Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206633.roa
File: AS206633.roa (raw, json)
Hash identifier: fqVP2+Qwm9ukOjkWu9SWiBGdfCuEtiBibSYnLeQdVVY=
Subject key identifier: 3D:BA:BB:F8:CE:21:8D:06:C5:A0:78:46:59:2A:7A:58:48:A8:49:78
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 30CC26D5D62C1584A6B94B1AFE5F1340004E9DEE
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206633.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 206633
IP address blocks: 2a06:a005:150b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:cc:26:d5:d6:2c:15:84:a6:b9:4b:1a:fe:5f:13:40:00:4e:9d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=3DBABBF8CE218D06C5A07846592A7A5848A84978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:ac:8f:83:54:e1:97:1d:e4:b9:9c:43:b8:
df:b4:8e:f4:0e:63:62:c8:c1:fa:52:2b:ba:53:41:
c7:b1:96:86:98:66:de:35:be:b9:b5:67:72:1b:1c:
02:c0:59:67:3c:1a:f8:56:33:ad:d0:02:c9:a3:58:
d1:1e:a4:b5:12:30:91:ae:fc:23:87:e8:80:eb:86:
92:ff:1a:35:e3:10:71:b7:e4:59:52:62:30:fd:6b:
7f:7f:17:43:c2:74:14:ee:e9:b5:4e:79:60:1e:ae:
f9:b7:20:d0:09:18:ca:25:de:de:88:b8:53:5e:ce:
3b:55:7b:be:5f:fb:38:4a:d8:c8:0b:25:03:bb:e1:
f3:3e:3a:99:24:04:9d:48:06:ce:4d:a9:41:c5:21:
9f:7c:bb:0d:6e:5f:19:00:00:ae:37:b0:ed:d9:47:
25:a4:ea:87:8c:b4:50:d5:8a:bf:4d:db:23:80:7c:
f7:56:31:93:ff:14:5e:a7:82:2a:d3:63:d2:33:7f:
14:6a:58:e3:a9:b9:b4:24:b8:05:1a:fe:fc:e4:e8:
42:ee:48:f7:fa:cd:2f:2a:dd:76:8f:07:a2:a6:18:
17:ab:f3:57:11:2f:62:4d:2c:71:77:49:5d:5e:0d:
f4:f7:fd:46:37:de:c9:e6:9a:7c:9a:5d:57:4b:b5:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:BB:F8:CE:21:8D:06:C5:A0:78:46:59:2A:7A:58:48:A8:49:78
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150b::/48
Signature Algorithm: sha256WithRSAEncryption
b6:61:6e:27:8b:2f:5f:ab:3d:53:41:4d:f9:e3:ec:bb:bb:9d:
3d:8f:ad:4b:dc:42:ef:55:f0:27:a4:d8:38:01:e3:7b:82:a9:
83:3b:77:aa:ba:14:5f:54:c6:f0:eb:52:7c:85:89:aa:40:20:
e0:b5:be:28:f2:3b:e9:a0:b4:72:08:2e:08:ea:7e:72:2b:5b:
69:1d:fc:2f:9e:fe:92:7a:04:d2:0c:f3:ef:f1:1e:65:a2:dc:
63:b8:45:62:ca:bb:78:4a:9b:ff:5b:52:7f:26:c9:ff:d7:7a:
7f:76:41:1b:3a:0a:a7:e8:bb:1b:0e:e9:28:44:5f:7d:d5:0c:
39:ab:a3:27:21:6d:3c:56:b2:ae:7b:14:34:a6:3e:73:64:66:
09:e9:9b:ef:fa:5b:c4:ce:5c:7b:c7:8f:99:36:f3:c1:45:69:
55:03:c2:48:ad:c1:7a:97:5a:26:bc:de:8c:a5:fe:3f:27:89:
47:73:fd:11:06:57:09:c6:fc:f6:38:31:4b:da:46:f1:53:78:
c3:48:e8:8f:c4:49:7d:34:02:ab:fc:7c:2e:b1:5f:3c:3a:57:
6e:39:5b:9a:e3:df:b6:8a:a8:87:bd:cf:de:34:97:42:5c:17:
49:e3:81:9c:9f:78:c6:47:be:1e:97:a3:25:ba:bf:70:66:bc:
85:58:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:36 2025 by rpki-client