Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210370.roa
File: AS210370.roa (raw, json)
Hash identifier: gwlRG4DZHpZGkw8a66PFNhZlIC2aHDDgBkErDlrC1cY=
Subject key identifier: E4:CF:9E:20:7F:08:D1:88:6C:38:33:59:CC:4F:F3:1C:AF:E4:49:6B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 61678DA2B71663CB48314C28D838194AB3B27ACC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210370.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 210370
IP address blocks: 2a06:a005:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:67:8d:a2:b7:16:63:cb:48:31:4c:28:d8:38:19:4a:b3:b2:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=E4CF9E207F08D1886C383359CC4FF31CAFE4496B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:f0:ac:e1:b4:29:44:48:cd:8c:f3:50:71:
78:0b:4e:49:95:ac:db:d6:40:eb:13:4d:63:d1:1a:
62:58:ba:df:bb:76:69:df:74:c3:33:f7:8f:7d:97:
e5:fe:0f:8b:aa:31:c0:b3:7d:14:91:70:b2:4c:15:
8f:1c:cd:c0:08:ed:4a:63:a8:c3:ec:26:0d:f5:78:
08:9a:06:fe:b6:de:98:29:8d:ce:ad:5f:c4:2b:4b:
25:04:13:4a:36:48:d8:db:6f:a8:d0:c9:01:68:1c:
72:77:59:c6:ab:f2:ca:7e:ab:13:a5:f6:91:7d:0e:
e5:5c:02:ce:09:71:d4:8a:dd:77:4f:7f:7d:0c:fc:
38:f8:33:9a:22:a8:4c:3e:61:83:67:38:46:81:3d:
d0:1f:d7:3b:bf:d4:51:be:b2:28:df:f3:0c:a1:b9:
c3:69:58:5d:1c:e7:f0:08:51:9b:b0:7b:a1:f7:d6:
5e:e8:ff:0e:5e:7a:3d:f5:a6:4d:96:b6:87:5b:2c:
ed:15:00:68:da:02:dc:dd:94:7b:1e:77:aa:40:33:
50:97:0b:6b:79:05:81:8a:99:a0:f6:cf:83:5d:40:
03:19:07:d5:c3:14:88:e6:a6:24:a3:da:ea:c0:80:
8d:6d:25:0d:8a:f0:84:c4:37:81:9e:30:f2:ab:ff:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:9E:20:7F:08:D1:88:6C:38:33:59:CC:4F:F3:1C:AF:E4:49:6B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4::/48
Signature Algorithm: sha256WithRSAEncryption
55:15:58:91:85:51:44:91:48:da:e5:aa:a0:61:65:e4:a7:05:
27:ec:6f:9c:c8:5e:58:63:65:76:4a:b3:94:b6:9e:47:3c:26:
55:0b:1e:d9:cb:e0:b1:e4:70:92:5d:e8:d4:aa:2c:1f:f6:82:
6a:e9:3c:b8:df:06:d6:c2:52:f3:03:78:f4:56:06:ac:e5:a1:
14:82:38:f1:ff:71:7d:43:ad:70:25:49:09:a0:64:ed:42:45:
7a:82:d0:11:39:ac:66:ff:a8:f4:85:b6:47:fb:e0:8b:0d:8c:
4e:19:bd:ca:22:0c:95:6e:d6:78:66:b5:0e:f3:66:f4:93:30:
bd:97:c9:f5:3c:51:18:7e:d4:36:06:93:b4:4d:8c:17:1f:f4:
69:f0:cb:2f:2d:64:cf:55:ee:5e:b4:d3:a6:8f:1a:65:a6:e1:
29:9e:70:6d:80:4c:dd:21:5a:04:ad:1b:79:61:ad:cb:65:00:
74:b7:4c:c3:f1:2a:b0:72:79:d1:52:ae:6f:dd:3d:eb:b0:f6:
69:e2:0a:54:81:2e:e2:87:63:01:74:43:fc:b6:19:9c:94:9c:
d1:a8:1d:5c:5e:12:e4:cd:39:17:79:a5:19:0b:b3:69:c5:7c:
69:ba:f0:49:dd:79:f9:d9:0b:95:d1:57:1c:24:5e:f3:5f:8f:
c0:77:64:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:33 2025 by rpki-client