Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210023.roa
File: AS210023.roa (raw, json)
Hash identifier: AuFPszDGT3sarrjIJQqi+P2AChpSJSPka8hjmbUgUrM=
Subject key identifier: 0C:8E:B6:DE:B5:43:25:EB:5B:A5:D7:75:28:0F:45:36:CA:22:B2:B0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2E336F1FEDE4E75C33EC91C3249137C9D83A6FC9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210023.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 210023
IP address blocks: 2a06:a005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:33:6f:1f:ed:e4:e7:5c:33:ec:91:c3:24:91:37:c9:d8:3a:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=0C8EB6DEB54325EB5BA5D775280F4536CA22B2B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:ff:81:44:ba:c4:9f:91:1f:97:16:d4:be:
46:61:89:80:48:ba:26:35:d4:9b:ba:7a:df:0f:d5:
6b:7d:9c:74:68:f6:74:cc:50:82:89:3c:5f:9c:5e:
33:95:5b:83:34:b9:1b:9d:cb:8d:e6:06:c4:b4:1a:
a6:a6:f2:23:bf:d3:15:eb:a1:d0:b5:30:7b:96:47:
56:64:eb:ce:e7:27:20:54:ae:01:20:a6:49:e8:c7:
34:0d:a9:b5:58:18:fc:e8:80:6e:0f:c0:55:5c:31:
60:c5:10:61:2c:ae:63:35:45:52:f3:ee:bf:ff:b7:
13:5c:04:c1:3a:52:6e:69:0b:f6:51:70:78:15:f3:
d6:63:f1:23:7b:0e:b2:da:5b:d9:6e:45:92:74:7f:
6d:f2:08:34:cd:72:0f:90:36:f8:1c:d1:18:af:90:
e4:45:30:ce:6e:25:ff:44:d5:37:94:39:0c:df:c9:
8f:1b:23:25:90:b9:7e:4f:94:4c:9d:85:48:f5:82:
09:10:01:f9:de:7c:f6:ac:ed:1f:fe:5e:58:6d:7e:
84:f1:60:13:de:2b:3c:51:0c:2f:c4:18:9f:73:9b:
16:4b:56:71:41:42:df:3b:f4:7e:b9:aa:4a:de:59:
1a:2e:e4:fb:b0:88:9a:05:23:5e:68:c3:4d:73:e5:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:B6:DE:B5:43:25:EB:5B:A5:D7:75:28:0F:45:36:CA:22:B2:B0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005::/48
Signature Algorithm: sha256WithRSAEncryption
05:86:6b:e3:ed:c1:a5:6a:65:d5:87:9a:96:6f:d2:94:a2:1a:
cb:87:ad:be:8c:96:fe:d2:06:eb:7d:c5:98:18:38:12:3c:12:
ae:30:02:e4:61:fe:34:a9:e2:aa:e1:84:aa:b2:72:79:86:84:
7a:79:c9:e1:04:3b:66:fb:7f:a2:f2:dd:8e:0a:e3:29:3d:d9:
54:77:7b:07:25:a7:bd:e0:86:b9:02:4a:36:fd:3e:6d:95:ed:
84:de:85:2f:75:e4:26:22:a9:22:14:72:a9:dc:fd:68:66:40:
90:b2:df:52:e5:9d:90:86:66:43:15:8e:7d:fe:00:78:10:98:
63:8a:db:88:cf:0c:be:c9:d3:ac:2b:5b:3a:1a:7d:ea:65:c7:
f4:43:95:f6:07:60:ce:5f:eb:29:e3:e9:18:76:32:19:3c:81:
7a:8d:2f:46:f1:a8:53:2c:47:b9:22:a6:92:e2:0c:24:63:e7:
66:8e:cb:c4:3e:46:d8:96:de:b1:8c:f2:49:bb:03:c1:cb:bb:
dd:03:72:3b:7c:9f:4d:45:c5:65:f6:87:14:17:26:7f:f8:eb:
5f:e7:e6:98:29:ba:13:35:bd:97:21:b7:02:0d:ca:36:ed:46:
21:35:7a:0b:41:99:11:45:bd:91:ac:08:3a:b0:c7:10:34:14:
5e:9f:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:57 2025 by rpki-client