Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209556.roa
File: AS209556.roa (raw, json)
Hash identifier: ATL0WVjiVL1X4+AoK1PiLt0Y6mUg2rypr9l4X6C6LhU=
Subject key identifier: E9:8A:0A:07:62:0C:42:8D:BB:74:94:AE:B6:C1:CA:37:C0:C2:93:5B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0F9FA48BE27C4B433A53DAA9237EE4AD9C7A41CA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209556.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 209556
IP address blocks: 2a06:a005:a80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9f:a4:8b:e2:7c:4b:43:3a:53:da:a9:23:7e:e4:ad:9c:7a:41:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=E98A0A07620C428DBB7494AEB6C1CA37C0C2935B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:24:bd:6b:66:a2:8c:28:af:72:5b:fd:72:
75:d8:9d:25:69:0c:2d:bb:7d:e4:9e:7c:2f:4b:26:
da:92:c1:ad:1a:2a:7d:e1:8d:90:76:13:8f:b5:ac:
41:bf:d0:5c:28:8a:08:a1:dd:e5:e1:a0:42:70:58:
2c:e7:47:54:60:fa:4c:f7:23:bb:44:61:70:e1:69:
18:23:e5:fd:2e:0a:7f:f1:c1:e1:29:ba:46:9c:9e:
ce:ff:da:cb:91:91:92:18:70:28:16:f4:d1:8b:66:
de:bc:ae:53:80:73:e9:2c:30:4e:85:03:f6:44:6b:
e7:17:55:dc:03:cc:b8:be:da:55:19:b5:c6:ba:e1:
57:69:7b:fa:0b:f9:e5:8f:b2:33:68:f5:65:ba:57:
51:fb:b4:91:b3:aa:9b:cb:d8:7e:90:f9:48:9b:23:
e7:f8:e2:7c:98:d2:20:99:bc:6a:f4:e4:ca:f8:3c:
73:7f:73:76:bf:01:88:91:cf:18:f6:1f:b5:b1:96:
c4:48:76:b0:43:e0:9d:2a:44:f7:a4:c0:1e:ae:48:
2b:ef:7b:95:e2:6b:b3:73:b7:f4:57:bd:fc:b8:cd:
bc:59:38:b9:b7:ed:7d:8a:dc:f3:f1:b5:42:c1:55:
a0:dc:64:cf:d2:89:3b:87:07:52:69:58:1f:96:ff:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8A:0A:07:62:0C:42:8D:BB:74:94:AE:B6:C1:CA:37:C0:C2:93:5B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a80::/44
Signature Algorithm: sha256WithRSAEncryption
2f:b2:3f:72:d6:c5:08:1e:e8:5b:46:fc:1a:a4:45:63:e5:f1:
e3:05:ff:07:9f:74:19:d5:02:3e:fb:7f:bd:04:3a:e9:a7:6f:
63:4b:1c:e2:54:b3:8a:d2:84:fa:a7:fa:22:96:ed:8a:2d:5b:
d4:8a:b7:33:f6:06:6f:9c:93:65:2e:ca:e3:92:29:69:56:bd:
5f:ac:2b:e8:a9:1a:54:1f:0b:10:16:a1:0f:8e:0d:ac:e6:12:
74:3f:62:a2:66:c5:f8:55:bf:2c:3e:47:42:9c:04:03:cf:76:
bc:84:65:ee:8e:f7:66:0e:9c:16:8b:47:2b:18:9b:a2:3d:14:
8c:6c:82:48:6f:74:c7:cc:60:80:c6:ec:af:23:19:ba:b4:6e:
8b:77:ba:e7:87:45:2e:84:0f:a9:7a:dc:19:bb:3b:0c:e0:bf:
34:e4:16:0e:87:59:85:ce:d5:5d:95:0d:de:06:3c:3f:fb:ac:
94:4f:9e:27:34:71:fe:6f:12:c1:48:4c:3e:09:c2:d4:7f:72:
ae:9a:c6:f2:e1:8c:42:32:b9:93:b9:99:78:95:f2:3a:7f:3a:
04:be:0b:b3:6e:08:ff:c3:2a:32:71:4a:12:75:1f:db:e6:66:
aa:e4:9f:7f:6b:28:df:3f:5c:95:0a:ce:91:8e:c6:6d:f2:90:
48:6c:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:21 2025 by rpki-client