Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209710.roa
File: AS209710.roa (raw, json)
Hash identifier: rDUkqzqWaTV33kQ/YlRymvz1e7CBtzvi0vxnvF2cLOg=
Subject key identifier: 1D:76:3F:B7:EC:A3:D7:EF:BD:7F:7F:47:E7:8C:EA:45:FF:01:AD:6A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 09F29AEB85882E4834BA50E72778F80EB4ACC66E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209710.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 209710
IP address blocks: 2a06:a005:610::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f2:9a:eb:85:88:2e:48:34:ba:50:e7:27:78:f8:0e:b4:ac:c6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=1D763FB7ECA3D7EFBD7F7F47E78CEA45FF01AD6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:c0:67:9a:ff:c7:c7:5f:24:09:0a:cb:b9:
cb:40:d3:ee:8f:2f:a5:fd:7c:b3:fb:d9:16:17:e3:
a5:30:04:c2:8c:6d:63:d0:75:4e:b0:be:3e:fc:81:
35:34:54:7f:b3:66:5d:ac:9b:0d:35:47:81:63:cd:
67:b1:d4:e7:5b:53:69:9b:3b:5b:c3:16:c3:c9:2b:
95:d8:a9:b8:d9:f4:cd:69:74:83:1f:4a:90:d7:90:
44:81:1d:3a:04:f9:8b:96:0c:4d:14:9a:71:a4:af:
62:ff:1d:76:6c:8e:01:cf:0b:84:c0:6c:67:7e:95:
5a:53:1c:c2:d1:ab:fe:74:46:45:c1:e8:df:70:28:
76:0d:00:5c:dd:3d:b6:d8:4f:a5:73:50:cc:de:27:
86:d9:1e:6a:0e:86:2e:5d:5a:7d:7e:d6:4d:a2:a2:
ca:ee:2d:d4:f2:c5:b6:9f:94:2a:64:75:04:ab:0a:
a1:bc:df:73:37:e4:f9:77:55:65:2f:8e:a9:95:b7:
0a:2e:04:ab:d4:c7:10:4e:67:61:be:d4:ff:c9:8b:
7a:63:99:e1:a5:6a:92:ba:e3:6f:03:91:29:f2:6c:
f8:f4:fb:e8:f9:15:13:5d:45:1f:17:34:c0:36:b6:
95:f4:eb:50:47:84:29:64:6f:20:e5:29:6d:5a:56:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:3F:B7:EC:A3:D7:EF:BD:7F:7F:47:E7:8C:EA:45:FF:01:AD:6A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:610::/44
Signature Algorithm: sha256WithRSAEncryption
92:c2:8b:c1:2c:94:17:75:24:98:85:af:1f:04:64:e9:f4:ba:
86:2f:25:f4:b0:45:30:4a:7d:30:d0:15:a4:56:61:d3:f7:5b:
ec:04:15:e2:f2:4d:18:c4:5b:fb:06:2f:ad:cc:98:8b:97:46:
9e:5d:be:81:72:a7:9d:27:da:f3:dc:d0:b6:74:32:ac:22:b4:
35:78:7f:5d:ad:4e:db:e5:22:30:c1:fa:f9:e5:ef:58:38:a1:
dd:b0:3f:0c:2b:8d:91:56:6d:ba:0f:94:62:1d:63:44:61:a2:
62:7a:79:5f:32:06:ff:c1:1a:c1:45:80:be:2b:a0:75:11:2c:
dc:eb:a4:30:52:97:8f:64:fc:58:54:66:d5:77:2d:10:30:70:
4a:cf:25:1a:ca:30:ba:e2:a8:46:c7:7a:99:60:b6:f9:a0:29:
3f:80:70:43:45:e8:9f:23:3c:51:f0:0b:6b:b7:af:60:77:a9:
f5:8d:bd:82:1c:ee:ea:a9:23:7f:74:0d:45:1d:e5:d7:d5:93:
10:46:e2:4e:72:ef:5a:78:2d:c1:01:60:4a:0f:e9:96:48:39:
7c:5f:d1:ba:a0:8f:fd:2b:7f:0c:5c:30:a4:0d:5e:e3:55:2d:
1d:e7:4a:fe:74:e5:76:b1:19:40:14:19:a7:4f:a5:77:ad:e2:
4c:7c:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:06 2025 by rpki-client