Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209862.roa
File: AS209862.roa (raw, json)
Hash identifier: AwitXl+T2CzJdCaWTXEFM85MkMjpa7gdfD4q4te+FV0=
Subject key identifier: 69:06:B8:00:9C:A3:AC:81:18:C1:6B:1B:AD:E5:41:1E:1A:A9:A0:C6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1A1A3A897558A933E5A5427E5D3DFEBAFB2A5AF8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209862.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 209862
IP address blocks: 2a06:a005:45b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1a:3a:89:75:58:a9:33:e5:a5:42:7e:5d:3d:fe:ba:fb:2a:5a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=6906B8009CA3AC8118C16B1BADE5411E1AA9A0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:c0:07:1f:32:48:7f:78:48:d4:98:83:f2:
c7:13:be:d6:04:61:79:df:cf:1d:72:c3:24:be:5d:
cb:f6:70:19:7d:33:73:c4:5d:e4:26:65:76:bf:d6:
2c:8f:93:8b:29:1d:1e:32:48:82:cf:94:26:09:af:
07:7e:52:1c:c2:2e:bc:36:63:56:25:62:d4:12:32:
22:07:07:29:80:8c:f8:de:50:31:9a:c8:a8:70:42:
0c:5f:bc:cc:9b:a9:76:e7:ed:87:17:6b:dc:a3:61:
8a:56:7c:57:cf:4f:ee:68:99:eb:84:2d:44:71:e1:
65:cd:43:3c:59:82:6d:66:6b:ae:d7:63:6c:09:32:
c9:d6:f4:c0:a4:1d:ce:36:87:8d:a8:51:9b:a2:71:
04:26:1e:10:45:90:cb:29:ea:80:bf:34:fd:16:a1:
22:ec:3f:9d:f6:36:a6:db:fe:7b:76:1b:07:be:aa:
63:68:44:b5:56:87:31:1e:4d:9a:11:ab:6f:1a:23:
52:02:16:c6:52:a4:22:8d:75:0e:6a:f1:f5:37:7f:
68:f0:1a:11:ba:0a:2d:d7:61:91:5b:5a:ee:92:a9:
9a:a5:c3:6a:f3:1c:60:cc:54:73:10:4c:d5:c2:9c:
b1:7d:c6:85:1e:a0:f6:91:4d:aa:28:20:9f:e0:bc:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:B8:00:9C:A3:AC:81:18:C1:6B:1B:AD:E5:41:1E:1A:A9:A0:C6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45b::/48
Signature Algorithm: sha256WithRSAEncryption
5b:a5:87:64:7c:dd:9b:94:97:e5:02:31:ee:12:a1:8a:fb:1b:
29:8b:34:40:d4:aa:81:22:74:5b:2b:d1:75:05:af:27:cd:5b:
a3:d8:ff:2b:b8:cc:f7:d1:79:ad:2f:d7:30:5e:08:32:93:d5:
09:1b:cb:4c:29:87:fb:34:16:dd:be:64:24:d9:e4:46:1d:b2:
72:08:f0:6a:e8:f2:26:0f:a1:e9:48:8d:74:68:f2:2d:43:66:
c8:39:c9:3a:58:ff:6e:ec:2b:d9:e6:ba:85:52:06:05:a8:78:
6c:71:74:24:cc:6b:74:d0:5f:4c:94:fe:39:4d:3c:c6:22:d3:
67:60:83:0f:e0:c9:7b:36:7d:0f:e7:74:ad:70:2f:ab:d2:32:
5f:5f:59:91:fe:30:19:37:6d:7d:bb:09:6f:1d:53:30:25:a2:
3a:a9:15:ae:03:d4:20:1b:34:73:36:fd:2a:64:a7:cb:fd:0f:
0e:e7:c7:91:87:4a:36:3c:81:5c:c6:82:70:c1:9b:b8:71:7f:
8c:50:19:fc:b2:30:26:fa:e5:1b:61:90:0f:a5:54:dc:2f:54:
a5:61:b3:f3:85:70:ac:ba:dc:0b:f2:7e:0b:7a:1f:04:59:cf:
fe:e0:ed:72:32:fd:a7:33:92:05:ce:46:ef:05:d7:69:08:af:
07:31:dc:94
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUGho6iXVYqTPlpUJ+XT3+uvsqWvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTRaFw0yMzEyMjAxNjU2NTRaMDMxMTAvBgNV
BAMTKDY5MDZCODAwOUNBM0FDODExOEMxNkIxQkFERTU0MTFFMUFBOUEwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7MAHHzJIf3hI1JiD8scTvtYE
YXnfzx1ywyS+Xcv2cBl9M3PEXeQmZXa/1iyPk4spHR4ySILPlCYJrwd+UhzCLrw2
Y1YlYtQSMiIHBymAjPjeUDGayKhwQgxfvMybqXbn7YcXa9yjYYpWfFfPT+5omeuE
LURx4WXNQzxZgm1ma67XY2wJMsnW9MCkHc42h42oUZuicQQmHhBFkMsp6oC/NP0W
oSLsP532Nqbb/nt2Gwe+qmNoRLVWhzEeTZoRq28aI1ICFsZSpCKNdQ5q8fU3f2jw
GhG6Ci3XYZFbWu6SqZqlw2rzHGDMVHMQTNXCnLF9xoUeoPaRTaooIJ/gvL3bAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUaQa4AJyjrIEYwWsbreVBHhqpoMYwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjA5
ODYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQRbMA0GCSqGSIb3DQEBCwUAA4IBAQBbpYdkfN2b
lJflAjHuEqGK+xspizRA1KqBInRbK9F1Ba8nzVuj2P8ruMz30XmtL9cwXggyk9UJ
G8tMKYf7NBbdvmQk2eRGHbJyCPBq6PImD6HpSI10aPItQ2bIOck6WP9u7CvZ5rqF
UgYFqHhscXQkzGt00F9MlP45TTzGItNnYIMP4Ml7Nn0P53StcC+r0jJfX1mR/jAZ
N219uwlvHVMwJaI6qRWuA9QgGzRzNv0qZKfL/Q8O58eRh0o2PIFcxoJwwZu4cX+M
UBn8sjAm+uUbYZAPpVTcL1SlYbPzhXCsutwL8n4Leh8EWc/+4O1yMv2nM5IFzkbv
BddpCK8HMdyU
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:04 2025 by rpki-client