Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: 3KLifoZtjYmwatFH78AVCt1BEopukGXQTjz48wlr6Tc=
Subject key identifier: EB:15:22:CA:83:9B:1B:53:CC:B2:41:3B:82:E3:78:C8:EA:83:EF:70
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7F2B6A88F0E511987F64A54998EEE7F782EA86BD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207941.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
2a06:a005:d0::/44 maxlen: 48
2a06:a005:9b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:2b:6a:88:f0:e5:11:98:7f:64:a5:49:98:ee:e7:f7:82:ea:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=EB1522CA839B1B53CCB2413B82E378C8EA83EF70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:a1:69:ed:19:4f:e6:04:a1:98:e1:7a:0d:
b4:a1:6d:43:6b:b8:ac:78:03:69:51:cd:66:36:e8:
4a:7b:90:ee:fd:76:8a:46:ad:9f:fc:3c:8a:1d:78:
a7:77:8b:9c:e7:15:ef:0b:4c:89:6b:e8:cd:aa:f6:
f1:df:bf:ad:43:11:f6:bb:3b:e1:42:9f:79:18:5d:
70:ca:18:e2:59:b0:a6:65:ac:d2:01:a4:a0:49:d0:
65:77:10:bd:c0:b6:17:8f:f3:5f:54:fe:2f:e5:23:
e2:7f:11:4c:74:1f:18:1a:07:c2:48:5e:b6:77:6a:
28:6b:b7:d3:48:25:1a:ea:be:c1:9d:eb:c2:c2:6b:
07:77:79:a5:ec:ac:11:b2:07:cb:96:17:74:bf:ff:
19:74:a7:87:f1:fa:41:fc:cf:79:4a:fb:43:c5:d3:
c9:1c:80:91:91:30:c3:20:69:87:52:e9:d7:47:cc:
f3:5a:f1:69:7c:88:69:fc:16:59:63:ee:69:2c:3d:
11:c6:9e:42:0c:bb:39:b2:9c:45:9a:6d:2c:75:e9:
ea:be:bc:86:65:a5:a2:f1:47:88:15:00:5a:64:9c:
90:59:3f:c8:87:a6:02:c0:60:f6:f7:94:1e:26:65:
75:9f:d9:2e:3a:b1:2d:f7:09:62:0d:ca:5d:30:06:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:22:CA:83:9B:1B:53:CC:B2:41:3B:82:E3:78:C8:EA:83:EF:70
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff
2a06:a005:9b0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:7a:58:f6:27:6c:e2:72:7b:bf:1e:cd:1c:41:4a:e4:d2:82:
f3:ad:ae:f4:3e:8b:37:c1:8c:84:c9:fc:81:24:3d:94:f2:41:
4b:30:d0:15:ab:c5:20:7c:72:37:7b:81:b8:da:80:f0:bd:a7:
2c:de:94:c6:00:d4:b6:a3:78:c8:50:de:49:26:fc:5b:cf:e9:
96:d5:64:21:30:e9:1e:3a:f3:50:e7:ff:70:d9:9e:41:99:6b:
a4:1a:9d:56:43:78:76:bb:01:d3:4b:de:5d:4d:97:a9:e3:5b:
9f:87:e5:c2:f3:07:b1:87:a1:a5:b3:da:ca:12:7d:4b:2d:8f:
99:93:16:8f:28:63:5e:5a:05:97:f5:58:05:34:49:c0:88:8b:
09:c2:81:de:f1:44:17:6c:6c:e8:4c:46:4a:6e:a7:47:49:cc:
99:bb:12:a0:8c:4a:b3:2b:40:57:1c:5b:9c:ec:33:5f:f9:88:
87:70:29:ad:6b:de:c7:51:22:b5:e0:d7:39:f5:a7:e6:65:4b:
c1:e5:04:bc:dd:8e:c3:5d:7f:9d:c4:4c:33:71:ef:fa:6e:a2:
0a:25:54:bf:4e:9e:cb:db:21:f3:28:45:fa:ae:52:56:8b:cd:
f0:6f:78:07:5c:65:4c:f3:35:53:23:bf:34:1f:86:cb:30:70:
f5:08:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:21 2025 by rpki-client