Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209419.roa
File: AS209419.roa (raw, json)
Hash identifier: /KfQuzx+LDrE2BjFr/Gjt7a0G+nYjJOW8rHst4TV4ao=
Subject key identifier: C5:C3:0B:1D:19:B6:CE:FC:AD:86:CB:D4:83:CC:01:C1:AE:C2:50:97
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2C23726C88060D8600C69F7D079DCA5B25F3D208
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209419.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 209419
IP address blocks: 2a06:a005:43f::/48 maxlen: 48
2a06:a005:4d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:23:72:6c:88:06:0d:86:00:c6:9f:7d:07:9d:ca:5b:25:f3:d2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=C5C30B1D19B6CEFCAD86CBD483CC01C1AEC25097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:2f:e3:e1:7c:54:72:42:56:98:f6:11:91:
7e:15:3d:57:3b:9d:7a:1f:3c:6a:af:9e:fd:7d:a5:
da:89:66:51:ed:be:d2:3b:a5:20:53:69:7d:2c:fe:
58:4d:67:2f:dd:99:c4:82:5d:a7:c0:e4:fa:37:be:
f8:fc:ad:0f:89:46:4d:d9:03:80:0e:79:7d:ad:18:
84:c5:b1:9b:68:c5:38:62:4a:74:8f:77:6a:7d:48:
af:1b:30:25:42:08:f6:ce:60:aa:74:d7:a5:af:19:
1a:8b:fd:cf:e0:8a:56:40:cc:1d:29:7f:fb:3d:e7:
2b:d7:93:73:87:bb:bd:73:1c:a0:d4:51:97:30:8b:
81:52:c8:f4:24:1d:fa:3d:c8:79:96:42:1e:11:3b:
cd:64:34:69:1b:8a:8e:60:fe:18:57:19:20:73:11:
bf:f5:2d:5d:ac:06:7e:a6:26:7d:6b:78:ac:10:2d:
65:a6:11:3b:50:24:09:0d:7d:a8:8b:cb:a7:e7:74:
66:8e:47:61:95:f1:3a:52:e8:03:a6:d8:a1:8c:3c:
44:37:b5:bf:d1:1d:57:7a:5a:71:0f:01:a0:a5:b8:
6f:50:65:4c:41:e3:27:d3:27:ca:bb:5e:45:29:81:
c8:66:99:27:6b:c6:e4:a1:57:25:00:63:d7:74:35:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C3:0B:1D:19:B6:CE:FC:AD:86:CB:D4:83:CC:01:C1:AE:C2:50:97
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:43f::/48
2a06:a005:4d0::/48
Signature Algorithm: sha256WithRSAEncryption
03:3b:62:46:25:f5:1f:c3:c3:92:a7:67:c0:18:c1:b5:a1:7b:
69:ae:c0:49:64:c5:6e:15:5c:41:37:75:20:db:da:ac:8a:09:
cf:14:d1:98:13:0e:f2:fb:a5:db:e4:bc:55:05:f7:f4:6a:76:
38:b2:61:33:71:09:13:17:95:39:95:ad:c0:96:25:e2:57:8d:
57:07:cd:da:bf:4f:7b:03:bd:9a:51:a7:f4:34:fa:11:40:ca:
cf:ab:4f:c1:79:5c:13:39:73:4b:21:55:bb:d1:6f:2a:80:e0:
95:5b:73:22:bb:fc:b6:72:d5:b2:21:6b:7e:e0:d2:63:c8:b1:
d5:dd:2a:ba:9d:65:4f:5e:c8:eb:16:c6:70:40:f7:e4:bc:be:
0e:aa:6f:ea:05:8b:6d:0e:ac:9d:6e:ed:13:da:b1:8d:ba:9e:
a6:96:55:14:28:bb:89:2e:d6:24:56:24:1e:31:96:da:06:7b:
05:13:f9:71:c6:9a:7b:14:c3:16:c9:27:c7:c6:7b:30:ab:88:
9e:d7:d1:50:1e:39:a9:d2:30:11:77:f7:72:79:0d:07:95:c8:
dd:98:44:00:d2:ee:e5:94:0e:87:3e:af:0c:f7:c4:3e:9b:4d:
eb:86:d9:c8:c0:5e:a6:e6:1f:5f:e2:b2:68:98:c4:38:c3:d9:
63:00:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:44 2025 by rpki-client