Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209100.roa
File: AS209100.roa (raw, json)
Hash identifier: 05gVVh4pp2nK+iM8wLrtietwNSp6oGlGNUDArgej0JA=
Subject key identifier: 3B:50:A5:60:60:DA:6D:30:EF:CB:71:C6:8C:11:A6:27:4F:AF:8E:92
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 54CB22D0AD9105BD18433CC22C15E8C14DDFBF0D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209100.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 209100
IP address blocks: 2a06:a005:d50::/44 maxlen: 48
2a06:a005:d60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:cb:22:d0:ad:91:05:bd:18:43:3c:c2:2c:15:e8:c1:4d:df:bf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=3B50A56060DA6D30EFCB71C68C11A6274FAF8E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:0a:a6:60:4d:f6:bc:17:2d:a7:f3:a7:1d:
88:f9:1e:d3:ef:3b:75:f1:08:15:6e:7a:f1:61:ea:
5d:b8:53:79:a2:56:af:4c:0d:28:a8:2f:c5:09:e4:
e7:49:8d:64:0a:9f:e3:0c:54:68:2c:60:71:0d:e6:
70:0d:97:58:cb:df:96:f1:80:e7:b5:7d:8a:f5:13:
9c:d6:d0:81:de:c9:01:78:0c:75:dd:7e:85:12:05:
b6:f6:be:39:ae:0d:fd:86:b0:77:fb:81:52:42:8b:
81:4b:24:e5:3f:4e:45:82:5a:9e:67:b2:40:b1:39:
68:58:be:9f:b6:95:7d:c5:79:2c:69:e1:1c:95:07:
66:c3:24:ea:03:f3:be:f1:86:ef:9b:1e:7b:10:a9:
c3:d0:d1:ee:2b:64:9d:39:33:5d:2f:59:56:24:d5:
63:9f:c3:8e:c0:06:18:8d:71:f6:58:82:07:25:c4:
7a:12:3e:dd:ce:f6:b5:d9:41:5a:78:44:5d:86:93:
ee:2b:6a:cf:a7:ed:fa:a5:f4:01:51:82:d6:50:2f:
af:3f:75:7a:d8:b4:fc:dd:9a:52:d0:32:18:1f:94:
8e:01:f1:24:b8:df:95:3e:bf:f1:a7:55:b0:46:62:
74:97:46:ee:4c:a7:03:01:5b:bb:26:bf:fa:47:3b:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:50:A5:60:60:DA:6D:30:EF:CB:71:C6:8C:11:A6:27:4F:AF:8E:92
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d50::-2a06:a005:d6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bd:3e:b0:5e:86:92:a5:40:ad:97:68:2f:1e:74:d5:f2:6d:ce:
86:c5:fc:3b:50:81:3d:26:a9:6d:8c:1d:07:fc:12:db:4f:d6:
ce:13:52:7b:85:8d:54:2e:4b:94:01:0c:7f:64:d2:ad:07:7d:
8a:18:0d:99:3f:74:ca:c5:d9:7a:a5:1f:77:e0:1c:80:77:e6:
f4:b2:ec:64:6a:da:b3:b6:77:2d:68:3c:24:6f:39:31:f3:6a:
8e:90:12:43:34:56:c5:e8:f1:5d:01:6a:26:87:75:24:e0:40:
6a:b9:e6:d1:a6:20:42:7c:86:9d:5c:36:da:f5:23:1d:fe:0e:
ee:50:ee:c0:62:08:0a:fa:a0:67:ad:c8:3c:06:61:28:5b:dc:
ec:e3:66:bf:dc:3e:0b:c5:29:45:b8:de:67:32:ec:4a:c6:5e:
d7:a9:18:52:52:af:6c:37:05:25:e8:57:a9:dd:51:b2:06:f0:
35:8a:31:cb:93:78:b3:7b:78:f9:78:73:6c:31:ba:0e:07:e6:
c3:3b:97:be:01:b1:a1:3f:a0:14:3c:b6:29:e2:07:9b:4f:73:
90:ef:1d:a3:26:8c:3c:a5:ad:b3:c6:d0:36:bd:1f:36:0f:c1:
c8:04:a6:6f:24:b6:83:fd:16:94:d1:ae:71:33:ba:3f:06:2a:
09:92:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:35 2025 by rpki-client