Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208548.roa
File: AS208548.roa (raw, json)
Hash identifier: NoriLpPNdiS+FDu9MS/RDF2/YRvOIDgYsFYLVZ860+s=
Subject key identifier: 5D:69:FE:9F:49:4E:0A:36:25:92:94:14:B5:23:75:E8:0D:BB:C7:36
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7D6ED500FB40FB76AE60A2A9BBA1985F43C31DF3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208548.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 208548
IP address blocks: 2a06:a000:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6e:d5:00:fb:40:fb:76:ae:60:a2:a9:bb:a1:98:5f:43:c3:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=5D69FE9F494E0A3625929414B52375E80DBBC736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:48:26:19:2e:b1:aa:ac:68:e6:f6:25:5b:
af:20:c7:5e:1e:a4:92:ee:03:84:0d:a8:97:37:ee:
74:03:7d:0e:fc:49:55:78:99:f8:cb:9a:7d:f3:f3:
9d:4b:71:30:15:61:8b:87:ff:23:c6:79:1b:d3:18:
f8:a2:b2:5b:d2:9d:c0:80:37:7f:b6:10:c1:0f:2c:
7f:a6:a6:0f:8d:fb:5b:ec:b7:82:19:b1:d3:42:8d:
b3:47:d0:5b:89:66:d4:d0:16:79:cb:af:eb:c5:50:
5a:c2:9b:ed:0f:78:04:71:ea:c3:05:f9:27:61:89:
a4:68:99:a4:0a:8a:c5:9c:81:bd:15:95:19:5d:36:
f4:ea:d1:4d:4f:0e:b2:f3:04:fd:b8:e3:c7:38:62:
ef:ee:b8:eb:93:74:da:5d:24:e6:88:5d:4f:73:f4:
c9:da:9b:4a:83:5f:05:50:d2:36:a3:ce:3d:f9:82:
2d:d4:df:f0:10:46:d4:6b:90:7b:a3:10:1a:d6:2b:
9d:cf:01:5e:ca:7d:07:6f:b4:5f:23:19:ac:9b:5a:
d8:00:94:00:67:7c:34:aa:29:f4:44:a6:d2:b2:67:
6e:bf:21:75:9f:74:05:35:9e:09:aa:b8:74:55:7e:
90:71:4e:b9:0a:f3:66:68:e8:6a:63:e0:56:37:f0:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:FE:9F:49:4E:0A:36:25:92:94:14:B5:23:75:E8:0D:BB:C7:36
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:300::/40
Signature Algorithm: sha256WithRSAEncryption
65:65:78:51:9a:7e:ed:2a:66:07:bb:6d:75:10:d8:25:4f:01:
69:8a:ea:42:04:69:3e:90:13:83:15:d7:7f:dd:06:f5:fe:b4:
05:04:97:69:9d:d8:af:96:59:d4:0f:b8:e3:d2:7b:dc:de:b6:
c6:91:fb:2a:8d:05:86:72:5f:3c:39:80:ba:e6:f6:82:a6:f3:
6a:b9:06:b9:41:a8:e2:ed:7d:37:f3:d9:f7:28:39:50:91:49:
0d:4b:6d:ed:b1:71:85:94:44:cf:b9:76:8d:c1:f8:d3:09:82:
31:73:d5:f3:17:aa:78:71:fb:5a:0c:08:22:9a:9a:a5:a8:29:
55:40:91:cd:a2:66:4d:e0:07:92:1e:b3:4f:48:54:e6:96:73:
fb:f5:bc:7a:b3:92:6a:a9:bd:13:4f:d6:cc:58:02:da:be:35:
10:0b:87:44:c0:54:cb:1f:ce:d5:6e:ab:ff:69:5a:ff:88:d2:
80:7e:f0:96:53:2e:87:be:63:41:d5:1a:8e:26:0f:e2:04:8b:
3e:76:c7:3e:b3:00:37:47:31:68:1a:0b:db:24:87:99:46:5e:
cb:67:9e:bf:d2:47:81:62:0f:91:83:f3:b8:95:c9:99:6b:50:
08:4c:9f:fd:93:3b:4b:21:f6:a6:18:6f:06:1a:84:1a:30:91:
4e:fc:8e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:16 2025 by rpki-client