Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209933.roa
File: AS209933.roa (raw, json)
Hash identifier: Nm4tXWHnMXIXoivSuOOQT5hpoILsPmKuoGn14jHH+JY=
Subject key identifier: F9:35:9C:EC:AF:91:27:A1:EC:3A:F1:E0:95:AF:69:E8:45:FB:8D:15
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1501301C42941EEAD8AA66395486794723BDBE19
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209933.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 209933
IP address blocks: 2a06:a005:1164::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:01:30:1c:42:94:1e:ea:d8:aa:66:39:54:86:79:47:23:bd:be:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=F9359CECAF9127A1EC3AF1E095AF69E845FB8D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:09:ff:98:9b:dd:f9:8b:0c:b1:a4:73:76:
30:68:78:f9:7b:38:35:cb:91:89:ac:35:be:fa:9c:
76:36:44:be:54:09:23:17:e2:d7:e2:18:21:c2:eb:
36:59:29:9b:ee:ee:c3:9b:91:80:1c:5f:e5:7f:8f:
3a:b6:0a:e2:6c:37:79:6b:56:d4:54:9b:a4:0e:36:
71:43:45:04:86:50:c0:e8:54:36:23:c1:15:a4:20:
94:f4:14:ef:9a:e0:20:86:15:4f:46:c8:55:c2:84:
46:65:c2:74:9b:75:1c:a6:ba:35:08:80:d5:6c:18:
03:6d:69:a1:d2:99:3d:0b:43:66:01:91:7e:8e:ac:
46:85:f2:db:2e:c4:ab:2d:7e:e3:c2:45:df:f5:57:
58:32:f9:6e:4d:e1:16:bc:49:81:cc:43:05:81:69:
cc:fa:20:54:5d:a9:56:9d:94:e2:e8:8e:ea:8e:33:
a3:68:d5:15:51:a4:02:b0:34:fd:01:68:72:bd:96:
db:6b:fd:ae:c9:5c:79:68:f4:d1:5d:82:c1:fb:b8:
fd:04:62:1a:51:d4:2e:c4:e6:5f:4d:8d:b7:30:00:
9f:f7:23:7c:9d:59:06:d2:51:60:a5:33:8a:e5:34:
bf:cb:83:65:8e:79:c9:f1:0e:e0:89:0d:13:a2:2a:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:35:9C:EC:AF:91:27:A1:EC:3A:F1:E0:95:AF:69:E8:45:FB:8D:15
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS209933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1164::/48
Signature Algorithm: sha256WithRSAEncryption
94:75:76:f8:d2:df:a1:63:21:89:3b:37:c4:bd:96:26:05:ff:
5c:44:79:69:07:85:f0:8c:1a:45:43:ad:04:69:0a:fc:77:75:
b6:1b:5b:90:37:1a:78:3d:90:36:0f:b4:ca:42:d0:56:a2:4e:
ce:6c:f5:41:da:58:4f:87:09:13:0a:3a:6c:88:68:ae:9b:8f:
2d:1e:31:65:a1:30:6b:1e:05:c7:da:b7:21:29:9d:29:28:d6:
f5:e4:95:2c:1c:27:49:ba:10:33:e2:7e:2a:31:23:50:63:0c:
78:db:43:f5:dd:54:5e:68:8a:ac:83:9b:49:b2:7d:02:ce:1d:
63:67:a9:b1:53:ad:83:91:3c:1f:f8:09:fa:45:7d:ae:79:7f:
ef:b9:5d:6c:bc:64:aa:3a:46:8f:b5:7b:18:79:07:36:3f:93:
62:ac:fb:0e:39:99:af:cb:8a:c7:ac:06:f6:19:98:4a:11:fb:
1f:cb:c1:58:74:66:5b:f2:3f:e6:0f:ae:e9:b7:bc:b8:2f:08:
f3:fc:0a:8d:1f:97:9e:34:95:46:64:b5:be:33:49:d1:9e:d1:
01:cd:17:d3:75:83:25:96:61:9a:40:0c:31:b9:ef:9e:d5:1c:
9c:d3:6e:80:a6:a6:0d:4d:f4:aa:47:63:30:43:af:a3:06:b3:
cc:82:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:00 2025 by rpki-client