Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208223.roa
File: AS208223.roa (raw, json)
Hash identifier: jRKXHWe7tv73jCrAlo/edfcttEoNiRg1tOeD21xlHyo=
Subject key identifier: 99:B6:86:06:FC:BF:67:B3:2A:9A:1F:51:28:F3:20:25:47:38:B7:A7
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0FD3ACD3460C383967E748E6CA1D177A9007D005
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208223.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 208223
IP address blocks: 2a06:a005:4de::/48 maxlen: 48
2a06:a005:770::/44 maxlen: 48
2a06:a005:890::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d3:ac:d3:46:0c:38:39:67:e7:48:e6:ca:1d:17:7a:90:07:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=99B68606FCBF67B32A9A1F5128F320254738B7A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:68:a6:15:90:c9:e3:44:ae:e1:58:8b:7e:
f4:42:a2:97:0b:cf:d3:49:2a:6e:22:63:1d:68:19:
88:c2:7d:69:49:ef:26:b4:d2:eb:c2:12:f3:32:7a:
cc:53:45:c9:2f:e7:97:dc:c1:76:1a:9e:da:89:82:
bb:df:13:ac:30:25:fa:8c:e3:7c:23:9b:73:7c:5d:
ed:62:2d:61:27:3b:e6:87:ef:cc:0b:64:67:78:b9:
1b:a7:eb:45:b9:1e:1a:49:bf:ca:1e:b1:5a:4e:2b:
a4:39:34:7c:0a:09:70:44:2e:a2:d1:dc:51:eb:2f:
0a:c6:c4:19:26:f7:a8:e4:f2:a5:4b:2b:c7:2b:31:
c7:0c:b9:fb:68:0f:75:97:cc:53:8c:3a:71:50:ab:
cf:80:05:8a:f0:cc:38:10:5d:c5:5f:e6:b3:53:52:
43:c5:0f:46:eb:24:e2:cf:8d:0f:11:02:26:37:93:
eb:8d:95:ac:d8:08:a0:f1:e9:81:f2:92:e1:5b:4b:
ed:e1:e2:65:12:eb:bc:cf:8a:bf:cf:d2:5a:bf:ce:
f3:5a:bf:0d:25:22:a4:16:0e:f0:93:7a:e7:5c:ad:
2b:e8:8d:23:63:fe:09:95:9e:46:a5:05:c1:d8:ed:
0c:8b:06:57:7b:55:3b:a7:7d:eb:b4:be:ae:fe:3d:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:86:06:FC:BF:67:B3:2A:9A:1F:51:28:F3:20:25:47:38:B7:A7
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4de::/48
2a06:a005:770::/44
2a06:a005:890::/44
Signature Algorithm: sha256WithRSAEncryption
30:80:9a:19:f2:a8:91:30:ec:4c:a7:a2:5c:92:74:18:7c:ab:
88:0b:c5:ba:b2:d0:9b:bb:10:75:11:be:34:7b:6c:a1:2b:b5:
ff:12:83:c8:b9:07:d8:10:fb:94:c8:23:2e:77:e8:a3:18:bd:
6a:b1:5a:18:6c:47:e7:8c:ec:c4:43:92:20:c6:d9:fa:0d:da:
78:43:1b:fe:d1:57:d9:ac:2c:36:2a:55:16:75:8f:f5:9c:6b:
19:1e:0b:62:00:f7:5d:64:91:62:94:62:a3:29:ea:d5:84:2b:
48:12:0c:bb:26:c9:f9:43:76:30:25:97:69:7d:21:0a:84:00:
7e:91:31:a0:94:53:0f:6b:fa:ac:61:22:87:26:e6:07:62:c7:
ba:c2:5c:b7:5e:7a:1c:5e:b6:0c:a0:dc:5a:87:b9:83:ce:dc:
37:5f:3d:8f:1e:31:ca:6e:69:f6:d9:e9:76:fe:67:c8:39:86:
2f:47:ec:26:a6:e8:1c:19:91:26:b9:2f:06:57:be:14:68:0a:
c2:57:2f:00:cd:46:fc:3d:a3:d3:d0:39:63:14:16:ed:88:7f:
28:20:90:98:9a:3d:df:0d:f9:ae:32:5b:6e:fc:a4:b9:b9:e7:
2b:34:73:63:f0:69:30:f5:4b:27:39:db:0d:fa:72:bc:08:75:
fe:44:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:04 2025 by rpki-client