Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206946.roa
File: AS206946.roa (raw, json)
Hash identifier: ENbCUtpVpLooctrOVAt0pLxZM5F7wJppyoYAhU3kMGE=
Subject key identifier: DD:97:BA:71:39:06:40:1E:3B:26:DF:76:6B:77:15:BD:48:63:CB:8A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 321CCA25681201FE2AE74E8965A508019DF105C0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206946.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 206946
IP address blocks: 2a06:a005:4da::/48 maxlen: 48
2a06:a005:4db::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1c:ca:25:68:12:01:fe:2a:e7:4e:89:65:a5:08:01:9d:f1:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=DD97BA713906401E3B26DF766B7715BD4863CB8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:d6:13:c1:60:37:b8:dc:b1:26:4f:7a:2d:
1d:a5:40:d8:3d:e6:c8:bf:54:54:a5:d0:88:17:11:
8d:77:bd:a0:6a:e0:ca:03:12:18:c4:f5:b4:9d:70:
42:1e:4c:7b:29:51:cb:95:7c:77:a0:64:75:5e:f9:
e7:a1:d7:1a:18:91:b4:b3:8d:ae:59:ab:98:7d:df:
6a:c5:66:27:46:69:32:39:9c:d3:00:96:81:3e:a8:
c2:f6:3e:87:6c:95:6a:ed:8d:2c:dd:a6:9e:21:4f:
18:45:18:30:97:15:29:28:10:0d:78:10:41:0c:b6:
b8:76:5c:75:c8:a1:6a:11:27:05:37:92:e2:6a:d2:
8f:c8:4e:a7:6f:17:65:c7:72:76:04:0f:72:0b:cc:
81:8d:2e:34:a3:a9:68:df:bb:0c:28:1b:d5:71:ae:
86:47:eb:63:7a:cf:8e:d5:7e:c6:61:75:6a:cd:6d:
4f:d9:8e:98:58:a2:da:62:d6:5d:39:ce:6d:a5:44:
68:eb:6c:50:af:c2:1e:57:d1:74:5f:3a:93:32:9d:
64:7f:66:00:44:21:e9:7f:65:ba:dd:d5:d2:1b:22:
d4:75:c0:5d:c9:c1:a8:57:d3:a1:ae:f9:80:a2:29:
90:5e:b5:1f:70:f8:60:e0:68:bb:4c:9f:fb:6f:42:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:BA:71:39:06:40:1E:3B:26:DF:76:6B:77:15:BD:48:63:CB:8A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4da::/47
Signature Algorithm: sha256WithRSAEncryption
22:6a:75:e1:3b:3c:11:28:13:49:00:d2:b4:b5:25:76:68:5e:
06:92:09:d7:6e:13:20:18:d4:cc:f8:63:9f:2a:f8:34:9f:2f:
6c:86:36:b9:09:84:0b:a2:1c:e2:fd:1c:ea:0e:c8:36:f8:02:
06:c6:0b:24:05:20:cc:71:1a:77:29:ec:fd:5c:7b:68:46:25:
b2:27:eb:55:f8:86:54:da:ed:b5:e7:d6:8d:b8:fb:56:b1:45:
a7:54:73:d2:d3:75:ca:f8:ce:b1:8f:c2:6f:34:ff:b4:78:e1:
b5:3a:cf:bc:b7:b6:68:49:75:b6:71:26:ef:51:89:59:2b:d5:
53:38:af:09:30:98:fc:87:a1:be:67:00:35:3e:ab:cb:f8:33:
14:af:02:10:f6:e9:ff:68:3c:7a:31:43:8b:ab:ed:b6:0b:ca:
b9:ce:db:d4:37:2c:8f:ef:51:b2:84:9c:e9:a6:4b:70:62:01:
4c:f2:a6:64:fa:a8:77:53:bd:83:09:56:1b:73:d5:d1:ff:77:
f4:7b:40:c3:fb:92:13:9e:cd:54:ae:40:67:17:ae:29:a2:c0:
79:d8:37:fa:1e:2f:da:f6:23:8a:16:15:6e:3c:c6:bf:d1:40:
db:e0:7a:63:c7:e0:4e:10:40:de:11:87:9e:4d:9b:3c:3e:60:
91:ec:fc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:22 2025 by rpki-client