Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210387.roa
File: AS210387.roa (raw, json)
Hash identifier: Q6qt2Z9qHZ9G0HBdk4EKkgS1Q8OhMabYuZmLfis64wY=
Subject key identifier: 7A:DA:1E:C1:F9:FC:B6:7C:68:2A:53:58:B2:24:C9:14:85:1A:C1:D8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 11D979B3EF9ADBDE15CA0CF6EE2661420356A173
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210387.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 210387
IP address blocks: 2a06:a005:435::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d9:79:b3:ef:9a:db:de:15:ca:0c:f6:ee:26:61:42:03:56:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=7ADA1EC1F9FCB67C682A5358B224C914851AC1D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:76:08:e0:18:a9:50:62:90:03:e6:d8:bb:
42:fd:9a:f9:77:e3:d7:81:d2:f0:b3:73:76:cd:f9:
83:d2:e7:a1:ef:6f:30:ae:06:61:13:6e:07:60:33:
c1:dd:cd:9d:63:bc:71:23:de:36:ea:96:4f:a0:71:
75:7c:4a:28:f5:8c:76:b5:25:ae:d3:85:f9:e2:ee:
c0:04:e6:1c:65:a6:89:ea:c6:97:6b:6e:33:ef:c5:
c2:33:6f:b9:3d:0b:a2:20:f8:7e:8e:28:bd:72:95:
74:c4:7b:b4:86:e4:b6:95:8e:a5:21:76:79:8c:ec:
e7:b9:1c:68:d9:89:95:28:37:43:48:0c:96:11:66:
e8:10:b2:d3:a0:ed:23:84:ce:ff:43:01:72:9e:48:
0b:5d:da:0a:e1:a4:c3:ca:8f:f5:08:7d:5e:c2:2f:
ff:4b:dc:39:23:f3:9a:58:34:b5:39:3e:3f:7c:4a:
fc:14:61:ec:e7:be:82:72:ad:76:8f:7f:4d:12:99:
d4:31:ee:93:71:1e:3b:fd:48:ef:ed:26:3d:2f:50:
6d:79:ac:65:e1:08:90:7f:f3:7e:eb:03:06:01:6c:
38:e6:1c:f8:5d:6e:89:9c:66:ed:16:5a:24:27:3f:
0f:11:a9:62:29:93:a1:09:fa:cf:95:67:0f:e9:51:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:1E:C1:F9:FC:B6:7C:68:2A:53:58:B2:24:C9:14:85:1A:C1:D8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:435::/48
Signature Algorithm: sha256WithRSAEncryption
79:a4:1d:6d:99:42:5d:23:b8:2f:39:7b:b3:66:40:e4:af:f1:
48:44:bf:f0:42:da:31:3b:86:0e:fd:54:e5:f4:de:2c:e2:d8:
94:2f:6b:f0:eb:54:3d:9d:ba:aa:28:3b:8e:e3:46:54:b2:cd:
87:8a:73:fc:17:84:97:a6:49:b4:93:6c:9b:44:0c:2b:28:19:
93:b8:b5:93:fb:2d:1f:a8:3d:c0:a1:18:98:5b:00:0e:43:84:
21:9f:92:80:5e:04:c3:b9:97:77:16:f5:11:6f:24:dc:5f:5b:
e4:10:e0:f7:fa:40:b7:7f:06:95:96:00:19:cf:f6:29:3c:6f:
8f:6b:28:9b:cf:7c:d6:3b:c5:c2:0a:d1:4b:f2:a8:e4:ca:c7:
a9:d7:e7:59:9f:87:b7:d0:d2:2b:34:e2:86:2f:b4:88:f2:ee:
c3:72:32:f3:ff:dc:54:06:fc:8a:51:f3:e9:43:f8:32:7b:ce:
96:5d:79:f2:50:88:0d:2e:a2:4c:60:0f:90:69:a0:af:a4:9f:
a8:ef:f9:b2:45:ba:7d:fd:8c:9e:7a:eb:a9:95:db:a1:ab:c8:
c8:8d:22:17:36:c9:46:7d:90:30:c3:5c:09:a8:50:df:e9:6a:
95:07:c5:bd:35:99:3a:c9:77:35:30:18:b0:65:5b:0f:c5:f8:
6e:4c:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:58 2025 by rpki-client