Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206131.roa
File: AS206131.roa (raw, json)
Hash identifier: y8Z7Ybq3lMUZwUUM2F93WA3Km7dN4LTWSozfCGzXR8I=
Subject key identifier: 41:42:32:5A:90:B3:0A:B5:A3:E4:03:08:E4:2E:36:72:D1:44:72:90
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 499101720A7B42D4D2C86FF4FCEF4BF827744DFF
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206131.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 206131
IP address blocks: 2a06:a005:1082::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:91:01:72:0a:7b:42:d4:d2:c8:6f:f4:fc:ef:4b:f8:27:74:4d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=4142325A90B30AB5A3E40308E42E3672D1447290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:80:ad:74:64:22:ce:fc:9e:ef:74:a0:65:
7d:76:ea:f3:a0:1c:54:d6:e4:54:ff:1c:d2:1b:27:
89:11:bc:65:10:7c:93:36:16:13:d7:e9:fc:2c:be:
dd:43:b2:a5:a9:e3:c7:77:5a:46:f7:ba:56:60:11:
d8:5c:a7:3d:12:46:f5:d5:08:ac:6e:ec:d5:67:69:
6d:36:09:b3:57:62:f7:34:ff:e0:7b:ac:92:2c:19:
b1:30:b9:a0:a0:a5:40:21:90:7e:5c:de:a2:3f:46:
b9:fe:43:1d:21:c5:39:fa:92:6e:44:00:3d:f6:4d:
bf:4c:02:d8:b5:43:80:4f:34:f5:05:37:ef:e6:10:
55:93:55:c0:92:c5:38:f6:f4:19:55:95:2e:af:fe:
9b:5b:ff:a6:66:54:ca:4d:26:c6:92:17:66:cc:a3:
25:dc:cf:80:39:f3:b1:ab:87:f9:05:37:43:61:fc:
40:b4:c0:f3:5d:b4:04:1d:bc:56:75:39:6f:b8:76:
b1:e5:bb:49:47:b1:4f:a4:27:bd:9a:a6:f5:5e:e0:
9d:fa:a8:27:2e:57:be:43:d7:c4:93:4d:1b:e3:f7:
81:b3:03:a4:15:9b:e4:82:fe:53:52:e1:da:19:ca:
8c:48:9c:36:ce:7c:83:50:78:31:66:26:6f:9b:e5:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:32:5A:90:B3:0A:B5:A3:E4:03:08:E4:2E:36:72:D1:44:72:90
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1082::/48
Signature Algorithm: sha256WithRSAEncryption
9a:7a:0a:7b:5a:97:d6:a6:5f:61:fd:8c:c5:86:f1:d3:69:8b:
9f:68:f7:34:36:72:dd:40:dc:7f:a0:b6:69:d7:13:ba:e3:e6:
c2:ce:bc:f1:39:b8:56:a6:a8:f0:8c:d7:7c:70:46:e6:36:ec:
3c:6c:53:46:2a:f7:de:63:d8:52:3c:73:b3:8e:e4:c3:ab:b2:
e1:b3:db:6a:14:59:6c:fd:22:7d:c6:f6:f3:3a:25:09:89:d0:
56:08:b1:75:8d:ed:1a:b2:87:f8:6c:c5:a5:70:40:b5:99:17:
32:40:01:39:1e:cb:0e:2d:e3:a6:fb:75:4f:67:da:6c:39:17:
95:66:dc:8b:17:2c:73:d2:ae:05:13:c2:1d:6f:e5:ee:93:c0:
19:d2:d4:f7:91:5d:33:bc:f7:ff:60:6b:d4:82:f2:8a:0a:81:
aa:45:4d:08:99:a7:51:31:2b:2a:30:25:a2:38:fc:ef:a7:4a:
6e:f4:4a:ee:ad:04:0e:cd:42:ac:d5:fc:1e:4d:81:03:8f:67:
b1:85:db:20:42:6f:e3:96:02:67:80:32:be:8b:90:9f:4d:56:
32:1e:df:73:07:e9:6a:92:d9:8b:c8:a3:21:53:83:a1:3b:fb:
17:9c:bb:19:83:33:9f:13:f1:96:b0:ff:e4:92:10:a5:1a:6f:
d8:39:10:18
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUSZEBcgp7QtTSyG/0/O9L+Cd0Tf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDNaFw0yMzEyMjAxNjU2NDNaMDMxMTAvBgNV
BAMTKDQxNDIzMjVBOTBCMzBBQjVBM0U0MDMwOEU0MkUzNjcyRDE0NDcyOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBoCtdGQizvye73SgZX126vOg
HFTW5FT/HNIbJ4kRvGUQfJM2FhPX6fwsvt1DsqWp48d3Wkb3ulZgEdhcpz0SRvXV
CKxu7NVnaW02CbNXYvc0/+B7rJIsGbEwuaCgpUAhkH5c3qI/Rrn+Qx0hxTn6km5E
AD32Tb9MAti1Q4BPNPUFN+/mEFWTVcCSxTj29BlVlS6v/ptb/6ZmVMpNJsaSF2bM
oyXcz4A587Grh/kFN0Nh/EC0wPNdtAQdvFZ1OW+4drHlu0lHsU+kJ72apvVe4J36
qCcuV75D18STTRvj94GzA6QVm+SC/lNS4doZyoxInDbOfINQeDFmJm+b5TpbAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUQUIyWpCzCrWj5AMI5C42ctFEcpAwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA2
MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBRCCMA0GCSqGSIb3DQEBCwUAA4IBAQCaegp7WpfW
pl9h/YzFhvHTaYufaPc0NnLdQNx/oLZp1xO64+bCzrzxObhWpqjwjNd8cEbmNuw8
bFNGKvfeY9hSPHOzjuTDq7Lhs9tqFFls/SJ9xvbzOiUJidBWCLF1je0asof4bMWl
cEC1mRcyQAE5HssOLeOm+3VPZ9psOReVZtyLFyxz0q4FE8Idb+Xuk8AZ0tT3kV0z
vPf/YGvUgvKKCoGqRU0ImadRMSsqMCWiOPzvp0pu9ErurQQOzUKs1fweTYEDj2ex
hdsgQm/jlgJngDK+i5CfTVYyHt9zB+lqktmLyKMhU4OhO/sXnLsZgzOfE/GWsP/k
khClGm/YORAY
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:31 2025 by rpki-client