Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206016.roa
File: AS206016.roa (raw, json)
Hash identifier: t3L0yGnGfu7YCWEYuSxmIFsC0epfgDHSp7eDUs/0RJc=
Subject key identifier: DC:8A:12:08:F2:9F:BA:21:10:BD:A1:AB:77:6A:9B:83:5B:7B:BC:D8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7C870FB4E2900C57580287F914ACF1649EC03B8F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206016.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 206016
IP address blocks: 2a06:a005:990::/44 maxlen: 48
2a06:a005:db0::/44 maxlen: 48
2a06:a005:1380::/44 maxlen: 48
2a06:a005:1390::/44 maxlen: 48
2a06:a005:27d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:87:0f:b4:e2:90:0c:57:58:02:87:f9:14:ac:f1:64:9e:c0:3b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=DC8A1208F29FBA2110BDA1AB776A9B835B7BBCD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:e1:b2:72:78:de:6d:8f:36:c3:e1:48:cf:
fa:d6:f2:20:66:9c:75:ae:ac:05:04:8e:c0:bd:3d:
71:ff:36:bf:b7:c0:d4:e7:c0:19:7f:e0:9e:9d:68:
44:8f:cf:33:1d:f1:0e:47:ab:89:52:8d:48:82:7e:
ff:94:96:5e:10:77:fb:4d:d2:c7:93:60:1a:fc:0d:
08:59:84:55:25:58:18:6a:1e:14:dd:f7:b7:fc:c1:
54:f7:29:16:36:b9:3a:ff:e2:97:de:6b:77:58:1d:
59:ba:96:dd:33:29:46:f2:95:c0:f8:dd:1f:a7:57:
7a:5a:01:41:7c:94:e5:f2:77:84:5e:09:74:f6:ce:
2b:c5:eb:00:d0:0f:2f:0f:81:ca:5f:a6:9f:3c:94:
25:15:b2:6b:ee:37:2f:ab:2f:07:08:e7:e7:85:c7:
74:ac:9d:a7:95:0f:a1:0e:0c:cd:77:6c:45:c4:d2:
cf:3e:ba:6a:a3:1c:bf:d6:b0:54:27:02:73:9e:c4:
07:3e:66:2f:85:bd:e5:21:47:bd:9b:37:04:96:f1:
55:9f:4f:e0:a3:cb:62:0d:19:e0:a0:aa:e9:65:76:
6e:74:69:44:e3:62:79:bd:82:8e:3c:1d:99:c5:1f:
5d:24:f7:16:28:4a:6b:e7:42:fd:bb:f3:25:85:d3:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8A:12:08:F2:9F:BA:21:10:BD:A1:AB:77:6A:9B:83:5B:7B:BC:D8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:990::/44
2a06:a005:db0::/44
2a06:a005:1380::/43
2a06:a005:27d0::/44
Signature Algorithm: sha256WithRSAEncryption
46:54:e9:a0:56:05:bf:d8:d0:f8:93:df:73:68:52:64:92:d6:
be:e1:85:69:04:46:8f:d7:37:a4:c9:95:23:93:ed:71:87:42:
63:75:88:3f:da:5c:e2:34:e2:f9:22:43:ee:18:3c:5c:09:92:
8e:14:29:0a:52:75:a4:b3:0f:7a:78:7f:54:9d:81:71:6a:68:
5c:5f:f0:25:9c:fe:40:b7:fc:d1:cd:c3:83:a3:11:b3:4c:24:
d3:b7:51:48:c3:90:27:cd:70:4f:00:9d:c6:2b:b5:37:b4:a8:
60:4e:1b:7c:28:de:ca:87:0c:24:fe:d1:8d:42:ac:1e:8d:bf:
33:d2:3f:ae:ab:50:8c:ec:83:d0:a7:ec:6b:a0:28:3e:be:14:
30:d5:d5:82:66:0f:5a:a0:8b:b9:51:4c:6b:3a:ae:ae:10:ac:
15:8a:27:06:df:1b:b5:1f:b0:4d:f5:52:34:45:5e:c5:69:0f:
31:af:de:87:e9:5b:34:82:51:25:0e:3e:c2:ea:f0:f8:2d:37:
b5:78:40:ae:4b:11:1a:65:3f:7e:94:e6:ca:cd:36:de:4b:b2:
f7:b8:ff:ac:7f:60:e9:45:b9:86:1e:3f:7c:18:ed:d7:e4:b3:
0d:74:5d:78:f0:9c:9e:9b:42:7a:f6:f5:da:6f:9d:91:01:2b:
33:63:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:59 2025 by rpki-client