Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206023.roa
File: AS206023.roa (raw, json)
Hash identifier: yVKxQhwUDrj5jf14vEB0jvT3PDHyFDeluXrizk/3JIs=
Subject key identifier: 22:29:24:F4:87:08:44:90:1C:EC:3C:80:C1:CD:1D:2F:45:CC:A2:79
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 237F84A4A91020B9EB3A714F7EE0965F3D13F1EA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206023.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 206023
IP address blocks: 2a06:a005:5e6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7f:84:a4:a9:10:20:b9:eb:3a:71:4f:7e:e0:96:5f:3d:13:f1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=222924F4870844901CEC3C80C1CD1D2F45CCA279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:5d:97:e6:7b:e5:ae:aa:95:59:50:4c:7b:
08:b4:c1:fb:39:dd:0d:2e:a8:d6:95:34:63:61:f3:
95:fa:91:77:17:95:fa:43:31:9b:a4:4e:74:16:2a:
0f:a2:aa:78:e1:d3:54:89:a2:d1:bb:1f:25:c3:54:
af:56:ba:68:ea:6a:23:cb:d2:e2:8b:c4:53:e9:7f:
b5:04:07:b0:5b:8d:ec:71:3e:14:6d:66:a0:ef:61:
7a:3b:f6:0a:23:8f:e4:ef:35:cd:c4:a1:81:78:7d:
fa:58:10:b6:d8:ba:66:3f:2a:f6:10:63:46:7b:e3:
88:6e:4e:2e:aa:54:51:d8:0c:c3:ad:d8:c2:8c:ac:
e2:37:bb:ed:e8:ee:e0:8f:bd:71:3c:eb:7e:03:ef:
f7:cd:e6:45:8f:19:11:d6:db:17:c0:8b:16:3c:db:
f9:d4:6b:7e:e6:2d:cd:69:75:90:27:0e:ad:27:23:
59:02:f8:9b:f9:e1:f3:99:f1:f6:cb:8c:4e:ad:c5:
84:ee:3a:c9:75:3d:7f:6f:db:5b:13:9a:45:1c:86:
1f:85:44:89:fb:4c:b0:b2:89:b5:9d:1a:35:d6:7f:
dd:3e:c9:fe:4a:c3:a6:65:c7:c6:77:45:69:35:35:
d5:ad:fb:71:35:89:c6:29:45:05:c4:2e:34:10:c9:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:24:F4:87:08:44:90:1C:EC:3C:80:C1:CD:1D:2F:45:CC:A2:79
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e6::/48
Signature Algorithm: sha256WithRSAEncryption
35:79:77:b1:c5:b2:72:c7:a9:ac:77:de:d6:35:54:58:af:5b:
52:02:c5:41:61:5b:54:bf:f8:e0:01:cb:5e:18:a6:3c:2e:31:
f3:4a:5b:6c:b3:3d:20:f9:1a:8b:f1:09:c3:70:02:6b:fb:4d:
ac:8a:42:0f:f3:45:47:2d:d9:ee:ae:e9:29:4b:9e:36:f6:7e:
ce:e9:c0:3b:6d:68:c2:cb:78:1d:1b:4e:db:14:a9:87:9b:2f:
8b:2a:e0:d9:e3:d3:2f:d7:a5:87:0e:21:cb:fe:cc:a8:b7:56:
7f:ec:d5:0c:74:7e:7b:b6:fd:3c:f1:e0:05:6b:f7:19:93:a7:
a0:9a:5a:48:c5:a5:6a:d9:d9:85:a0:88:fa:a0:21:23:56:b1:
19:7d:64:97:ec:50:c5:a7:ef:af:3b:02:e1:f2:76:6b:b4:48:
3c:3e:9e:6a:e6:1d:1d:97:42:a4:94:7a:76:3f:64:2f:52:92:
8c:e8:a9:11:ec:bd:69:33:e3:8a:43:ce:d2:09:54:42:f0:5a:
8e:21:13:38:6f:37:70:c5:a0:36:21:33:27:74:42:01:aa:fd:
54:37:8c:b6:20:62:8e:09:d3:4b:b1:17:b4:65:6b:01:e9:31:
1a:3a:09:59:7c:c1:f3:c8:6d:3f:4b:f8:fb:b3:e4:b5:b7:51:
58:dc:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:06 2025 by rpki-client