Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207852.roa
File: AS207852.roa (raw, json)
Hash identifier: beoox835sMMRAIkACzuQralfLR5AheEJTEXdwYegUPI=
Subject key identifier: 38:56:9E:EC:DB:C8:2C:BC:53:D0:78:57:1B:AC:C5:DD:8C:2E:4B:7E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 05A14A861A971656A1CA4A083AAFB1EB3DEC737D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207852.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 207852
IP address blocks: 2a06:a005:4b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a1:4a:86:1a:97:16:56:a1:ca:4a:08:3a:af:b1:eb:3d:ec:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=38569EECDBC82CBC53D078571BACC5DD8C2E4B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:a7:b6:50:37:be:d3:87:50:04:ca:6a:48:
26:71:82:eb:b8:0e:87:9a:1f:cd:4e:e7:b4:c4:f5:
29:41:17:ea:d3:8d:b8:e9:6b:1e:51:b7:1e:f5:0a:
ee:f3:40:ff:47:8a:60:da:38:46:0a:81:01:5d:f3:
1e:35:1d:e1:61:35:d9:66:b6:39:07:ce:b9:b1:e2:
3c:5a:11:fa:3b:a2:18:cd:62:f1:84:7a:df:92:d3:
e1:c2:3e:76:e3:75:9f:30:6b:8d:3a:80:ea:3f:d3:
83:33:96:50:18:40:a4:f5:44:67:a3:52:74:78:89:
97:9a:c6:45:a4:9e:da:34:ae:71:ac:ec:69:ce:a5:
da:3d:04:21:35:08:88:7c:24:d8:01:59:94:e4:df:
81:d7:bd:4d:84:00:77:fb:43:42:2a:b0:01:05:97:
a1:08:61:55:46:47:bd:e4:28:18:25:c1:48:9e:44:
2b:d2:66:05:d7:0f:3d:7a:d9:83:9a:c7:3b:da:f3:
55:25:08:de:d0:b8:68:c0:e6:bf:ac:25:1c:6c:e9:
d4:da:4b:96:d7:26:59:ce:45:a3:7b:e1:63:04:c7:
db:1d:00:28:a5:71:2e:b2:44:b5:69:e6:29:2b:2c:
28:2c:44:1b:4c:06:94:eb:1f:53:5d:ab:d4:eb:95:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:9E:EC:DB:C8:2C:BC:53:D0:78:57:1B:AC:C5:DD:8C:2E:4B:7E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4b0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:c1:e5:8c:ca:cc:8c:29:39:80:ec:1b:e5:e2:50:01:0c:95:
c9:8c:55:89:9c:a6:b9:14:47:96:ab:9f:89:ad:56:92:94:b8:
44:ba:a6:2a:c4:aa:06:de:71:33:92:99:8d:eb:2f:6e:93:2a:
4e:1d:df:ba:e8:49:23:72:4e:02:fa:93:d0:3d:fd:17:e5:71:
ef:49:eb:a3:f3:3e:2c:f5:21:d5:08:d5:20:25:ab:bd:88:2f:
f1:8e:8b:33:e6:aa:d8:be:10:87:f0:fc:3e:63:46:e7:f1:0b:
ec:81:28:81:48:58:b8:39:df:94:c0:a7:dd:56:64:5c:fb:c5:
78:8e:8c:e6:bc:5a:5a:12:6e:09:68:8b:a2:2e:c0:71:36:12:
b4:8b:e4:6c:3d:30:41:8b:b8:83:8c:17:64:54:9e:d3:ea:4d:
68:65:13:ba:7a:a5:67:c3:5e:e0:67:b3:e4:04:41:0b:d4:6f:
6c:a8:0c:0b:1c:61:23:b5:db:70:e7:45:d5:c1:07:54:f3:b7:
cc:79:5d:7f:3b:b3:ae:5c:75:cd:65:16:d1:2e:29:f3:27:35:
ed:26:ec:fd:f0:8e:ae:0b:b6:92:c9:48:06:17:da:8f:a8:68:
37:54:34:68:73:5e:e8:85:1f:1a:be:52:ec:e7:9a:aa:ed:8e:
e6:ff:55:82
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUBaFKhhqXFlahykoIOq+x6z3sc30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDBaFw0yMzEyMjAxNjU2NDBaMDMxMTAvBgNV
BAMTKDM4NTY5RUVDREJDODJDQkM1M0QwNzg1NzFCQUNDNUREOEMyRTRCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC136e2UDe+04dQBMpqSCZxguu4
DoeaH81O57TE9SlBF+rTjbjpax5Rtx71Cu7zQP9HimDaOEYKgQFd8x41HeFhNdlm
tjkHzrmx4jxaEfo7ohjNYvGEet+S0+HCPnbjdZ8wa406gOo/04MzllAYQKT1RGej
UnR4iZeaxkWknto0rnGs7GnOpdo9BCE1CIh8JNgBWZTk34HXvU2EAHf7Q0IqsAEF
l6EIYVVGR73kKBglwUieRCvSZgXXDz162YOaxzva81UlCN7QuGjA5r+sJRxs6dTa
S5bXJlnORaN74WMEx9sdACilcS6yRLVp5ikrLCgsRBtMBpTrH1Ndq9TrlaYjAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUOFae7NvILLxT0HhXG6zF3YwuS34wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA3
ODUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQSwMA0GCSqGSIb3DQEBCwUAA4IBAQClweWMysyM
KTmA7Bvl4lABDJXJjFWJnKa5FEeWq5+JrVaSlLhEuqYqxKoG3nEzkpmN6y9ukypO
Hd+66Ekjck4C+pPQPf0X5XHvSeuj8z4s9SHVCNUgJau9iC/xjosz5qrYvhCH8Pw+
Y0bn8QvsgSiBSFi4Od+UwKfdVmRc+8V4jozmvFpaEm4JaIuiLsBxNhK0i+RsPTBB
i7iDjBdkVJ7T6k1oZRO6eqVnw17gZ7PkBEEL1G9sqAwLHGEjtdtw50XVwQdU87fM
eV1/O7OuXHXNZRbRLinzJzXtJuz98I6uC7aSyUgGF9qPqGg3VDRoc17ohR8avlLs
55qq7Y7m/1WC
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:04 2025 by rpki-client