Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207142.roa
File: AS207142.roa (raw, json)
Hash identifier: s2wY+0rj2etxUjz7KXdBl1+g32ufDm9hhaK5AVZYi9w=
Subject key identifier: EE:CF:ED:5C:6A:D4:4B:B1:55:70:C9:97:17:98:15:06:95:6A:96:68
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 781DA5A2A81F0FAC2730628B5342D0A90C619EB5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207142.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 207142
IP address blocks: 2a06:a005:2580::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1d:a5:a2:a8:1f:0f:ac:27:30:62:8b:53:42:d0:a9:0c:61:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=EECFED5C6AD44BB15570C99717981506956A9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:59:bf:a1:b7:af:f5:2c:3a:de:65:ec:d3:
32:68:6b:3d:2f:c5:f8:56:34:d0:f6:0d:6e:96:c7:
50:f2:02:a2:b3:42:1a:43:76:37:04:7d:ad:53:4c:
db:31:8f:d9:24:73:d4:a2:f4:a4:0d:24:74:93:00:
6a:db:87:63:40:24:8d:24:71:06:06:0b:96:af:d0:
65:59:b9:59:de:7d:14:ea:17:b6:c8:3f:68:e7:89:
70:58:81:b0:6c:bb:bb:14:6a:81:51:c0:87:03:a4:
62:13:30:de:67:7b:d9:23:41:31:7f:42:84:d3:07:
e3:7c:6e:ac:e3:e4:db:dd:34:b3:bb:83:af:f5:7b:
aa:76:0b:41:51:50:f0:12:41:ab:b1:0b:ac:73:ed:
1f:aa:be:7f:61:db:7b:92:82:a3:e4:35:0b:3a:53:
30:59:49:29:2a:30:ea:d4:01:2d:8f:7a:8e:29:bf:
e9:a6:dd:a2:65:f1:11:e2:59:48:1d:f6:58:02:1b:
5a:92:11:e8:a4:fb:71:99:2b:20:7b:0c:e8:67:53:
a2:55:a6:a0:a8:99:86:a4:08:0b:b4:26:77:bc:a8:
66:af:77:f0:fe:e3:5b:d4:64:9d:30:46:32:bc:15:
87:89:f0:dd:ae:1e:a8:26:c0:f3:02:fa:45:5d:6a:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:ED:5C:6A:D4:4B:B1:55:70:C9:97:17:98:15:06:95:6A:96:68
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2580::/44
Signature Algorithm: sha256WithRSAEncryption
d5:14:33:f1:78:79:a1:6c:74:79:17:a1:a2:25:41:ce:77:90:
ac:93:4f:02:63:1b:7b:c5:72:87:7b:b0:d7:f3:2c:c2:63:c9:
c0:47:0b:de:d3:63:90:ef:52:34:86:de:be:ba:41:6c:13:9a:
a4:28:45:e3:5a:5b:5a:67:bb:02:ad:98:3f:38:ac:84:7a:48:
96:3a:09:d7:fa:ea:8c:87:0a:8d:90:a7:a5:e8:5e:97:df:5d:
2b:a7:9a:f7:55:52:c8:33:49:a0:8a:3c:4e:d6:fb:4b:15:81:
0c:f4:1f:59:09:c8:05:23:e4:3c:20:93:1e:9f:e8:ad:a0:95:
ed:43:e2:fc:4c:e9:8d:cd:68:29:52:a2:e7:da:ec:4c:eb:52:
55:a2:90:ba:b4:8f:5b:4d:48:4b:c2:45:cd:e7:73:08:d4:6a:
b4:78:c0:57:76:ac:3d:cb:b8:5c:17:df:0b:e6:b2:02:10:19:
86:31:0f:c9:8c:3b:ff:02:d0:ed:25:3a:77:fc:67:ac:cb:d3:
12:79:30:5c:92:0b:30:25:3c:61:fe:db:33:81:e9:19:49:4b:
1c:44:47:dd:89:2b:9b:43:9b:bc:0f:9e:5b:2a:36:f2:5e:e3:
d2:91:f2:37:6e:9a:72:31:65:69:30:c8:25:03:93:5d:b6:6b:
cb:1c:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:59 2025 by rpki-client