxlen: 48
2a06:a005:2410::/44 maxlen: 48
2a06:a005:2420::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9f:1f:e7:42:40:7b:89:cc:30:7f:3e:50:84:37:17:42:6f:3b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=1A2CAB2341A13DE7528ABAB1E24D96A19A2A9614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:6b:46:00:0b:1b:96:de:97:f0:9e:d8:1a:
dc:f0:af:47:0a:94:fd:25:d5:ca:d6:75:2b:a7:ec:
6e:dc:c1:62:ec:d5:40:c5:89:a9:89:04:25:fe:e4:
4f:c3:1e:ce:61:ec:c6:90:8f:77:43:40:98:86:fa:
c3:a1:b6:8c:6c:ef:eb:c5:88:89:6c:7d:e2:bd:54:
ae:5d:12:90:cf:dd:3a:79:1c:09:0d:0d:01:fd:25:
95:cb:77:c5:d1:6b:96:1b:26:c4:89:6e:27:ae:ce:
37:6d:89:82:b4:97:58:6b:87:e5:4e:b2:d0:03:19:
d0:06:e0:5d:60:45:78:24:10:58:ed:d6:00:44:03:
51:d3:10:3c:9f:74:2a:ed:a8:76:f9:3d:c4:22:1b:
2d:7f:83:94:91:33:b5:44:e7:7b:b6:73:14:a5:34:
6e:49:9b:61:15:c4:bf:f0:8c:ca:6e:f7:97:39:25:
90:19:3b:6e:3b:80:d1:72:00:cb:16:48:d3:eb:59:
ac:fb:ae:0d:cf:00:65:18:5f:5d:98:dc:e9:51:da:
7c:cb:f0:3c:34:a7:3f:39:f4:84:31:cc:ff:6c:42:
6a:3d:36:8d:53:32:16:52:71:91:bf:a4:4d:84:3e:
ca:3a:b3:20:70:94:e1:1a:0c:6d:e8:32:6d:27:42:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:AB:23:41:A1:3D:E7:52:8A:BA:B1:E2:4D:96:A1:9A:2A:96:14
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2240::/44
2a06:a005:23a0::/44
2a06:a005:2410::-2a06:a005:242f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:04:66:fd:11:fd:8c:60:63:39:e6:6a:18:7c:ad:5d:b2:a2:
c7:82:93:93:67:aa:b0:65:dc:a2:43:55:82:33:91:c8:11:79:
46:88:c6:28:f8:94:37:72:c7:d2:8a:1f:b8:d2:0e:47:26:7b:
c8:11:05:93:5f:28:ba:8e:e0:02:88:1a:1e:c4:a5:90:fd:da:
d7:a2:5d:a1:9d:15:9c:fd:52:78:8f:fb:8b:91:a1:7a:24:c4:
e8:a3:3c:cf:af:52:98:01:d7:23:4b:9f:7c:12:a5:a7:de:ee:
aa:bf:3d:16:dd:a0:1a:8b:7f:99:0e:83:3e:eb:de:74:70:0d:
fc:32:bb:14:73:70:77:a2:e8:4f:95:6e:1e:c6:c0:33:1c:c8:
0f:1f:77:60:81:4c:7d:fc:7f:35:62:7e:02:45:1c:49:d9:d7:
ee:80:80:d0:35:6d:4d:01:43:63:37:d8:ce:2d:2c:a0:c8:4e:
1d:62:de:ed:1d:6d:08:c7:11:73:ac:a7:5c:20:a2:1b:f8:75:
8a:42:5b:da:46:2f:90:12:e4:90:36:67:28:2b:c5:20:09:3d:
98:d7:1e:2b:a9:9a:91:90:e1:b6:f4:1d:15:1b:91:eb:e2:03:
54:04:72:cb:a3:ba:58:12:4c:83:07:88:fc:84:3b:69:e8:cc:
52:fa:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:30 2025 by rpki-client