Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208029.roa
File: AS208029.roa (raw, json)
Hash identifier: zJ8JqN/IaYiaa5GnUhTLHhXv/H24vZuLWV9uhnAkroM=
Subject key identifier: BF:4C:EE:5A:85:D3:F0:C3:94:8D:9A:B0:F0:61:82:42:31:8F:B3:BF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0E807F655C8E5DE8F5DC6B9E01E582D2D6805C7B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208029.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 208029
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:80:7f:65:5c:8e:5d:e8:f5:dc:6b:9e:01:e5:82:d2:d6:80:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=BF4CEE5A85D3F0C3948D9AB0F0618242318FB3BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:67:d6:0c:a7:66:17:97:1e:c9:c5:af:51:
d0:e5:ac:12:2c:6a:7e:97:36:d9:3e:54:40:d6:a1:
13:74:4d:22:0f:b5:cf:b7:bf:5c:c9:78:f1:6a:f6:
75:a4:f1:60:d2:15:4f:f1:78:1b:00:16:23:88:46:
9a:77:c9:76:64:93:e9:38:c5:c1:e6:0b:2c:ef:d0:
a6:85:67:fb:4b:14:b7:78:2b:5d:89:fc:fc:e5:7c:
19:ac:20:01:93:a6:c5:6c:0d:90:25:7b:8e:e9:d5:
4e:d8:5e:48:a3:e6:3f:00:5c:0e:ce:65:60:5b:06:
02:0e:00:e7:15:3c:ca:1d:a3:b9:dc:b0:96:25:a7:
c2:be:52:06:20:ef:8c:bf:b4:96:44:22:38:db:7d:
b9:ac:17:c6:53:d3:ee:b9:47:4b:e4:1e:36:50:b4:
de:71:3b:98:42:5b:31:d1:8b:41:fa:c6:04:45:11:
48:34:3c:d1:c2:fa:5e:4e:a2:4a:49:59:c4:f8:20:
48:32:1f:4d:19:ce:31:fb:f3:21:4e:20:f4:f2:85:
b0:2e:22:bf:8e:5c:f9:d3:0a:db:b8:3c:1b:76:af:
02:d6:8f:42:5c:a2:76:17:5a:93:9f:4c:3e:87:fa:
cd:3d:6e:27:7d:6a:4d:85:c7:ff:e5:25:a1:ad:d9:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:EE:5A:85:D3:F0:C3:94:8D:9A:B0:F0:61:82:42:31:8F:B3:BF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e1::/48
Signature Algorithm: sha256WithRSAEncryption
1d:74:46:8f:94:0b:03:78:71:d9:67:d1:0c:bf:fe:82:9e:17:
4b:2b:c0:9a:4f:8a:21:fd:07:6d:11:9a:26:d9:58:2f:ac:2d:
e4:4c:47:4e:79:4d:2e:1d:cf:05:d1:7a:0b:34:81:07:87:cd:
92:4d:f6:00:b8:8e:31:3f:47:56:b6:e0:02:c7:97:22:a4:0e:
ba:8b:89:bb:58:de:3e:3c:7e:eb:e4:55:07:1f:14:8c:a3:37:
34:c7:6a:d2:5d:f0:95:72:93:61:36:3c:74:a2:dc:c0:77:fc:
7a:e3:3d:4d:63:06:ba:6c:ee:2d:fe:39:dd:c7:93:82:63:12:
40:43:10:c5:19:96:78:d5:78:a7:09:15:23:df:8f:37:55:ed:
0a:88:68:dd:de:05:b7:79:bf:17:2c:f3:8f:65:09:46:d8:cd:
38:00:de:cf:4e:be:a7:cd:6a:69:20:24:6a:2a:af:fb:33:78:
a9:c2:45:e7:ee:a8:b9:53:8e:54:10:c3:4a:4e:cc:2c:12:37:
34:2e:d0:ef:f3:ba:11:90:13:d0:87:90:ef:ac:91:14:78:75:
94:de:eb:f9:e9:36:08:02:7b:ca:3a:73:f4:e8:a2:f7:bd:2b:
b2:7b:48:41:e4:11:ac:3b:0a:a8:22:9a:83:f2:44:c4:22:ed:
11:ab:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:27 2025 by rpki-client