Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207705.roa
File: AS207705.roa (raw, json)
Hash identifier: +ZsNuC2SZIJEJPX7rNBPftIL+O+AQeW/Q7GfZcP/ZCo=
Subject key identifier: 34:6E:E7:57:03:7C:82:A5:C2:AA:15:2C:86:84:F9:B0:74:0A:A7:25
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7FC4F26CE32F2A459BBB01D42B8BAE339F0B56F6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207705.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 207705
IP address blocks: 2a06:a005:210::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c4:f2:6c:e3:2f:2a:45:9b:bb:01:d4:2b:8b:ae:33:9f:0b:56:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=346EE757037C82A5C2AA152C8684F9B0740AA725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:2c:82:4f:9a:cf:63:56:54:86:2b:a8:95:
dc:4f:b0:fa:71:96:a4:b3:f7:52:d9:9a:f1:c6:57:
6c:4e:ce:50:91:d9:33:88:18:e5:d1:c3:da:1b:3d:
a6:69:1d:72:c3:af:69:76:60:8c:e9:b7:08:eb:06:
33:5c:02:bc:8f:a5:97:45:8b:71:cc:f3:41:24:56:
aa:73:90:76:6f:d9:37:ee:aa:34:04:3b:e9:f1:00:
3e:5a:12:d9:03:e3:b1:56:b7:b5:bf:fd:2c:d7:f6:
f7:b3:13:63:d6:d5:d2:fc:13:60:3d:1d:19:38:18:
f9:89:f0:3f:84:0e:9f:94:ee:ac:f0:25:d8:9c:5a:
b5:42:7e:c2:f2:87:22:33:c5:30:a3:59:15:54:0a:
df:87:44:ec:bb:13:c5:a3:88:a9:b8:13:a8:d4:87:
cb:cc:dd:d9:2a:2a:a9:9b:83:36:0d:0e:3e:e9:07:
6d:bd:f7:18:bb:6e:d7:a0:8c:bd:8e:6e:df:43:e8:
a3:cd:b4:73:75:22:88:71:2d:82:c5:c9:65:bd:f0:
21:41:dc:db:c3:c5:df:c6:fc:44:cf:2c:90:60:a7:
15:d8:2e:f1:ed:f4:a4:ed:b6:2b:f5:f8:9b:08:f5:
88:15:0e:09:98:df:9e:02:6e:d4:cb:d3:ee:da:51:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6E:E7:57:03:7C:82:A5:C2:AA:15:2C:86:84:F9:B0:74:0A:A7:25
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:210::/44
Signature Algorithm: sha256WithRSAEncryption
7f:08:75:ea:e1:06:bd:cb:d5:4b:ff:4d:fd:33:1d:d5:ca:f5:
2f:e7:56:7b:6e:0b:c7:2e:a6:98:0c:ac:46:bc:51:a4:14:50:
3d:b5:d9:d1:db:58:f1:fc:7e:d1:09:62:d8:48:67:49:44:92:
4c:21:d2:de:d6:ae:16:2f:e6:50:ac:5b:f4:57:73:97:5f:33:
f7:3a:3b:2a:1c:77:86:e3:40:02:5e:2d:5a:c5:01:96:b9:8c:
85:11:16:0b:63:1e:14:4d:3c:4d:e9:ec:6c:ba:5f:03:2d:80:
eb:0e:a0:6c:1a:59:ed:d1:66:24:cb:f7:85:4e:00:51:94:d3:
a0:3e:f9:c9:47:4b:59:c3:3a:98:83:bd:03:b9:01:59:97:c6:
ef:e0:f2:41:a2:4b:ad:d3:be:2b:79:b0:30:46:64:04:57:10:
03:0f:64:d9:ca:50:63:f4:0a:a8:b7:33:99:42:4d:18:8a:53:
92:2d:07:52:c8:54:a6:41:44:b7:2b:ac:91:88:ce:4c:f2:c8:
44:9e:cb:4e:28:2b:3e:5e:8f:0d:55:2b:d2:1a:cf:63:e8:f3:
55:2b:0e:36:50:9c:35:bb:3d:b3:9f:aa:aa:d3:57:63:dd:cb:
4d:37:7d:af:78:d7:c9:d5:f8:6e:c3:cf:7c:9a:78:92:d5:64:
61:a7:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:19 2025 by rpki-client