Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208985.roa
File: AS208985.roa (raw, json)
Hash identifier: mrKDKWH5p/tlLn3v6PBH9aGYQehUqko7j67JeV2nT5E=
Subject key identifier: A5:FE:08:AE:D7:CC:66:51:5B:08:F3:63:C1:26:49:2F:7A:39:00:24
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 799C569587291F7F37D8EC857EC333CA1971C4CA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208985.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 208985
IP address blocks: 2a06:a005:710::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9c:56:95:87:29:1f:7f:37:d8:ec:85:7e:c3:33:ca:19:71:c4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=A5FE08AED7CC66515B08F363C126492F7A390024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:a9:e2:55:7b:13:b9:8a:90:21:c4:c7:ab:
9f:ec:ed:2b:06:6c:3d:93:3c:ad:c3:d0:d4:39:dc:
5f:6b:f0:90:ce:a3:0d:1c:71:2a:af:e6:e0:29:d3:
40:0c:16:39:76:a6:3c:98:57:b9:65:da:95:90:45:
eb:d1:cb:93:51:b6:de:b2:8a:cc:f4:19:2d:3c:b8:
b0:75:c0:17:34:4c:ec:e3:a7:4b:0d:cb:9b:da:1a:
1b:4e:c8:e8:21:b3:f6:51:38:d2:f4:2f:b9:62:f0:
e4:8a:34:81:05:5d:72:91:85:4a:24:55:bc:25:cc:
e8:16:79:f8:55:38:b8:5a:e1:5e:c8:41:41:a8:80:
61:8b:24:22:b4:ca:40:54:16:4f:ca:74:eb:dc:4c:
48:3e:d2:3f:b4:1e:bb:b4:f2:ba:0c:f3:6f:f5:99:
b0:23:8f:20:6b:eb:58:07:fa:86:1e:71:c2:8f:9f:
75:f1:f5:78:c9:de:6c:88:69:b4:17:a5:01:56:4a:
2a:78:ff:73:7e:92:0c:1a:f2:ad:df:65:df:4a:f8:
ed:a7:00:89:5d:47:5b:73:53:a1:bd:2b:56:46:49:
06:60:dd:16:5d:a3:d5:6b:51:cb:e8:4d:1e:35:67:
7a:e3:c0:12:61:71:bf:ee:7b:12:af:47:a4:34:d7:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FE:08:AE:D7:CC:66:51:5B:08:F3:63:C1:26:49:2F:7A:39:00:24
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208985.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:710::/44
Signature Algorithm: sha256WithRSAEncryption
a3:06:6b:90:9b:9d:93:bd:b1:a9:68:17:20:39:94:21:36:16:
e5:9c:f1:5c:34:27:97:9d:08:85:2a:45:3d:a8:cb:43:66:75:
67:6c:f5:71:d9:ad:54:63:95:7c:8b:1f:d9:44:a5:e3:4c:b4:
ca:3b:31:5d:f5:02:21:bc:17:ae:48:1a:3e:04:da:74:73:22:
3d:75:20:14:73:77:57:2d:91:af:6b:d9:dd:f4:fa:cc:b0:b2:
f3:ea:a0:25:dc:c2:46:ae:0b:0e:6f:49:88:cd:d6:ed:7b:4b:
f4:26:20:e5:19:61:66:a0:66:06:ec:56:87:74:c7:81:63:68:
78:32:14:32:25:6d:e5:a1:a1:43:d5:b8:db:fe:c6:dc:d5:06:
c8:c3:d4:08:69:8e:0a:f0:ef:28:cf:de:ea:8e:d7:4e:99:e5:
01:3a:86:6b:2e:80:5c:6c:d0:6f:23:4d:e9:d3:8a:9c:96:dd:
4e:a7:53:b6:b7:3c:cb:34:2a:9e:11:f4:eb:f8:c6:6f:99:59:
f3:bc:70:df:5e:b6:ad:ff:26:80:93:10:9e:bf:52:fb:4f:fe:
3b:a5:d3:e7:78:d1:7e:c0:37:cf:56:e4:8a:e7:2a:8c:5a:6a:
9c:b2:9c:b6:05:7b:ee:b9:a3:3c:b2:ff:be:09:2d:19:19:21:
db:fb:00:0f
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUeZxWlYcpH3832OyFfsMzyhlxxMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTVaFw0yMzEyMjAxNjU2NTVaMDMxMTAvBgNV
BAMTKEE1RkUwOEFFRDdDQzY2NTE1QjA4RjM2M0MxMjY0OTJGN0EzOTAwMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxKniVXsTuYqQIcTHq5/s7SsG
bD2TPK3D0NQ53F9r8JDOow0ccSqv5uAp00AMFjl2pjyYV7ll2pWQRevRy5NRtt6y
isz0GS08uLB1wBc0TOzjp0sNy5vaGhtOyOghs/ZRONL0L7li8OSKNIEFXXKRhUok
VbwlzOgWefhVOLha4V7IQUGogGGLJCK0ykBUFk/KdOvcTEg+0j+0Hru08roM82/1
mbAjjyBr61gH+oYeccKPn3Xx9XjJ3myIabQXpQFWSip4/3N+kgwa8q3fZd9K+O2n
AIldR1tzU6G9K1ZGSQZg3RZdo9VrUcvoTR41Z3rjwBJhcb/uexKvR6Q011SvAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUpf4IrtfMZlFbCPNjwSZJL3o5ACQwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA4
OTg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQcQMA0GCSqGSIb3DQEBCwUAA4IBAQCjBmuQm52T
vbGpaBcgOZQhNhblnPFcNCeXnQiFKkU9qMtDZnVnbPVx2a1UY5V8ix/ZRKXjTLTK
OzFd9QIhvBeuSBo+BNp0cyI9dSAUc3dXLZGva9nd9PrMsLLz6qAl3MJGrgsOb0mI
zdbte0v0JiDlGWFmoGYG7FaHdMeBY2h4MhQyJW3loaFD1bjb/sbc1QbIw9QIaY4K
8O8oz97qjtdOmeUBOoZrLoBcbNBvI03p04qclt1Op1O2tzzLNCqeEfTr+MZvmVnz
vHDfXrat/yaAkxCev1L7T/47pdPneNF+wDfPVuSK5yqMWmqcspy2BXvuuaM8sv++
CS0ZGSHb+wAP
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:50 2025 by rpki-client