Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209165.roa
File: AS209165.roa (raw, json)
Hash identifier: gtBHIwmdEaODgcwPLQ6MAkyYJ1npXiKlMtmTcogwkmc=
Subject key identifier: 3F:98:00:55:76:38:62:30:72:8C:84:30:9F:8C:3E:42:F2:3E:5B:F2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2CD28487869A22B8B933C929972E5A90F0D2FFA1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209165.roa
Signing time: Mon 26 Dec 2022 06:37:53 +0000
ROA not before: Mon 26 Dec 2022 06:32:53 +0000
ROA not after: Mon 25 Dec 2023 06:37:53 +0000
asID: 209165
IP address blocks: 2a06:a005:26cc::/47 maxlen: 48
2a06:a005:26ce::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d2:84:87:86:9a:22:b8:b9:33:c9:29:97:2e:5a:90:f0:d2:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 26 06:32:53 2022 GMT
Not After : Dec 25 06:37:53 2023 GMT
Subject: CN=3F98005576386230728C84309F8C3E42F23E5BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:d2:b5:03:6e:ac:59:e7:11:01:a0:5a:e2:
c1:83:25:04:33:b5:19:86:94:61:4e:08:42:01:cf:
d0:a1:34:4f:05:58:a3:65:63:de:0c:2a:96:e8:6f:
90:84:fd:a4:97:31:0c:21:85:cd:ea:79:fd:3b:0b:
e2:db:2b:af:ec:ea:17:78:30:6b:68:0b:24:0f:a0:
af:c2:ea:2c:80:6e:23:7f:29:17:28:49:44:22:7a:
1b:a3:06:ee:48:d9:ae:37:0c:3b:1a:df:c9:f4:da:
dd:e3:59:80:8d:04:15:dc:fc:04:55:38:6d:bb:6b:
c3:ce:95:a9:af:1d:23:08:d9:31:e3:10:ea:1f:fe:
2d:a1:9d:8b:14:71:81:a9:fb:75:f1:02:c5:0d:4f:
16:f6:de:23:68:52:f9:6b:de:83:e9:48:61:b1:c8:
cd:2d:79:05:6c:f2:43:42:33:0f:79:a9:50:ad:71:
f5:bf:48:51:36:8f:92:37:68:7d:b9:e5:08:59:32:
7e:27:bf:9a:e2:db:40:5c:46:16:3e:37:85:e8:e6:
3e:12:06:cd:4b:51:aa:9e:d0:91:13:b2:1b:18:8a:
7c:28:57:60:ff:57:1f:d3:e5:b0:d6:22:33:a6:67:
7b:48:00:1f:62:12:83:5b:23:b8:95:45:11:22:f3:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:00:55:76:38:62:30:72:8C:84:30:9F:8C:3E:42:F2:3E:5B:F2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209165.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26cc::/46
Signature Algorithm: sha256WithRSAEncryption
2c:cd:68:2a:ff:50:ea:23:43:c6:5f:03:6b:05:2d:2a:95:94:
3c:b7:39:6b:73:9d:d6:ae:7c:68:03:9b:04:67:56:03:d3:fb:
a6:45:43:f3:fe:b8:2a:df:d2:09:37:c8:a1:f6:e3:78:85:e9:
61:09:5c:af:7f:be:19:43:3b:2d:42:42:10:6e:99:95:e1:db:
a3:4c:66:5c:31:35:ba:fe:78:e3:f1:95:94:a7:3d:47:51:1d:
a0:dc:19:47:99:a8:82:6f:af:0a:79:ac:d9:74:db:88:a3:5f:
e0:ac:77:f2:9b:f6:c8:20:c8:17:55:66:70:46:28:5e:c5:f7:
ab:46:5e:b1:89:32:cd:5a:50:9f:b9:a9:5c:78:94:b7:64:06:
96:44:b0:4d:6a:1a:a9:e6:8e:5a:c6:60:f5:94:4a:5e:83:18:
a3:2f:52:ac:27:c7:46:47:71:f0:82:69:5a:7f:33:c2:9d:09:
63:21:aa:b2:a8:01:ab:6d:6d:7b:df:d8:35:f3:64:84:a2:50:
30:8c:35:b2:f6:7e:7a:4c:73:f8:14:44:35:48:25:70:14:cc:
80:0c:b1:a6:3f:62:fb:06:c3:22:08:89:f1:d7:16:81:9d:af:
d6:03:40:78:8b:d9:a5:b7:e2:f8:e3:4a:93:be:cd:c6:0e:5d:
87:19:10:b1
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIULNKEh4aaIri5M8kply5akPDS/6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjYwNjMyNTNaFw0yMzEyMjUwNjM3NTNaMDMxMTAvBgNV
BAMTKDNGOTgwMDU1NzYzODYyMzA3MjhDODQzMDlGOEMzRTQyRjIzRTVCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVjdK1A26sWecRAaBa4sGDJQQz
tRmGlGFOCEIBz9ChNE8FWKNlY94MKpbob5CE/aSXMQwhhc3qef07C+LbK6/s6hd4
MGtoCyQPoK/C6iyAbiN/KRcoSUQiehujBu5I2a43DDsa38n02t3jWYCNBBXc/ARV
OG27a8POlamvHSMI2THjEOof/i2hnYsUcYGp+3XxAsUNTxb23iNoUvlr3oPpSGGx
yM0teQVs8kNCMw95qVCtcfW/SFE2j5I3aH255QhZMn4nv5ri20BcRhY+N4Xo5j4S
Bs1LUaqe0JETshsYinwoV2D/Vx/T5bDWIjOmZ3tIAB9iEoNbI7iVRREi87VjAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUP5gAVXY4YjByjIQwn4w+QvI+W/IwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA5
MTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcCKgagBSbMMA0GCSqGSIb3DQEBCwUAA4IBAQAszWgq/1Dq
I0PGXwNrBS0qlZQ8tzlrc53WrnxoA5sEZ1YD0/umRUPz/rgq39IJN8ih9uN4helh
CVyvf74ZQzstQkIQbpmV4dujTGZcMTW6/njj8ZWUpz1HUR2g3BlHmaiCb68KeazZ
dNuIo1/grHfym/bIIMgXVWZwRihexferRl6xiTLNWlCfualceJS3ZAaWRLBNahqp
5o5axmD1lEpegxijL1KsJ8dGR3HwgmlafzPCnQljIaqyqAGrbW1739g182SEolAw
jDWy9n56THP4FEQ1SCVwFMyADLGmP2L7BsMiCInx1xaBna/WA0B4i9mlt+L440qT
vs3GDl2HGRCx
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:20 2025 by rpki-client