Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209512.roa
File: AS209512.roa (raw, json)
Hash identifier: SgwofPmOGgurVysG8QaxFHD7DxXLERQ87jc2+AVbA80=
Subject key identifier: 00:76:E3:FB:74:50:78:4C:F2:58:E6:0F:BE:5F:2D:1D:07:54:C0:9D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0C3E42608DDB9E7A2DCB53A84F71A5DF30534074
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209512.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 209512
IP address blocks: 2a06:a005:80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3e:42:60:8d:db:9e:7a:2d:cb:53:a8:4f:71:a5:df:30:53:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=0076E3FB7450784CF258E60FBE5F2D1D0754C09D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:ef:a6:e8:7b:83:88:ef:6e:f9:6c:5b:04:
79:1a:be:8e:ab:03:57:b2:d6:35:50:b9:27:43:af:
5a:d8:e9:1c:a7:0f:c1:91:61:12:8f:2b:49:eb:54:
46:e2:8f:dc:31:9b:0e:df:f2:25:23:4c:7c:9f:05:
5c:dc:98:e5:6d:4b:71:68:e0:0d:54:73:c4:3f:b6:
60:dd:9e:1a:6c:c4:13:84:ee:86:1d:6c:a5:de:ae:
e6:86:84:bf:11:79:c9:15:6b:24:19:6f:cd:ae:99:
33:33:7e:94:fa:d6:a1:6f:a4:03:9c:ed:e8:20:c7:
b2:38:4e:90:5c:b3:c9:01:70:ba:22:77:de:f6:06:
84:1b:cf:56:12:56:be:01:63:49:02:46:fe:68:9f:
31:30:fd:31:c5:bc:93:9f:f3:d8:da:f3:44:64:9b:
c8:da:e5:32:02:74:fe:6e:e3:d1:ed:fa:84:7d:4c:
bb:dd:f4:bc:86:4e:d9:48:08:62:a8:5a:5c:9d:0a:
29:08:14:55:30:0f:0b:c2:b2:cd:75:28:3b:1d:43:
ce:71:3a:90:57:dd:ab:21:91:60:0b:88:6d:50:6c:
e8:cb:1c:9e:0d:93:48:43:ca:59:d0:b9:9e:99:d1:
63:b4:ea:2f:25:7d:75:0f:d7:43:6f:a2:88:ad:c7:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:E3:FB:74:50:78:4C:F2:58:E6:0F:BE:5F:2D:1D:07:54:C0:9D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:80::/44
Signature Algorithm: sha256WithRSAEncryption
c0:96:50:8b:56:e3:60:93:04:42:9c:90:07:55:4e:32:b9:7c:
81:64:bd:ea:ce:75:63:ac:58:b0:66:85:d6:38:30:6e:a1:d5:
c8:32:26:0b:08:41:20:a7:a3:01:a0:93:89:67:78:5e:3b:6b:
03:22:c4:3b:9a:0a:72:8c:5d:f4:3f:e0:54:7d:8a:38:7c:cb:
b6:cf:d2:bc:bd:b3:f9:85:8d:f8:e8:b7:4e:91:49:a3:d8:e3:
e1:87:90:cd:61:80:29:40:8d:50:32:c8:31:f3:73:15:85:f7:
5d:72:09:83:30:70:7f:6a:0a:8f:d7:5b:9d:06:a6:81:b2:f6:
05:a5:d0:93:08:36:39:24:2a:b7:ec:f5:fc:b4:2d:03:cf:bb:
2f:e9:b5:08:a4:7d:0a:70:61:7a:de:f1:c6:79:fb:b2:e0:b4:
cc:0e:22:df:ec:b6:75:d6:c3:10:2e:7f:1b:87:ec:a1:bf:4a:
4d:f5:ea:e7:39:e3:70:35:e1:15:07:aa:26:a7:34:13:f0:fb:
99:02:fa:3d:53:c3:5d:83:7e:c5:a9:41:49:92:c0:77:33:bd:
48:0c:77:31:44:2e:4d:73:55:9f:09:08:69:7f:fa:37:16:b6:
26:df:52:2f:6a:fe:2e:18:fd:dd:f5:e8:ca:76:3a:b0:71:85:
11:d4:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:50 2025 by rpki-client