Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208529.roa
File: AS208529.roa (raw, json)
Hash identifier: hnQQO2on80I3zjscZmVXubiGm/hHBRPq5LvS7HOw73g=
Subject key identifier: 49:EE:F4:EF:03:E0:5C:06:2C:7D:EE:5D:99:60:15:2F:98:9B:52:21
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 039A4E42815B241B5220906CBA2CFEA9F01B6DD8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208529.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 208529
IP address blocks: 2a06:a005:5e7::/48 maxlen: 48
2a06:a005:c60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9a:4e:42:81:5b:24:1b:52:20:90:6c:ba:2c:fe:a9:f0:1b:6d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=49EEF4EF03E05C062C7DEE5D9960152F989B5221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:84:46:f5:d0:c5:7c:fb:d3:41:1e:36:85:
a2:04:41:a6:5c:8c:96:c5:62:c6:ea:9f:cf:18:78:
b4:54:3e:87:dc:ad:04:3a:79:38:83:b0:0c:71:bb:
82:cc:0d:9d:fb:fd:b1:d6:ca:d8:d7:f8:e0:d2:94:
30:8b:07:9c:6c:57:3b:bb:aa:6c:44:1a:12:72:ac:
ff:b6:30:fa:e7:1c:a6:a6:b1:8c:68:f6:54:db:6f:
83:e6:22:51:42:a0:38:7c:00:fc:04:00:cb:06:cf:
bb:22:7d:37:b9:8c:2f:d9:c8:a2:b8:0a:41:a9:ad:
0d:1f:11:ee:72:71:fb:b7:d4:8e:da:de:99:88:86:
d8:e4:44:0b:4d:b1:25:40:81:56:61:c2:05:99:a1:
e7:82:56:88:6f:00:b4:08:11:e7:5c:7b:03:bc:80:
70:e4:24:38:02:62:1d:86:05:17:ca:2b:32:e5:a5:
e4:29:6c:84:4f:4d:9c:4b:57:89:9b:58:a1:02:d4:
99:36:79:2a:3e:0d:54:18:73:67:ac:32:bd:32:f2:
c6:8a:44:67:25:2e:7d:01:47:0e:09:a0:19:1e:58:
ea:33:f9:c0:34:8b:73:7f:6f:be:75:c3:91:8c:32:
2f:0b:9a:7f:de:38:7b:78:87:6c:cc:82:6c:59:de:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:F4:EF:03:E0:5C:06:2C:7D:EE:5D:99:60:15:2F:98:9B:52:21
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e7::/48
2a06:a005:c60::/44
Signature Algorithm: sha256WithRSAEncryption
ce:dd:29:6b:d5:f4:90:49:6d:80:e3:96:e8:1c:19:84:ab:82:
9c:6b:69:1f:52:98:ce:04:a9:57:af:19:39:f9:05:cc:50:f8:
95:53:31:64:7f:eb:cd:7a:1c:2c:b4:ba:a7:e6:1a:53:2c:cd:
92:e7:3b:2c:53:e4:52:e8:eb:0c:63:4a:fc:92:34:76:c8:0d:
fd:32:8b:81:1c:bd:0b:dc:b7:ed:a4:43:57:59:19:e5:bc:db:
a0:44:17:39:3b:a6:8e:cd:9a:4e:45:d1:3f:52:79:bd:b5:91:
43:d2:c2:cd:65:38:48:83:d8:80:c7:9c:63:19:a7:a8:79:aa:
a7:0c:9d:60:aa:f0:57:27:04:73:5c:da:65:56:f7:e7:d6:09:
80:ab:fb:0a:bd:d8:6e:b8:25:d7:9c:b9:9e:fb:3b:9a:6f:f4:
f0:a9:50:ce:ea:34:97:8b:02:17:f0:99:98:7d:48:b7:f7:b8:
3a:05:ad:fd:a0:67:11:de:cb:0e:21:f6:16:36:71:e3:c7:a0:
de:6b:f2:81:4e:f5:8a:95:91:d5:b3:bd:04:38:ea:eb:db:39:
9c:e3:a0:9f:ce:48:c0:65:0f:6d:f0:75:e8:2b:3c:7e:2b:1f:
5b:37:52:33:28:c9:5e:17:53:f7:f2:4f:de:eb:76:5a:26:33:
7a:3c:ac:fa
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUA5pOQoFbJBtSIJBsuiz+qfAbbdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTRaFw0yMzEyMjAxNjU2NTRaMDMxMTAvBgNV
BAMTKDQ5RUVGNEVGMDNFMDVDMDYyQzdERUU1RDk5NjAxNTJGOTg5QjUyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcIoRG9dDFfPvTQR42haIEQaZc
jJbFYsbqn88YeLRUPofcrQQ6eTiDsAxxu4LMDZ37/bHWytjX+ODSlDCLB5xsVzu7
qmxEGhJyrP+2MPrnHKamsYxo9lTbb4PmIlFCoDh8APwEAMsGz7sifTe5jC/ZyKK4
CkGprQ0fEe5ycfu31I7a3pmIhtjkRAtNsSVAgVZhwgWZoeeCVohvALQIEedcewO8
gHDkJDgCYh2GBRfKKzLlpeQpbIRPTZxLV4mbWKEC1Jk2eSo+DVQYc2esMr0y8saK
RGclLn0BRw4JoBkeWOoz+cA0i3N/b751w5GMMi8Lmn/eOHt4h2zMgmxZ3hmNAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUSe707wPgXAYsfe5dmWAVL5ibUiEwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA4
NTI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcAKgagBQXnAwcEKgagBQxgMA0GCSqGSIb3DQEBCwUAA4IB
AQDO3Slr1fSQSW2A45boHBmEq4Kca2kfUpjOBKlXrxk5+QXMUPiVUzFkf+vNehws
tLqn5hpTLM2S5zssU+RS6OsMY0r8kjR2yA39MouBHL0L3LftpENXWRnlvNugRBc5
O6aOzZpORdE/Unm9tZFD0sLNZThIg9iAx5xjGaeoeaqnDJ1gqvBXJwRzXNplVvfn
1gmAq/sKvdhuuCXXnLme+zuab/TwqVDO6jSXiwIX8JmYfUi397g6Ba39oGcR3ssO
IfYWNnHjx6Dea/KBTvWKlZHVs70EOOrr2zmc46CfzkjAZQ9t8HXoKzx+Kx9bN1Iz
KMleF1P38k/e63ZaJjN6PKz6
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:32 2025 by rpki-client