Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206290.roa
File: AS206290.roa (raw, json)
Hash identifier: Jec5QxjqOrm3gtxAkY+dEpxbFSB1RUHfW47XPsMZ4P8=
Subject key identifier: C1:72:E7:57:D2:10:EF:AA:3C:E3:82:AB:06:1B:29:9B:40:22:9F:62
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7C93283F66AB6E6E808A4CDA4D2C985967172A99
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206290.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 206290
IP address blocks: 2a06:a005:1276::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:93:28:3f:66:ab:6e:6e:80:8a:4c:da:4d:2c:98:59:67:17:2a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=C172E757D210EFAA3CE382AB061B299B40229F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:bd:2f:10:4e:6a:31:95:69:de:10:8a:1a:
ab:68:b2:67:a1:a6:27:db:d2:96:17:5a:ed:16:b4:
b7:89:a3:53:64:0a:21:0f:00:0b:8d:7d:a2:39:b8:
59:0d:4e:23:64:2d:50:9b:1d:d4:cc:2a:00:ca:68:
a8:a1:e9:6f:02:3a:26:7c:fa:d8:71:68:a2:71:a7:
8b:f4:98:77:97:48:28:71:62:a4:c4:c5:eb:c1:c9:
2f:fd:2a:14:9b:64:10:a9:5d:d0:ab:0d:71:e4:3d:
04:87:1c:2a:c7:13:a7:a3:0e:33:ca:d4:64:32:9a:
9f:86:75:5d:51:a2:c3:52:9e:e6:8a:68:af:4c:69:
e1:8f:85:fc:c8:df:e2:fa:dd:08:c5:4a:f5:9b:37:
f1:98:d9:4b:69:19:6f:a0:8d:71:ae:f6:93:52:af:
e8:dd:03:d6:8f:34:e7:62:dd:9c:f4:47:48:20:56:
fe:40:3c:6a:ce:02:6c:b9:e7:3a:9f:68:71:29:df:
d7:0c:82:43:6e:b6:ef:fe:9b:6c:86:9b:74:ed:bc:
fb:3d:d6:9d:f3:69:f1:f5:7a:49:62:66:e0:ec:ca:
92:f9:d4:a5:aa:27:4d:6f:bb:b1:74:c9:10:b6:fa:
48:0a:38:36:7c:7f:88:77:27:cc:6f:e2:b7:6c:8c:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:72:E7:57:D2:10:EF:AA:3C:E3:82:AB:06:1B:29:9B:40:22:9F:62
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206290.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1276::/47
Signature Algorithm: sha256WithRSAEncryption
03:b4:12:8a:2e:94:7a:20:5b:f7:9f:56:af:b7:18:dc:a4:89:
08:f8:7d:60:8b:08:ac:c7:21:49:ca:1d:ea:54:6b:c6:f0:a6:
15:27:9c:49:6c:b0:5f:67:d0:e0:7e:c7:89:b4:67:5b:36:da:
c2:11:0b:4d:76:57:28:1a:ae:a1:ce:16:86:27:bd:63:ba:c5:
f7:d3:c4:58:d0:8c:43:e6:b9:63:e4:79:d2:fa:7e:6b:5c:56:
69:93:bd:d6:d3:95:b0:23:b6:af:bd:bd:19:c8:2e:04:74:c7:
99:18:28:fb:6f:7b:aa:50:2f:cf:2c:9a:cd:8d:df:b9:39:ef:
65:7f:4c:9d:29:60:a5:d9:2b:99:61:df:94:a2:f5:e9:f5:27:
5b:38:06:2a:e7:3a:63:9a:94:c0:98:0b:46:0e:6e:33:f0:36:
e6:82:ef:0a:12:cc:d6:79:8c:2b:b6:30:75:29:d0:76:15:e7:
e7:b5:03:87:69:98:f2:05:c5:c5:b3:a5:74:0c:26:a4:a7:c6:
ff:f8:c8:9e:8f:85:e1:3f:59:2d:56:86:5d:e9:0b:60:10:41:
ce:7d:81:53:e4:21:98:e7:85:ab:65:6f:28:29:db:a0:32:8c:
1a:33:54:3e:ec:e9:09:e2:07:a4:bf:50:49:cd:7c:f2:8f:56:
50:f9:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:08 2025 by rpki-client