Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209294.roa
File: AS209294.roa (raw, json)
Hash identifier: VtXBAANDN6iAYzFiOtZhKXtMUvkuh9CtNqEC+VdSm6Y=
Subject key identifier: 7F:CC:A1:46:84:90:D3:C0:8F:B3:0D:69:55:7B:4D:5A:A9:2B:7B:0C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5BF300DBB7D5000653309B5D9BE63E7DEF0D7781
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209294.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 209294
IP address blocks: 2a06:a005:17e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f3:00:db:b7:d5:00:06:53:30:9b:5d:9b:e6:3e:7d:ef:0d:77:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=7FCCA1468490D3C08FB30D69557B4D5AA92B7B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:b9:3d:e7:c2:b1:df:2d:93:7b:a1:91:92:
42:b1:97:d3:af:8b:98:8c:e5:4a:77:62:92:c9:cf:
16:81:0b:fd:33:1c:3c:a6:62:30:62:6f:7c:55:b0:
11:82:e3:09:5d:1f:9c:56:44:2c:7b:35:15:13:f2:
7a:cd:82:9f:29:02:5a:a2:26:ea:b3:09:57:45:82:
e5:fc:1b:7f:e3:9e:a9:61:0f:e1:60:49:83:f8:74:
4d:d9:95:a9:e7:bf:4c:18:13:5c:03:ce:8f:73:e3:
0c:ab:d2:c2:e9:cc:49:c1:22:5c:4b:41:fd:0b:a3:
1f:e2:4f:39:92:43:a1:21:9c:5c:69:4a:72:d0:82:
6a:cc:f1:4a:e5:85:e2:3b:24:0c:f0:a5:2d:b9:d9:
0a:e1:13:de:6d:9c:30:0b:d6:9f:43:a4:da:e5:21:
36:35:f6:f6:a3:e1:0b:ff:08:54:b9:04:4c:4e:b9:
89:71:cf:70:a8:33:0d:db:23:93:de:05:c4:18:b0:
9c:97:b4:e6:9c:3e:5d:ca:92:9e:6f:59:41:29:8a:
28:4e:99:43:56:3c:f5:d2:67:7b:e1:b3:7d:77:53:
46:2d:e3:9f:ff:17:e3:30:f0:32:93:d2:c5:2b:02:
07:9c:de:0d:1b:a7:7b:b6:17:c6:d2:a8:7a:ab:e2:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:A1:46:84:90:D3:C0:8F:B3:0D:69:55:7B:4D:5A:A9:2B:7B:0C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:17e0::/44
Signature Algorithm: sha256WithRSAEncryption
c3:3e:68:b7:95:76:8c:8b:eb:df:70:a0:4d:e7:f2:e3:09:0a:
3a:37:5f:ca:55:4b:78:9a:8b:6c:86:14:23:b3:08:0f:bb:6b:
bb:d2:73:95:e5:c6:80:12:41:3a:8f:75:0e:e1:9e:88:0a:2d:
57:d3:7d:69:94:32:60:a0:b3:0f:c0:90:31:98:97:4a:9b:bb:
98:05:7d:bb:03:20:2a:e9:57:34:8b:67:6b:2d:59:0d:68:fd:
5e:b9:bb:5b:fe:9f:35:10:1b:a4:87:01:10:2d:aa:37:d1:ef:
eb:ff:26:81:f2:16:50:c0:55:7b:90:ed:a1:0e:e7:ff:52:3e:
a4:19:1f:0c:b5:87:76:6d:14:7f:b0:00:40:95:f8:46:04:77:
48:6e:69:f9:7c:ae:35:fa:cf:03:27:32:db:85:65:29:ee:7f:
f6:c8:e9:3c:d6:72:05:6a:ef:c8:51:33:c6:f3:08:9d:8d:80:
9d:60:28:f8:8d:4b:a8:fd:a7:8a:ff:6d:e1:e8:c5:12:43:46:
a2:4d:60:b6:c5:d4:e6:48:5c:cb:7f:a4:9a:7e:27:67:cb:eb:
c1:66:c6:75:b3:2c:15:3f:98:51:c4:38:5e:04:7d:94:38:ab:
ef:c7:26:92:cd:62:94:68:bd:c9:3c:bb:ed:cb:1b:66:8a:69:
ce:94:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:40 2025 by rpki-client