Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208679.roa
File: AS208679.roa (raw, json)
Hash identifier: UbsfvaCCSGBE2fRsQRWE+nSMSo2RVK3gqx5qpnciHI8=
Subject key identifier: 4B:72:1C:E6:A0:28:EC:DA:3F:2C:AE:59:A7:66:FB:76:6B:C2:95:24
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 374D589C42D536F0F8FA76AA5E476D935917A2AA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208679.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 208679
IP address blocks: 2a06:a005:8d0::/44 maxlen: 48
2a06:a005:9a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4d:58:9c:42:d5:36:f0:f8:fa:76:aa:5e:47:6d:93:59:17:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=4B721CE6A028ECDA3F2CAE59A766FB766BC29524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:49:35:60:4f:fe:50:a7:9c:1d:af:39:8b:
f1:11:92:3f:1e:4e:13:cb:00:30:9f:0f:7b:9a:0d:
8a:b1:d6:86:94:39:04:43:a0:f9:b1:34:c9:c5:2f:
fc:91:67:50:09:80:96:75:f7:b7:1f:b7:3f:49:17:
00:7a:2b:ad:59:57:cd:8c:0c:9a:5d:66:71:0a:6b:
9c:df:02:f6:e4:37:0f:e9:7e:2b:cc:27:51:ee:ed:
d5:7f:ee:15:e1:25:82:22:9b:c9:0f:c5:9a:dd:dd:
6b:ad:73:39:a6:8c:6d:51:d1:bb:c1:36:44:56:79:
69:f1:09:94:0a:67:51:c2:d9:76:10:64:5b:98:72:
02:4b:8d:29:12:82:f0:9f:3c:79:c9:74:e4:9b:0e:
96:48:61:ed:b4:a8:18:af:5c:d4:af:cc:95:3b:23:
91:86:e9:c1:db:7e:cc:de:1e:3e:e3:50:a0:4a:8e:
7d:8c:60:97:41:a0:1d:b8:3e:8b:98:cb:8f:25:14:
a2:92:20:65:05:15:1f:9a:3c:7c:a4:dd:dd:8a:15:
c8:81:18:a2:b9:a9:67:e0:85:e3:87:4e:1f:65:b8:
94:e5:95:9e:f2:42:f0:4f:ea:d0:be:cb:27:b8:80:
e9:94:7f:82:41:09:ad:41:b4:68:12:04:35:57:4e:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:72:1C:E6:A0:28:EC:DA:3F:2C:AE:59:A7:66:FB:76:6B:C2:95:24
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8d0::/44
2a06:a005:9a0::/44
Signature Algorithm: sha256WithRSAEncryption
03:a8:d8:a8:04:29:5e:35:c5:f2:26:3d:8d:f7:a0:80:2e:32:
f0:38:b7:0e:c5:33:d8:61:4e:34:31:aa:85:1f:b3:7a:9a:ff:
5d:bb:85:3b:9e:73:05:0d:8b:0e:fa:ae:65:1e:c8:b6:8e:3a:
64:98:2b:e5:4a:1e:3b:63:17:61:91:39:cf:39:03:27:42:57:
e9:32:5c:bc:13:3d:c7:60:c3:e2:94:d6:d1:5b:dd:03:fa:1d:
d9:94:02:62:e7:6c:3f:e6:ff:aa:7c:33:c9:4d:d6:c4:64:42:
3e:82:e9:8a:5f:19:b1:0b:6e:aa:a3:ec:38:56:27:b8:4e:ed:
51:43:97:e8:38:4e:0a:11:2a:cd:f5:f8:fa:74:8c:06:a7:7e:
57:74:31:35:48:80:48:91:d0:87:11:71:eb:4e:c9:74:25:9e:
e2:f6:60:21:fa:7c:64:7b:8a:c1:f8:63:9a:9c:4d:92:18:96:
0d:c6:f4:15:b1:ac:22:9d:25:6a:f9:55:1b:67:d4:e1:5d:56:
d3:85:9b:a7:9e:52:25:97:8a:b9:b9:d3:51:e8:a6:58:f8:4d:
52:13:c2:81:12:9a:f7:2f:9c:61:fe:e0:5c:8e:16:0d:c2:22:
d8:c2:6a:4f:c4:68:90:22:18:8e:ca:97:68:59:2c:ec:3f:4d:
ad:67:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:37 2025 by rpki-client