Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208385.roa
File: AS208385.roa (raw, json)
Hash identifier: gu0j8fCpnA5rqdyvGZZy0qh5kApM/AbIR3bAd8N0ato=
Subject key identifier: 31:8C:74:9B:02:1F:8F:10:43:31:52:2C:31:1D:02:FD:7A:12:3B:95
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 149634DEF72A2C80B6DDD139BE49E0503D1269F2
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208385.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 208385
IP address blocks: 2a06:a005:854::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:96:34:de:f7:2a:2c:80:b6:dd:d1:39:be:49:e0:50:3d:12:69:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=318C749B021F8F104331522C311D02FD7A123B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:1a:db:0f:f4:79:4f:74:3f:ee:b7:9f:82:
d6:44:ed:66:cd:2c:81:a7:3e:7e:6f:50:64:75:d4:
86:75:61:55:c9:ff:36:0a:ca:2e:0c:2a:f6:d6:76:
c2:18:76:23:7c:dd:e3:8a:46:2a:9f:9e:6d:9f:d2:
6d:bd:f8:84:ec:df:71:ae:36:87:95:22:e8:38:19:
bf:03:4a:52:ac:db:38:99:c6:06:91:78:ec:7e:f9:
de:37:13:99:00:74:b7:78:2e:56:dc:be:b9:8a:18:
8f:03:e8:ae:81:0b:74:65:d9:80:3d:e7:e1:6a:9a:
5e:8e:a9:94:24:19:67:11:ee:0f:73:0c:ae:16:fe:
f8:a4:5a:3d:c8:48:e7:4f:0b:40:9a:3a:71:6d:4f:
7c:2c:19:63:6e:c6:3f:8e:43:ce:fa:11:f4:b7:95:
69:e6:96:e3:ac:47:49:6f:84:26:29:e8:33:88:b6:
48:4a:20:f0:08:cd:c8:b8:ea:48:30:8f:a9:60:62:
ba:d6:0e:9d:da:10:24:9e:30:b0:d8:ac:ff:8c:88:
91:39:a4:92:e2:8b:fb:d1:24:a0:9f:98:32:ea:2e:
d1:07:56:00:d3:ed:cd:72:38:e1:58:6e:cc:30:93:
02:c9:a6:9f:a7:f2:de:ab:92:6a:15:4e:8b:71:e9:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:74:9B:02:1F:8F:10:43:31:52:2C:31:1D:02:FD:7A:12:3B:95
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:854::/48
Signature Algorithm: sha256WithRSAEncryption
d6:ad:a5:06:82:d8:6d:ae:e8:dc:1a:92:f7:cf:c9:de:9e:90:
e0:0f:4d:cc:eb:42:ea:18:34:10:5c:8b:41:11:34:1a:0d:b0:
1c:7e:6d:01:f7:d7:53:19:4e:cc:ba:01:e7:f9:36:64:9b:9f:
71:60:70:a8:c5:f7:25:a8:ff:b4:b0:ec:e8:74:15:38:22:1d:
97:a3:b1:9a:eb:65:74:1f:6c:e9:88:bd:4b:6f:98:92:9d:71:
f5:71:a8:70:12:d7:4b:48:f5:a0:c8:56:da:8d:11:1f:66:a9:
a3:9f:7f:ca:4c:67:e6:f4:31:14:a3:0c:af:d3:2a:90:0c:39:
05:82:e0:e6:30:2c:4b:70:e7:d2:d9:05:8b:2a:57:f7:d4:ae:
b3:fd:9b:21:ae:b6:d5:c4:c3:29:66:ea:5c:00:9c:dc:ec:7d:
f5:2e:5e:7f:1b:da:76:45:27:aa:c5:c0:8a:c1:87:10:01:94:
24:b9:1c:3a:08:d8:00:2d:40:f8:cd:e1:91:c7:4e:43:c6:f7:
f6:e7:b1:fd:6a:3f:9d:d4:18:3e:ad:8c:82:61:fd:aa:d6:9a:
8a:1f:24:1f:3a:63:8d:0f:84:8f:46:e7:37:33:27:48:8b:dc:
23:58:be:c5:af:37:00:67:d9:ad:cf:de:43:a4:67:27:1d:c1:
35:4e:f1:fd
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUFJY03vcqLIC23dE5vkngUD0SafIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTRaFw0yMzEyMjAxNjU2NTRaMDMxMTAvBgNV
BAMTKDMxOEM3NDlCMDIxRjhGMTA0MzMxNTIyQzMxMUQwMkZEN0ExMjNCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOxrbD/R5T3Q/7refgtZE7WbN
LIGnPn5vUGR11IZ1YVXJ/zYKyi4MKvbWdsIYdiN83eOKRiqfnm2f0m29+ITs33Gu
NoeVIug4Gb8DSlKs2ziZxgaReOx++d43E5kAdLd4LlbcvrmKGI8D6K6BC3Rl2YA9
5+Fqml6OqZQkGWcR7g9zDK4W/vikWj3ISOdPC0CaOnFtT3wsGWNuxj+OQ876EfS3
lWnmluOsR0lvhCYp6DOItkhKIPAIzci46kgwj6lgYrrWDp3aECSeMLDYrP+MiJE5
pJLii/vRJKCfmDLqLtEHVgDT7c1yOOFYbswwkwLJpp+n8t6rkmoVTotx6eFzAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUMYx0mwIfjxBDMVIsMR0C/XoSO5UwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA4
Mzg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQhUMA0GCSqGSIb3DQEBCwUAA4IBAQDWraUGgtht
rujcGpL3z8nenpDgD03M60LqGDQQXItBETQaDbAcfm0B99dTGU7MugHn+TZkm59x
YHCoxfclqP+0sOzodBU4Ih2Xo7Ga62V0H2zpiL1Lb5iSnXH1cahwEtdLSPWgyFba
jREfZqmjn3/KTGfm9DEUowyv0yqQDDkFguDmMCxLcOfS2QWLKlf31K6z/ZshrrbV
xMMpZupcAJzc7H31Ll5/G9p2RSeqxcCKwYcQAZQkuRw6CNgALUD4zeGRx05Dxvf2
57H9aj+d1Bg+rYyCYf2q1pqKHyQfOmOND4SPRuc3MydIi9wjWL7FrzcAZ9mtz95D
pGcnHcE1TvH9
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:09:35 2025 by rpki-client