Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208076.roa
File: AS208076.roa (raw, json)
Hash identifier: T5EPlQbb95OWmpjo5RQUb+msNMwpDbjRcrtOQMSs4Sg=
Subject key identifier: 2E:C9:52:88:19:8F:08:BE:FD:4D:01:C6:60:53:35:5D:02:31:12:0C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 099D0CDC4A1F45A5D459B1F9364F24EA76B3596F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208076.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 208076
IP address blocks: 2a06:a005:5ae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:9d:0c:dc:4a:1f:45:a5:d4:59:b1:f9:36:4f:24:ea:76:b3:59:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=2EC95288198F08BEFD4D01C66053355D0231120C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:30:eb:14:dc:f5:40:6a:f1:c2:e3:ec:9a:
e9:ea:93:c0:1e:07:22:e2:57:24:7e:a9:0d:99:80:
bd:37:82:4f:68:b5:6a:18:b5:95:98:d2:97:79:f4:
e0:28:08:7f:68:8b:ac:c4:81:c3:3a:ab:0c:f1:6a:
fe:7e:31:5a:95:62:aa:90:53:e8:25:b4:92:d3:13:
0e:52:90:c5:3d:c9:3a:40:df:63:a0:7f:dc:cc:72:
32:7e:5f:3d:0c:5f:4f:c8:53:66:08:77:1c:ce:2c:
e1:03:37:2c:4b:f5:69:50:1d:ba:b4:fa:7a:f4:84:
a5:9b:b0:d0:a6:1e:ed:13:7e:00:8f:d2:a1:1a:ab:
8e:7a:1d:9b:a4:a4:c2:b1:89:08:b6:e5:29:ff:d3:
8b:bb:f8:ad:04:c6:63:90:b4:c6:ee:69:0a:d8:1d:
b9:06:cd:d8:46:57:70:3c:70:b2:a0:53:38:c3:8b:
cd:81:e8:1b:b6:7d:3a:40:47:6b:23:16:39:ca:22:
3a:df:82:ff:af:ce:98:7f:a3:16:3f:7e:4b:0d:54:
2d:67:b1:26:b8:81:3e:1f:87:91:aa:fc:a3:9d:fb:
90:39:f0:23:4f:ea:2a:63:43:52:65:21:e8:28:fc:
da:62:1b:86:45:36:15:3b:7a:51:5d:22:23:38:11:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:52:88:19:8F:08:BE:FD:4D:01:C6:60:53:35:5D:02:31:12:0C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ae::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c1:b0:b3:e2:a1:dc:9e:a1:a2:b3:66:78:aa:d1:ce:b4:bf:
4f:29:b5:eb:6d:5e:13:3e:1f:28:ac:81:4e:8f:8b:ca:b2:03:
80:fe:8b:8e:f7:fa:3f:33:87:34:f7:97:5d:71:23:41:11:76:
ef:f3:f6:ba:f3:b1:5e:fa:d8:07:97:ac:a4:74:25:24:79:6b:
2f:61:67:1c:80:4a:98:e5:11:d1:e0:06:da:d2:7f:5f:6d:b5:
4e:3e:88:44:8e:31:32:99:d4:b6:47:d3:42:5f:02:4e:5b:77:
4b:62:9f:ca:fc:5e:f9:77:fa:c9:05:fe:5b:0b:0d:6b:6f:c9:
ed:69:53:a3:d9:16:db:da:bf:46:1e:88:99:ec:32:6b:c3:01:
17:40:3e:c5:f3:a6:0a:51:25:0c:71:c9:e0:ec:3f:2f:1f:ee:
a7:ae:f8:23:3d:35:70:36:1a:c6:8b:7a:d2:9a:c4:65:26:4a:
09:27:1b:b1:80:b6:fb:c4:fd:c4:9f:bc:16:70:48:c6:92:de:
df:5f:ee:85:43:83:fc:28:df:34:4a:04:1d:d3:20:e4:7b:f2:
d8:a0:9e:7b:c1:84:be:d8:47:08:92:38:fb:48:20:d9:ef:58:
27:b8:a2:10:f0:3a:d8:73:45:2e:57:25:16:65:7e:16:39:14:
62:72:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:39 2025 by rpki-client