Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207762.roa
File: AS207762.roa (raw, json)
Hash identifier: 7nnmL5/XRAjNCFkx0OZa+DMGm129DNDn5jSC+UxwZx0=
Subject key identifier: 73:D2:F5:40:2F:62:93:BA:F9:93:8F:04:73:99:17:A2:B1:A4:69:78
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 06595DF0858804A750D14A0C1BF9B6F37C5DAC0B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207762.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 207762
IP address blocks: 2a06:a005:a0c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:59:5d:f0:85:88:04:a7:50:d1:4a:0c:1b:f9:b6:f3:7c:5d:ac:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=73D2F5402F6293BAF9938F04739917A2B1A46978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:20:b1:74:36:ed:5c:a1:2b:1c:c4:82:21:
7d:a4:8c:0e:a3:f8:81:6f:e6:d5:17:b0:21:50:6e:
6a:d7:af:ea:ed:12:20:ec:e6:69:67:55:af:d2:41:
32:69:14:74:05:49:ee:6a:6a:a1:bc:55:61:30:95:
9d:db:fc:7f:fb:2f:62:98:9c:f8:e0:c6:28:d9:74:
ea:5c:a9:e4:25:a9:19:c4:c2:a4:c7:87:a7:e2:18:
12:05:a2:d2:7f:c5:3b:0b:a0:0e:df:f5:b6:49:fc:
55:f4:01:81:52:58:b5:df:14:21:2d:31:93:a1:4d:
54:9b:74:1f:90:35:ac:fc:1d:50:1b:82:8d:b3:c7:
49:35:97:24:81:1f:87:20:43:60:1f:f4:85:34:a0:
08:75:61:35:c7:f8:51:ee:a5:5f:23:44:70:00:a1:
c5:a1:4e:1d:69:2e:cb:96:7a:45:a5:19:a6:4c:ce:
c6:ec:2b:29:f6:87:78:b4:d8:aa:22:82:92:3c:c4:
8e:c0:8c:8d:3f:57:db:1d:12:07:4e:30:35:97:d4:
5a:4d:ea:a4:56:92:70:a6:3f:00:aa:01:ee:25:be:
a5:48:54:af:9b:2c:75:dd:cf:a8:80:5c:cf:af:25:
5d:c4:da:35:45:02:13:46:81:01:73:3b:d5:6f:40:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:F5:40:2F:62:93:BA:F9:93:8F:04:73:99:17:A2:B1:A4:69:78
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0c::/48
Signature Algorithm: sha256WithRSAEncryption
83:c9:f5:f0:73:3a:68:4c:c4:44:64:d1:5d:03:b0:20:2e:0c:
97:9c:e6:a1:b9:f6:09:8e:16:4d:ef:05:32:98:15:01:3f:26:
11:10:8f:b7:2a:9a:37:cc:ff:fa:94:38:37:88:61:d7:4b:3c:
e8:67:fb:14:31:78:14:5d:7d:7d:00:3e:95:48:3d:04:52:ec:
42:8e:73:13:5b:da:b8:fa:5d:98:c7:54:78:8a:27:f2:e2:2f:
20:5b:63:8b:3a:07:b3:a3:5c:a6:97:86:71:ff:ee:f9:22:23:
ae:87:e4:a4:47:e6:ad:b5:3f:8e:b3:1b:9a:57:d5:37:75:37:
c5:3f:1e:5e:35:67:1f:e2:c4:fd:64:e0:14:02:2b:9c:c7:f7:
23:0d:70:65:ca:d2:c0:a6:58:ab:f2:c5:99:d6:c4:c0:2a:b0:
87:e2:47:69:1b:f6:a2:fb:77:24:54:b9:1d:fb:ad:35:a5:0e:
7b:84:84:5b:c1:c5:29:7c:9b:50:6a:ae:d9:f0:c5:0d:e5:67:
f4:2c:87:1b:1f:43:cc:be:7e:14:14:d2:b0:95:aa:a0:1b:79:
4f:23:86:36:2f:eb:cf:54:12:3b:4a:87:d6:f6:b4:44:a5:bd:
09:8b:72:0b:61:a5:ba:18:15:00:94:b3:82:39:35:28:0f:79:
61:aa:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:12 2025 by rpki-client