Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209310.roa
File: AS209310.roa (raw, json)
Hash identifier: mvco0MRUtYhg5TZ3B0u0Ke7OWudt0IycrtL2830ZamM=
Subject key identifier: 07:B5:66:BF:8B:00:3A:A3:D7:0C:C8:4B:A5:08:30:DE:62:7E:BE:FF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 30AD0A8D1E11C5F559CD9E2968C6A13C75DAFBE9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209310.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 209310
IP address blocks: 2a06:a005:438::/48 maxlen: 48
2a06:a005:439::/48 maxlen: 48
2a06:a005:43a::/48 maxlen: 48
2a06:a005:43b::/48 maxlen: 48
2a06:a005:451::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ad:0a:8d:1e:11:c5:f5:59:cd:9e:29:68:c6:a1:3c:75:da:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=07B566BF8B003AA3D70CC84BA50830DE627EBEFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:ae:d1:25:4a:9e:a6:e9:57:cd:b6:51:a9:
c5:cd:74:50:80:22:b4:1f:d1:8d:d4:6b:47:98:ce:
06:18:68:0d:e7:54:32:dd:ca:f6:68:47:77:52:e0:
bb:57:fa:c6:6a:6c:9d:1f:32:10:84:cc:b3:02:42:
f9:fd:a4:4b:58:d9:4a:d4:d0:59:35:b3:e5:56:0b:
50:38:1f:cd:0d:cf:b4:ce:ba:c7:24:70:45:79:4c:
bb:64:8f:76:4f:09:62:b8:68:e5:4f:1b:b0:31:56:
14:7f:16:6b:f4:4f:8c:5d:31:f8:0c:2b:93:bc:82:
a7:42:62:84:eb:aa:92:ba:88:8b:45:34:c8:0c:6e:
e0:85:f9:81:d2:1a:64:4a:31:4d:3c:8f:f6:b4:8a:
97:e0:cb:1c:17:21:e7:89:4a:c9:e7:92:67:c6:2d:
c9:96:a9:56:d2:d9:06:eb:5b:9b:2c:0a:af:4f:32:
08:96:5a:32:42:f8:ec:b7:74:6b:26:aa:5a:b6:11:
b6:e6:27:08:28:cc:ce:fb:d7:4d:54:6f:8e:13:a7:
64:98:a9:5f:5b:a3:65:df:81:a1:a1:55:f7:0e:22:
5e:0e:95:90:cc:09:79:6c:a1:e7:e1:6a:99:9e:07:
18:fe:1f:71:7d:4b:f2:d8:51:ff:9e:5f:93:95:65:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:66:BF:8B:00:3A:A3:D7:0C:C8:4B:A5:08:30:DE:62:7E:BE:FF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:438::/46
2a06:a005:451::/48
Signature Algorithm: sha256WithRSAEncryption
d6:66:50:8d:a0:30:db:81:82:ce:52:6c:c6:9a:bf:4c:10:cc:
ff:80:00:8a:ca:30:5c:93:10:c7:1e:f0:80:4a:75:58:ee:98:
2f:17:5b:c8:2b:c0:9c:00:cc:5a:54:62:91:e3:fb:2d:d3:b5:
19:3a:02:28:44:92:ec:88:e9:27:33:33:22:6a:c9:37:c0:5b:
4b:9b:30:38:ca:d3:dc:f4:b3:c8:ed:3b:40:4f:12:1a:24:09:
ff:9b:33:87:61:0c:3b:01:10:04:c1:d8:bc:2b:16:17:23:ff:
0c:4b:4c:a4:79:08:a3:33:0e:db:4b:e9:30:f0:e8:02:aa:8b:
78:1b:2b:e4:b1:79:2e:15:6d:62:e2:27:82:32:7f:0c:43:7d:
8b:93:d6:a6:54:2a:46:8e:a0:2d:cf:fb:e0:b1:5d:43:ec:80:
e7:71:92:a0:61:e6:36:6e:d8:6a:15:fa:2e:ee:e5:14:c1:8e:
74:69:57:1c:5b:e4:87:e7:8c:99:00:9f:8c:08:6a:63:f2:01:
05:79:6c:62:2e:f2:dc:9f:9a:c1:da:54:f9:db:40:b1:88:2c:
00:1f:f4:e4:10:d0:14:c9:d5:f1:10:ac:a6:a1:64:66:8f:19:
b9:55:db:60:33:09:d5:c8:48:5b:44:6e:6c:31:a7:0d:13:d9:
52:6a:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:35 2025 by rpki-client