Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: PXX+9qMpv+5G6m0ZVqz/D7APZv8bWE1PnED2t+h0le4=
Subject key identifier: C0:9F:AD:13:59:BE:E8:0B:83:38:B0:78:A2:EF:29:43:82:F7:1F:73
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3166F4673FB093966B957F3731C21AC5E1B0B04A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208690.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 208690
IP address blocks: 2a06:a005:2050::/44 maxlen: 48
2a06:a005:2060::/44 maxlen: 48
2a06:a005:2070::/44 maxlen: 48
2a06:a005:2080::/44 maxlen: 48
2a06:a005:24e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:66:f4:67:3f:b0:93:96:6b:95:7f:37:31:c2:1a:c5:e1:b0:b0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=C09FAD1359BEE80B8338B078A2EF294382F71F73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:3b:10:0b:8b:4e:5a:69:e0:e7:0a:da:b0:
4f:e8:2b:7c:17:9f:7a:af:f1:c7:a0:e8:f3:3c:b0:
56:2a:3e:4a:52:1a:78:b5:9b:c6:35:29:31:b7:7a:
ce:73:9b:89:85:55:6d:92:dc:7b:42:d9:b0:c0:84:
8c:05:f0:53:26:ba:45:98:8a:f2:17:a3:91:df:08:
ca:f4:df:9b:f7:41:b0:5f:a9:b1:be:56:51:f3:e5:
37:a0:d7:ec:00:1f:dc:22:23:4c:b0:ee:33:ad:e8:
59:e3:d2:17:28:49:81:98:7c:9b:7a:36:7a:e4:a6:
7e:8f:2f:53:4f:04:6c:04:68:ab:52:44:3e:f7:50:
db:9d:dc:55:e7:b3:9b:6f:ca:79:91:ad:d1:f1:a5:
2f:e4:06:6d:8c:a7:9f:35:5b:0a:b3:40:f5:bd:bb:
39:a3:bb:f9:37:45:1d:ca:39:2c:56:2c:4d:42:f9:
69:f6:9e:e6:8a:33:86:b9:75:d3:cf:5f:71:8d:cf:
65:c8:e6:68:05:d5:33:bd:c3:6e:2c:2e:cb:bb:07:
cb:6f:eb:58:c1:57:60:bf:8e:5a:56:1b:8e:af:94:
76:96:37:ec:5f:f0:17:66:cb:ef:46:b9:2f:86:1e:
fc:6e:d6:e8:a8:a2:4a:5b:4c:ed:c2:25:74:7b:cf:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:AD:13:59:BE:E8:0B:83:38:B0:78:A2:EF:29:43:82:F7:1F:73
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2050::-2a06:a005:208f:ffff:ffff:ffff:ffff:ffff
2a06:a005:24e0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:4f:cb:b6:48:56:00:43:0d:25:99:9a:e8:34:6b:74:d8:f3:
38:6c:6d:e8:39:e5:2b:4f:c5:24:e8:b0:22:41:1f:30:05:8a:
35:9d:3e:4a:e1:6c:c0:4f:48:08:c5:54:ce:f7:5f:9f:c4:ef:
70:5f:37:ad:55:6d:f5:a1:31:0a:25:3c:bb:40:c6:08:b0:0b:
a9:c5:2f:bd:85:ce:be:c0:b1:65:06:c4:bf:63:b2:88:f4:26:
f4:74:3f:de:f1:5a:74:3a:84:c8:3c:d6:6b:df:6a:48:6d:26:
e3:eb:f0:ea:bb:cf:ff:45:bd:36:a9:94:20:cc:ef:8a:ad:57:
39:f7:39:b6:fb:a9:df:0e:d6:f5:f2:60:09:e9:8b:91:1b:16:
42:cd:d7:e8:b7:b2:f4:aa:7f:d6:64:10:e3:78:70:c8:93:62:
50:ae:9d:08:84:c4:c3:c8:a6:14:ac:7c:d1:e3:06:49:71:2e:
0c:96:8f:49:96:26:a0:71:63:7d:cd:d0:2c:e8:88:00:41:ab:
af:f8:27:4f:61:87:1a:a6:25:49:d0:f7:e8:f1:f1:5b:03:44:
59:a4:04:46:a4:a4:42:60:c9:a9:6d:e0:9f:85:18:c2:17:58:
ae:2a:b7:bc:86:2b:5c:77:a3:79:97:97:c8:77:a7:11:a1:51:
48:dd:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:20 2025 by rpki-client