Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208046.roa
File: AS208046.roa (raw, json)
Hash identifier: j/X10Fy9z09nOav30UYsvBqxG4Lg7QWBuUavi9MiL2I=
Subject key identifier: FB:6A:2C:89:28:C0:D6:08:6D:D7:B0:96:21:CC:B7:88:60:F9:E1:FF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0889216786D8870B05BC7B15EA9C11FC811E5F97
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208046.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 208046
IP address blocks: 5.253.84.0/24 maxlen: 24
5.253.86.0/24 maxlen: 24
185.99.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:89:21:67:86:d8:87:0b:05:bc:7b:15:ea:9c:11:fc:81:1e:5f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=FB6A2C8928C0D6086DD7B09621CCB78860F9E1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:e3:da:66:da:b8:ab:b2:bb:27:bf:8d:ca:
60:55:66:87:2e:3e:7d:fa:e5:70:ee:5e:d1:af:43:
ee:86:91:0f:ef:03:8f:aa:49:b8:ff:c9:84:5d:9f:
f1:f5:54:66:c4:26:ff:a9:d9:81:e9:8e:a2:cf:f7:
84:8e:58:89:39:ef:5a:70:94:c4:09:4c:98:66:09:
50:6f:5b:1f:40:e8:fc:63:bb:d2:0c:83:27:d5:c1:
0b:5d:c4:d4:9d:af:44:aa:d6:7e:f6:94:3a:ab:23:
3f:ba:dc:3c:81:2e:0d:20:75:5d:c1:4a:49:31:1a:
5a:ac:f3:78:9c:d6:9e:b0:32:f0:88:10:06:74:3a:
a8:2d:89:9c:7b:ef:8c:f7:b4:65:e3:f2:f6:a1:ac:
80:8c:50:71:dd:25:ea:c0:3a:ee:03:1d:45:d6:c1:
ab:c7:67:53:6b:74:d8:58:a5:a9:aa:a6:ad:9b:9f:
74:44:1f:6e:6f:8a:a3:4a:60:27:67:fc:8c:f3:c8:
25:8e:e5:e9:9f:1c:54:fe:dd:84:83:4b:9b:21:90:
b4:f7:c4:b7:91:b1:d7:05:45:7b:92:73:1c:e0:bb:
68:2e:6a:d3:5e:e0:71:57:2a:c2:54:9a:de:37:2c:
9f:60:73:e0:d0:46:66:ef:07:2f:d7:eb:29:b2:de:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6A:2C:89:28:C0:D6:08:6D:D7:B0:96:21:CC:B7:88:60:F9:E1:FF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/24
5.253.86.0/24
185.99.135.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ab:7d:40:8e:8a:ae:fe:f9:08:d1:31:f2:36:f2:8d:0a:45:
77:ac:66:54:87:51:37:a1:b6:14:da:9f:bc:fc:f1:df:ac:0a:
5c:29:3d:3e:82:06:a7:36:f5:6d:63:97:a4:1b:49:1f:f0:2d:
44:0e:c4:2c:fa:2f:b4:22:63:fb:bb:93:69:fc:40:d1:82:e2:
fa:c3:37:47:51:cf:81:17:c9:ee:fe:37:1d:9e:2b:6d:cb:40:
24:2e:a4:19:07:80:42:f9:6d:de:b0:a3:c8:fd:29:ae:8a:64:
28:4f:77:5a:a2:1f:a0:47:57:9e:e1:3b:9c:45:14:11:f8:e1:
fb:cd:3f:85:37:fb:15:ac:a0:29:69:06:1f:ce:ac:6c:63:d1:
53:84:2a:e9:cd:56:d2:b1:96:1d:79:7a:77:e6:d9:86:5e:1c:
00:4a:ad:00:75:f7:d1:6d:75:9d:f8:89:89:a7:cc:d0:35:ab:
fc:35:3b:a0:aa:0c:1b:93:33:55:23:4b:24:e0:0f:22:f8:5c:
87:b0:40:05:22:e1:26:f7:42:1c:49:45:98:65:62:86:e1:b6:
d6:a3:be:b0:86:40:d5:cd:c5:27:00:9b:f4:26:aa:1f:3e:e3:
73:e6:0a:fb:0a:5b:e4:1c:aa:74:11:d6:9f:91:20:9e:e4:aa:
1e:2e:ad:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:38 2025 by rpki-client