Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206592.roa
File: AS206592.roa (raw, json)
Hash identifier: 00069PfKiFrEWC+MvH2tdFBYf9OmQQN3sHgT+wIRJ14=
Subject key identifier: 2D:95:F7:FD:D1:4D:0C:B4:7A:DA:C8:EA:51:07:A2:BC:93:CF:30:13
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1DB01CFC58F08343A55502CF82FB0A6C0FA1A39D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206592.roa
Signing time: Fri 30 Dec 2022 06:19:14 +0000
ROA not before: Fri 30 Dec 2022 06:14:14 +0000
ROA not after: Fri 29 Dec 2023 06:19:14 +0000
asID: 206592
IP address blocks: 2a06:a005:26a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b0:1c:fc:58:f0:83:43:a5:55:02:cf:82:fb:0a:6c:0f:a1:a3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 30 06:14:14 2022 GMT
Not After : Dec 29 06:19:14 2023 GMT
Subject: CN=2D95F7FDD14D0CB47ADAC8EA5107A2BC93CF3013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:5e:1b:6d:93:a3:13:14:fc:4f:87:7c:b1:
63:31:b5:4b:ea:05:aa:98:3c:4b:a9:aa:67:49:50:
86:0a:f8:a0:b6:5f:50:4d:65:e0:20:4b:7b:62:24:
1d:0c:e3:41:b3:e3:5f:32:e0:1d:90:d2:70:5d:84:
13:79:18:ce:e0:8f:f4:85:47:d4:9a:09:09:d0:14:
be:54:01:bc:ac:9e:4b:aa:4f:6d:0d:b2:2f:f8:1c:
7c:35:63:53:aa:17:23:ab:70:65:36:99:14:0a:d7:
b7:94:92:f7:5b:ad:b1:30:a8:4a:f1:72:75:0f:9b:
92:a8:be:a1:83:98:cb:01:69:b4:f8:8a:a0:2c:90:
75:21:4b:fc:b6:43:51:1a:79:cd:44:d2:49:6a:d4:
9d:d3:2e:39:75:c6:64:6d:b6:39:40:8a:fb:25:eb:
5a:87:84:84:95:b7:83:d0:46:27:a7:12:0f:72:52:
6c:7e:24:33:29:e8:67:c7:ca:10:8c:fc:13:78:9f:
e1:33:a0:02:40:79:18:da:07:6e:61:90:96:16:0b:
22:21:0e:0f:c4:0c:3f:1a:a7:eb:17:a5:4c:2d:88:
14:be:91:05:e0:8f:97:6f:93:4b:ac:c1:64:6d:33:
f7:0f:8b:a1:9d:e7:3a:f9:2d:2e:f6:95:e4:e5:ed:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:95:F7:FD:D1:4D:0C:B4:7A:DA:C8:EA:51:07:A2:BC:93:CF:30:13
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26a0::/44
Signature Algorithm: sha256WithRSAEncryption
3c:8d:b9:bc:70:6b:39:71:8b:2e:50:ea:54:8e:cc:94:93:f8:
b5:52:73:c9:aa:d4:85:ea:e2:f3:7b:82:67:c7:50:8e:4b:da:
87:fa:76:51:2b:98:ae:9c:16:df:01:4b:4b:51:cf:c6:7f:80:
ff:60:de:58:fb:fa:39:05:a5:fc:5e:10:35:6d:0d:9d:c0:59:
eb:9e:fc:ca:8e:c0:e9:ed:8d:9c:2d:00:03:7a:8c:96:f6:d4:
a3:30:b3:0b:3e:aa:83:bf:12:33:b3:f9:4c:08:2f:57:cd:4d:
b4:35:16:e5:9b:02:f7:ee:9b:78:88:05:ad:26:22:49:4a:b7:
1e:e1:71:1f:ac:c2:89:2d:e3:3b:8a:64:6f:c8:7d:eb:58:9c:
df:2d:c8:82:e2:dc:38:a5:52:c0:2e:d2:3e:07:11:6a:a6:1b:
67:76:9c:03:3f:57:06:e4:77:65:45:85:2e:1f:ec:b5:f7:da:
3a:a4:54:51:04:e7:7f:7c:1f:09:3e:aa:1b:0c:4c:5f:f0:c6:
46:84:06:26:2a:2d:ba:de:e1:07:f0:b1:be:17:b8:7c:54:7e:
79:b2:d0:19:12:f4:be:a1:7f:32:d4:15:ea:c0:fd:1d:18:2e:
f5:1b:c2:6a:d6:24:31:2a:8d:6c:48:39:d6:e2:f4:ae:e3:81:
fa:dc:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:57 2025 by rpki-client