Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209263.roa
File: AS209263.roa (raw, json)
Hash identifier: GpfppLG0HoyUD31CwDfhWF6/MJ0Fh2zd/8pd8P7Rd9I=
Subject key identifier: 56:47:C3:07:12:05:74:7B:24:E6:59:C4:4D:BE:B9:7F:E2:B5:16:C2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6521A485A31F271EC332C48CFC7E23C7B6A519E1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209263.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 209263
IP address blocks: 2a06:a005:470::/44 maxlen: 48
2a06:a005:1070::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:21:a4:85:a3:1f:27:1e:c3:32:c4:8c:fc:7e:23:c7:b6:a5:19:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=5647C3071205747B24E659C44DBEB97FE2B516C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:2c:b3:b3:d7:f2:25:79:4d:db:6f:5a:0d:
c9:f0:29:78:e1:02:df:69:0e:8e:95:de:24:ad:2c:
d7:6e:c1:0f:84:67:7a:ad:06:8d:11:7c:ff:ac:7b:
69:2f:bd:c4:30:d8:28:09:f5:2a:33:fd:cb:1f:ea:
bb:4f:f4:f0:3f:7b:4b:ae:1c:fe:37:43:54:70:12:
0f:f7:6a:8d:64:c9:e9:78:2a:13:24:ae:f6:88:4f:
c9:2e:f3:42:52:6f:da:2c:3c:80:a0:87:70:74:80:
21:82:fd:0b:46:ab:47:9d:4f:a2:f8:5d:31:85:ae:
9a:2d:78:d8:72:39:25:7d:c0:f5:52:34:4c:eb:ee:
b0:90:10:8c:74:6e:01:e2:69:41:8b:04:f8:af:85:
e4:b0:65:c8:78:a9:de:a8:c3:56:a9:d0:cc:b0:eb:
a6:29:d4:74:b7:42:08:6c:a6:0e:c8:f1:61:73:f8:
a4:d9:8f:76:30:bc:3a:40:e9:93:0b:4e:c8:2a:d1:
b1:a6:15:4e:36:90:12:f7:00:b9:94:eb:94:03:48:
7f:1e:7d:49:97:93:9a:61:1e:02:7b:1f:fa:60:e1:
66:c1:2a:81:3d:7b:5d:0c:83:fa:c5:68:d5:0c:2c:
d5:9c:d5:18:23:5c:e6:b0:f4:e0:53:1f:6a:ee:47:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:C3:07:12:05:74:7B:24:E6:59:C4:4D:BE:B9:7F:E2:B5:16:C2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209263.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:470::/44
2a06:a005:1070::/44
Signature Algorithm: sha256WithRSAEncryption
6f:d9:b2:49:2a:12:1b:c8:2e:dc:84:71:38:24:e0:4c:21:9c:
ed:a0:47:f2:04:2e:2b:48:4e:ca:4f:9f:8e:1f:26:96:0f:cc:
d1:3f:39:45:fe:38:06:09:6d:72:20:18:9d:2b:47:29:38:12:
e7:cf:61:0e:c6:7c:64:b5:91:21:0a:1a:87:7a:7b:da:04:76:
83:c6:b3:e1:65:50:7d:58:22:a0:7c:c1:0c:e4:c0:26:a3:70:
b7:8b:47:a8:08:6c:b1:10:02:1e:63:80:91:c5:be:67:8d:ef:
8f:b3:fa:50:ee:14:f1:82:ef:b6:b7:d0:7c:15:68:e7:6d:84:
1a:d0:20:af:40:97:e6:59:91:de:d6:2d:3e:2c:7c:30:14:a9:
66:d3:5d:83:b5:92:1d:da:1c:6e:d5:69:6d:f3:a1:f8:fa:9b:
07:a2:12:da:87:ed:0b:ce:9e:79:94:75:46:d2:eb:ce:86:12:
3d:2a:52:e4:cc:07:68:a2:82:35:d5:eb:4f:78:30:58:49:bc:
92:6c:3d:ee:38:a2:93:a4:80:0b:f4:46:d3:e6:ab:0c:d1:ad:
b4:0d:df:a6:56:8e:41:6f:28:82:6c:7c:d1:b0:d8:b1:62:e0:
11:61:88:03:77:8f:a7:fd:70:fd:1a:92:f9:b0:01:da:fa:32:
d6:8c:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:44 2025 by rpki-client