Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207778.roa
File: AS207778.roa (raw, json)
Hash identifier: eEE6nhRCaelzUkuy/0ifJLVOowLdgIE09A4yshUl7+Y=
Subject key identifier: 7C:90:15:03:35:84:83:BB:B8:84:38:8B:E5:A5:DA:56:04:7C:8E:A1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6ABFEC75749BE09F53ECDD544DDB437C24A0BED6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207778.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 207778
IP address blocks: 2a06:a005:1e20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bf:ec:75:74:9b:e0:9f:53:ec:dd:54:4d:db:43:7c:24:a0:be:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=7C901503358483BBB884388BE5A5DA56047C8EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:94:0e:eb:25:cb:af:fe:2b:2b:90:f1:0b:
a0:cc:27:55:47:d7:75:92:36:3e:2a:9e:f1:c0:5e:
af:87:d0:a2:94:a0:f1:1d:18:ea:3b:00:18:a1:8f:
75:df:49:81:89:18:c8:62:2b:94:3d:ca:cb:9b:6e:
e4:35:89:09:f2:10:e5:21:e3:8e:23:08:58:bb:e5:
01:dd:55:de:6c:6b:7f:da:eb:99:13:08:08:1d:5c:
ae:21:48:cf:46:ff:09:a9:48:0a:1b:03:70:98:1c:
18:7f:3c:18:5b:af:22:55:a3:b9:bd:a5:b8:e4:52:
18:ef:24:02:e6:63:fc:aa:70:4b:b2:ec:91:08:7d:
b9:ff:cd:7a:e1:21:c4:20:d0:fd:56:df:c6:de:f8:
6e:4d:b4:cb:4f:7c:5d:6d:1f:6a:1e:ae:e5:da:3c:
df:53:8b:a0:39:2f:15:21:3e:0a:f4:a4:47:ce:68:
04:2f:63:8e:ec:16:a5:c4:96:83:e2:4d:cc:cd:2a:
17:df:b9:8b:27:f2:6b:a7:d3:a1:e0:44:71:71:fc:
c0:6e:e0:85:99:ce:7f:0e:42:d5:7e:f0:c1:e3:91:
b3:8f:d6:b6:0b:2d:3d:5b:37:37:c5:7c:ef:df:ec:
e0:ee:27:6c:07:99:fe:32:83:a5:d3:06:2d:c3:d1:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:15:03:35:84:83:BB:B8:84:38:8B:E5:A5:DA:56:04:7C:8E:A1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e20::/44
Signature Algorithm: sha256WithRSAEncryption
20:97:d6:4a:3c:08:25:00:67:a0:42:b1:e2:e4:85:e8:45:4a:
0e:95:b0:1b:d8:3a:0a:28:e5:44:ad:e8:22:b2:43:18:62:10:
16:e5:4b:00:ae:e7:4f:bd:6a:6f:8f:ea:88:39:bc:ee:93:f1:
33:19:4a:9c:62:24:2c:35:85:45:ab:2e:04:52:12:24:0c:60:
b4:53:46:44:60:eb:61:19:59:69:07:90:03:0d:3f:c1:fe:e8:
67:b7:bf:3d:11:3f:4c:b9:31:b5:2e:bb:4b:3b:82:bd:5e:91:
d9:b6:d9:b6:6f:e5:0a:bf:51:d0:40:dc:53:96:bf:b7:6d:11:
2c:ae:b5:94:34:85:1e:0e:0b:39:1c:2b:fe:2d:04:c1:cf:c5:
86:ea:2b:9c:6f:8b:09:f9:35:67:96:e1:c3:83:d8:2d:80:05:
c6:da:3b:60:1e:67:f8:1c:ef:08:e4:c1:aa:53:1c:42:f1:a9:
fe:f4:ab:cf:c9:13:c1:de:2e:45:e9:40:a3:4d:19:9c:54:1a:
a9:60:90:ab:ee:0b:7c:94:a7:79:35:6b:59:45:18:cd:89:3a:
38:1e:a2:75:2b:fe:2c:37:c7:cc:e3:51:57:de:b0:a6:7a:5e:
00:34:e5:35:82:37:23:6a:0a:23:a7:1f:67:62:16:be:4e:df:
6c:43:e0:8e
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUar/sdXSb4J9T7N1UTdtDfCSgvtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDZaFw0yMzEyMjAxNjU2NDZaMDMxMTAvBgNV
BAMTKDdDOTAxNTAzMzU4NDgzQkJCODg0Mzg4QkU1QTVEQTU2MDQ3QzhFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsx5QO6yXLr/4rK5DxC6DMJ1VH
13WSNj4qnvHAXq+H0KKUoPEdGOo7ABihj3XfSYGJGMhiK5Q9ysubbuQ1iQnyEOUh
444jCFi75QHdVd5sa3/a65kTCAgdXK4hSM9G/wmpSAobA3CYHBh/PBhbryJVo7m9
pbjkUhjvJALmY/yqcEuy7JEIfbn/zXrhIcQg0P1W38be+G5NtMtPfF1tH2oeruXa
PN9Ti6A5LxUhPgr0pEfOaAQvY47sFqXEloPiTczNKhffuYsn8mun06HgRHFx/MBu
4IWZzn8OQtV+8MHjkbOP1rYLLT1bNzfFfO/f7ODuJ2wHmf4yg6XTBi3D0cDpAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUfJAVAzWEg7u4hDiL5aXaVgR8jqEwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA3
Nzc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBR4gMA0GCSqGSIb3DQEBCwUAA4IBAQAgl9ZKPAgl
AGegQrHi5IXoRUoOlbAb2DoKKOVEregiskMYYhAW5UsArudPvWpvj+qIObzuk/Ez
GUqcYiQsNYVFqy4EUhIkDGC0U0ZEYOthGVlpB5ADDT/B/uhnt789ET9MuTG1LrtL
O4K9XpHZttm2b+UKv1HQQNxTlr+3bREsrrWUNIUeDgs5HCv+LQTBz8WG6iucb4sJ
+TVnluHDg9gtgAXG2jtgHmf4HO8I5MGqUxxC8an+9KvPyRPB3i5F6UCjTRmcVBqp
YJCr7gt8lKd5NWtZRRjNiTo4HqJ1K/4sN8fM41FX3rCmel4ANOU1gjcjagojpx9n
Yha+Tt9sQ+CO
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:03 2025 by rpki-client