Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210260.roa
File: AS210260.roa (raw, json)
Hash identifier: lCgZQ1VdoWYIldBkeaipT+/KJj5zka2k+DbEgMMcMpc=
Subject key identifier: F5:91:90:9C:6A:F8:D8:86:57:9D:88:55:EE:21:F3:81:6A:11:53:CC
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1F0A720FF2B6E8AC59F02C96D7AB19CEA498BDD9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210260.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 210260
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a005:20::/44 maxlen: 48
2a06:a005:30::/44 maxlen: 48
2a06:a005:40::/44 maxlen: 48
2a06:a005:50::/44 maxlen: 48
2a06:a005:1650::/44 maxlen: 48
2a06:a005:1a20::/44 maxlen: 48
2a06:a005:1a30::/44 maxlen: 48
2a06:a005:1a40::/44 maxlen: 48
2a06:a005:1a50::/44 maxlen: 48
2a06:a005:1a60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0a:72:0f:f2:b6:e8:ac:59:f0:2c:96:d7:ab:19:ce:a4:98:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=F591909C6AF8D886579D8855EE21F3816A1153CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:4c:7e:93:dc:87:e8:f5:04:15:40:78:d5:
c1:7b:7c:ee:dd:48:d2:ac:65:92:ef:d3:34:3f:a9:
a1:6f:cf:e1:85:d0:82:97:c3:6c:d6:2f:06:26:db:
c9:f1:12:86:8f:1a:ee:e1:1b:4b:5a:d6:68:fa:49:
03:46:06:39:ff:15:1d:af:a4:af:72:00:2d:55:bc:
36:8d:93:c4:57:41:2b:86:67:73:52:96:13:23:20:
f8:fa:6c:e8:41:9f:7e:45:e5:36:23:bc:15:bd:b0:
75:ed:61:ff:8f:2c:40:17:31:78:db:47:44:cb:62:
ae:7e:40:f5:65:46:ed:c7:77:5c:06:ef:2e:40:46:
b5:9c:db:b2:34:3d:88:36:84:cd:d6:b8:6e:cc:65:
f5:95:b8:6a:2c:ca:a2:a0:30:28:c4:31:73:23:77:
c5:c4:0e:a4:77:09:8b:ec:70:f8:5d:59:23:f2:fb:
8e:47:d4:0f:13:9b:f0:77:f3:14:a5:e6:09:b2:a5:
75:66:41:dc:01:c1:31:95:20:60:78:97:6f:08:bc:
61:f7:d9:91:43:c8:29:38:07:6b:73:0e:b5:9e:73:
8e:81:ed:28:fe:05:c4:85:31:4f:d5:d9:2f:a4:cd:
19:78:b9:f4:44:bc:d9:00:cf:c1:23:c4:40:f2:24:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:90:9C:6A:F8:D8:86:57:9D:88:55:EE:21:F3:81:6A:11:53:CC
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:a005:20::-2a06:a005:5f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1650::/44
2a06:a005:1a20::-2a06:a005:1a6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7e:a0:94:39:fd:bf:3b:0a:e5:b3:47:19:9d:a8:c2:ba:3f:de:
0c:cb:b5:43:8f:df:b2:b2:7a:c4:c1:16:74:1b:8e:48:d5:b3:
0a:3e:9d:08:16:f4:cb:b3:12:84:1d:d4:4c:30:83:fd:2f:85:
0e:92:52:f2:06:42:9b:18:cf:ee:ec:41:a0:9f:7d:c5:c7:e1:
06:fb:18:d6:b0:92:2a:ff:6e:d7:9e:b2:3a:25:4f:35:98:65:
fb:cb:59:fe:71:ac:d2:5c:4f:c6:3a:75:f8:d3:60:86:6f:45:
ab:55:86:14:51:4d:b1:cc:d8:7d:4c:a5:0f:29:55:c3:db:90:
6b:83:5c:bd:99:eb:0d:90:76:31:20:e7:b6:c2:1d:7b:bd:7f:
eb:6e:7c:1c:65:54:f8:b7:e3:bd:d1:2c:dc:48:d7:ac:14:7a:
54:3b:7a:62:b2:de:96:1e:e8:2d:27:6e:5a:f2:6c:1f:e8:3f:
b6:91:be:bc:ad:8c:ce:7d:7b:03:f8:7a:3a:c7:74:c0:c8:55:
1b:aa:4c:3d:b5:03:7c:74:a4:ba:74:8d:d3:b8:79:d2:e2:fc:
20:05:49:bc:ca:04:4e:50:07:c5:00:22:28:7e:9f:dd:83:fe:
68:66:ac:28:43:50:4d:91:65:46:99:7b:1b:c1:d5:2e:ba:cc:
d9:6f:75:91
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUHwpyD/K26KxZ8CyW16sZzqSYvdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDBaFw0yMzEyMjAxNjU2NDBaMDMxMTAvBgNV
BAMTKEY1OTE5MDlDNkFGOEQ4ODY1NzlEODg1NUVFMjFGMzgxNkExMTUzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgEx+k9yH6PUEFUB41cF7fO7d
SNKsZZLv0zQ/qaFvz+GF0IKXw2zWLwYm28nxEoaPGu7hG0ta1mj6SQNGBjn/FR2v
pK9yAC1VvDaNk8RXQSuGZ3NSlhMjIPj6bOhBn35F5TYjvBW9sHXtYf+PLEAXMXjb
R0TLYq5+QPVlRu3Hd1wG7y5ARrWc27I0PYg2hM3WuG7MZfWVuGosyqKgMCjEMXMj
d8XEDqR3CYvscPhdWSPy+45H1A8Tm/B38xSl5gmypXVmQdwBwTGVIGB4l28IvGH3
2ZFDyCk4B2tzDrWec46B7Sj+BcSFMU/V2S+kzRl4ufREvNkAz8EjxEDyJCtbAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU9ZGQnGr42IZXnYhV7iHzgWoRU8wwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEw
MjYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/
BEIwQDA+BAIAAjA4AwUAKgYShjASAwcFKgagBQAgAwcFKgagBQBAAwcEKgagBRZQ
MBIDBwUqBqAFGiADBwQqBqAFGmAwDQYJKoZIhvcNAQELBQADggEBAH6glDn9vzsK
5bNHGZ2owro/3gzLtUOP37KyesTBFnQbjkjVswo+nQgW9MuzEoQd1Ewwg/0vhQ6S
UvIGQpsYz+7sQaCffcXH4Qb7GNawkir/bteesjolTzWYZfvLWf5xrNJcT8Y6dfjT
YIZvRatVhhRRTbHM2H1MpQ8pVcPbkGuDXL2Z6w2QdjEg57bCHXu9f+tufBxlVPi3
473RLNxI16wUelQ7emKy3pYe6C0nblrybB/oP7aRvrytjM59ewP4ejrHdMDIVRuq
TD21A3x0pLp0jdO4edLi/CAFSbzKBE5QB8UAIih+n92D/mhmrChDUE2RZUaZexvB
1S66zNlvdZE=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:03 2025 by rpki-client