Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208059.roa
File: AS208059.roa (raw, json)
Hash identifier: SSjW4GcHhiffANRl7d6kzwvu8gXlxtYJx6MdtkRzIs0=
Subject key identifier: 85:AD:17:E7:8A:5C:65:8D:72:DF:FD:3F:FD:CF:32:45:00:69:B6:D8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5B1F3D3C36AD48B9034446A271D4410D6DFC57DD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208059.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 208059
IP address blocks: 2a06:a005:d28::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1f:3d:3c:36:ad:48:b9:03:44:46:a2:71:d4:41:0d:6d:fc:57:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=85AD17E78A5C658D72DFFD3FFDCF32450069B6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:46:b6:af:3d:43:5d:b6:6e:f4:e3:c3:d6:
b7:55:8b:90:b6:a1:b0:40:ce:7e:68:e1:ef:71:c0:
5d:83:97:11:6d:5a:93:72:82:35:86:93:7f:30:ca:
7d:41:8e:1a:fd:de:71:93:79:2d:12:79:9d:52:8a:
58:7c:ef:8e:ba:04:78:c2:7a:da:33:f9:7f:51:1e:
3a:00:cc:5b:55:d8:8d:d4:49:51:33:03:49:8e:19:
7b:87:3b:24:bc:9d:1b:85:98:b4:ee:7f:e6:08:f8:
ae:d5:cd:f1:63:6a:2c:70:12:2c:06:aa:de:50:2c:
80:80:bf:7b:92:12:7b:17:80:52:cc:6e:a6:8e:de:
22:a3:9d:ea:f6:09:02:43:f0:13:ac:59:7c:1d:22:
6e:33:eb:8d:a8:95:5f:6d:af:b3:07:f7:57:6b:4f:
de:b1:04:39:93:7a:5c:d3:62:2c:a6:ca:80:ad:ee:
96:fa:26:9d:a4:d0:9d:86:2f:89:1f:f7:99:2d:9c:
d9:64:4e:b9:10:c8:4d:e1:79:59:c6:c1:cc:44:22:
2d:e6:54:88:a4:7f:a0:13:84:4b:4e:e6:36:e3:46:
8a:65:81:2d:e8:1f:28:4f:b4:57:a4:89:31:55:6e:
44:c0:28:68:ff:5f:0e:9e:f8:e3:5d:7e:d7:0f:7d:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:17:E7:8A:5C:65:8D:72:DF:FD:3F:FD:CF:32:45:00:69:B6:D8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d28::/48
Signature Algorithm: sha256WithRSAEncryption
6e:52:06:06:0e:b9:1c:37:4b:2e:8e:a4:2a:41:20:fe:e1:6c:
08:a3:07:76:89:af:11:43:51:f7:ce:c7:6a:6d:0c:d6:13:54:
31:95:e1:c4:42:b3:10:69:11:5e:79:a4:09:13:bb:da:78:ba:
14:83:f2:f7:53:00:e3:81:6c:75:c5:0c:0f:e0:49:34:b5:87:
af:2a:83:b2:dc:ba:c0:1a:1d:c8:0e:d7:13:16:ea:c9:37:96:
0f:d5:61:12:da:23:73:48:24:77:93:ce:43:d4:1a:dc:59:db:
cd:9e:fb:65:72:33:16:fa:66:2f:13:c9:5d:3e:73:b2:4d:a7:
c7:ea:89:94:aa:2b:a4:d4:ea:ff:51:eb:75:8c:f7:7d:fb:16:
cb:47:26:41:ce:6c:65:b2:53:a2:9c:fd:ed:bf:cd:77:d5:50:
4a:8e:ab:71:9f:09:05:db:c4:6d:50:42:75:0a:26:8d:5d:56:
6a:3a:40:42:94:5a:0a:62:59:e8:c6:0f:31:1e:90:8f:6b:f4:
08:5b:34:87:b5:e2:6a:cd:42:65:45:5b:a2:20:a2:1b:9e:4a:
90:93:9a:dd:2e:64:e4:b2:81:d3:05:79:45:48:bb:7f:60:17:
f7:f5:82:55:c3:60:b0:e7:b3:c4:2e:c6:56:89:57:57:8e:67:
3f:e3:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:24 2025 by rpki-client