Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208584.roa
File: AS208584.roa (raw, json)
Hash identifier: f3sB7dj2fcaDSMpqjbWZ3ybCr14V+ujfdqrIU1L8VWo=
Subject key identifier: 89:B4:7D:36:AF:92:4E:5E:60:96:95:8D:9B:66:1F:86:A9:1F:E2:83
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4B4360C83962F1B1BDCA0F2BF71308B4D51052F4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208584.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 208584
IP address blocks: 2a06:a005:460::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:43:60:c8:39:62:f1:b1:bd:ca:0f:2b:f7:13:08:b4:d5:10:52:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=89B47D36AF924E5E6096958D9B661F86A91FE283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:00:2a:34:f9:48:fd:fe:7c:4b:2d:19:56:
d1:55:c9:41:1b:1c:ab:fc:ac:f2:9b:2b:e1:ed:fa:
86:33:b4:3c:8e:96:d7:38:67:41:7c:d9:8c:ea:7f:
dd:16:e8:88:46:e6:98:88:31:bc:87:b1:53:d0:11:
bb:df:85:92:c5:2a:fd:38:6c:f9:b3:1e:3b:ad:cf:
92:03:7e:3c:4b:ec:4f:0f:4e:81:47:d6:83:5f:ca:
4c:ab:6a:f5:8e:0d:d5:f0:b0:88:b8:6b:00:3f:45:
75:65:81:5a:5b:8f:fa:23:69:92:0f:71:d6:4b:ac:
1f:21:9e:98:2f:61:29:b4:84:bb:f6:9d:60:f2:a9:
6c:6f:61:fd:be:b3:70:9b:b8:e1:66:3c:69:5c:d2:
4b:3e:7c:bd:dd:4b:46:f4:cc:db:9d:bd:31:45:39:
c8:fa:a0:1a:6a:21:ad:6c:50:b9:77:92:fa:e8:49:
31:bc:0a:45:1e:72:f1:10:f8:d7:c7:39:7c:09:ac:
e8:b4:1f:b8:3c:ad:80:cd:a5:2d:14:f1:ce:ae:da:
81:3b:2b:fb:63:ad:c0:3b:de:da:a5:82:a2:70:21:
55:0a:98:0e:7d:f8:ae:d1:9b:71:68:f5:ba:0c:50:
7a:0e:1f:fd:41:8f:4d:fd:ee:59:45:b1:06:61:f9:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:7D:36:AF:92:4E:5E:60:96:95:8D:9B:66:1F:86:A9:1F:E2:83
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:460::/44
Signature Algorithm: sha256WithRSAEncryption
4b:54:c5:d0:1f:85:e6:bd:34:7d:ba:7e:42:f4:c7:2e:2b:2a:
e9:28:34:50:a3:e5:01:94:74:6d:96:20:41:6f:a4:c1:da:10:
ee:ad:93:10:d9:ba:0c:60:b5:be:82:24:57:f6:25:bd:f8:09:
b7:7d:f6:b9:e1:b4:d4:ab:8a:da:62:dd:4c:fa:99:26:39:77:
a7:34:fd:50:be:8d:ff:80:c9:85:83:1f:0d:5f:b8:90:a6:0a:
32:6c:43:0c:0e:58:f3:ad:0a:54:24:e6:2e:dc:b5:4c:5f:27:
9a:07:e7:c8:0a:31:f0:a5:f6:e9:2a:13:3a:54:c5:87:85:0d:
2e:50:e6:4a:8b:95:45:ee:2f:36:7b:5c:4f:25:18:89:6b:fe:
23:af:71:4b:16:d3:e6:d7:93:02:71:14:85:17:8a:5f:b0:28:
53:f4:37:45:1a:0a:83:8f:c8:f0:5e:57:a4:67:a8:57:7a:19:
ad:e1:d2:f8:bf:37:1a:8e:21:05:5c:ca:d0:2b:1b:6c:0a:b1:
14:85:04:9d:30:79:87:fb:5f:1f:2a:78:8b:5d:39:c8:96:64:
20:49:ed:b1:a8:b8:ee:ef:9a:2d:f6:4d:d3:eb:c4:5f:8a:44:
13:9e:e7:96:7e:0d:cb:1b:1d:2c:b4:39:95:7b:ca:8f:bf:f8:
e2:b5:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:24 2025 by rpki-client