Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207556.roa
File: AS207556.roa (raw, json)
Hash identifier: 45TFuWMGcUQ7to3XxxVec8e27ytHjCVlfmzWPR7gQYE=
Subject key identifier: CF:6B:8E:BD:DA:B1:45:9A:E9:17:3F:E1:7C:FE:EA:19:F9:58:AF:58
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1CCF5873BF95353757F81649E49FB8416154A927
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207556.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 207556
IP address blocks: 2a06:a005:720::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:cf:58:73:bf:95:35:37:57:f8:16:49:e4:9f:b8:41:61:54:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=CF6B8EBDDAB1459AE9173FE17CFEEA19F958AF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:86:ca:b2:bc:9a:55:f0:76:ec:a8:1e:03:87:
c7:2b:e8:0a:57:f0:7d:d3:56:25:40:eb:19:b8:85:
93:f7:e8:9a:9e:12:4b:21:fa:e3:5a:59:c4:8d:85:
80:be:80:9d:21:93:a9:a7:7c:6d:75:d0:cd:0e:3b:
a4:d9:b4:9f:7d:89:f7:40:04:fc:35:5d:cc:fd:8b:
38:c2:d1:88:ce:19:ee:71:51:81:e2:d2:01:d4:95:
64:28:1b:31:16:c9:1d:50:77:4b:98:8e:e6:31:9a:
b0:9c:ae:ef:33:e4:98:3e:f2:60:60:fa:dc:7c:90:
99:5f:b2:06:c7:6c:91:65:6d:66:a3:07:e9:5d:50:
8b:4c:ff:7d:af:14:20:06:ce:e3:67:a6:23:3a:0d:
ab:58:93:f9:0e:1d:ca:8d:26:f8:2b:cc:6e:75:70:
73:78:3d:29:6b:94:c9:95:5e:0d:0f:e5:12:f6:0d:
6a:e5:ba:39:b3:1d:de:65:10:23:2a:96:3b:28:c6:
27:69:56:d7:59:17:0f:97:e7:a0:eb:31:14:0a:15:
40:b2:6f:35:25:bb:06:dd:ea:77:b0:df:2e:93:31:
4c:32:7a:f0:77:6e:58:14:62:f3:bc:1c:7d:b0:9a:
ea:aa:44:f1:48:b0:eb:b0:54:f9:6a:25:c9:2e:52:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6B:8E:BD:DA:B1:45:9A:E9:17:3F:E1:7C:FE:EA:19:F9:58:AF:58
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:720::/44
Signature Algorithm: sha256WithRSAEncryption
a2:53:43:c9:55:24:ef:5a:32:e1:a9:14:af:13:43:cf:d6:0d:
9a:f6:70:52:ef:c4:54:2f:75:2e:3b:f7:cf:c6:7f:84:f4:38:
47:22:eb:05:76:bd:a5:ab:b7:cd:0c:88:b2:c2:c1:84:ee:3a:
25:90:3a:59:50:42:f2:45:7d:54:59:34:39:57:b4:55:ba:79:
4e:53:a8:19:b9:eb:c9:78:3b:ba:aa:ad:d1:ba:7a:d2:c0:c5:
17:96:9c:cd:2c:e2:31:25:df:fe:4e:3f:50:ff:30:89:f3:6d:
73:42:3f:7c:3f:9f:02:a0:b4:9b:da:ac:b1:94:0d:da:3a:7f:
3b:91:62:e1:06:95:ab:99:58:b1:dc:30:3d:a8:98:cc:15:02:
01:af:d3:0d:dd:4b:c5:5b:4f:aa:f0:3b:97:65:03:dc:c9:0c:
52:85:8f:f5:de:58:ed:d0:43:e0:ce:ed:db:42:0e:39:f9:17:
7d:f8:a1:fe:ee:48:dc:15:9a:8b:ba:42:7f:bf:70:ee:86:71:
d4:1b:18:36:cc:74:e6:92:83:1b:61:13:66:59:3b:c0:b5:e7:
af:8f:ca:a2:a2:d6:11:8f:46:13:1b:43:3f:e9:b6:9c:96:bc:
f1:15:25:55:71:47:44:f7:33:fd:dd:e3:59:cc:8e:8f:0d:57:
be:8f:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:31 2025 by rpki-client