Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210445.roa
File: AS210445.roa (raw, json)
Hash identifier: 6Pmcw406jNd53KLRKbCTCD9LKdyyH4keyW//0iUV1N8=
Subject key identifier: C4:F5:0C:DF:7B:16:3D:BD:40:AD:EA:7A:61:D0:A4:10:DA:4B:AF:58
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2ABC774EBFB1BE327C2144EB2B2A752AB96A98D8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210445.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 210445
IP address blocks: 2a06:a005:f60::/44 maxlen: 48
2a06:a005:2180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:bc:77:4e:bf:b1:be:32:7c:21:44:eb:2b:2a:75:2a:b9:6a:98:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=C4F50CDF7B163DBD40ADEA7A61D0A410DA4BAF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:81:b1:a3:ce:b2:28:f8:03:94:c9:00:e5:
c3:66:17:52:2f:af:4a:60:b9:8f:74:8c:3e:5c:7e:
cf:cd:b9:c9:81:71:fa:c2:97:06:30:34:8d:72:2f:
39:28:c0:0e:b2:f7:1d:48:5c:77:06:7f:2b:65:52:
18:78:8e:c7:b3:db:39:63:e3:ad:07:91:a9:df:7c:
3f:77:c6:91:96:38:67:64:dd:97:e1:d9:bd:2f:36:
d8:fe:6b:6b:f2:6a:a3:e0:0f:71:26:7f:a7:5a:bb:
83:0f:bd:16:cc:b3:82:3a:f3:a5:63:91:6c:e7:98:
8e:13:df:7a:c7:91:0c:35:4d:f9:7c:62:92:a5:a9:
61:d5:30:b1:ee:97:c8:2b:19:b8:4c:16:5b:be:1d:
ec:bb:04:51:7f:5c:01:dd:35:6b:a6:bc:4d:60:39:
4b:e8:bf:13:88:bb:04:b8:53:ac:41:a0:e1:1e:bc:
6b:04:78:33:a1:8a:bf:16:6e:aa:bf:c1:45:60:27:
46:08:31:d6:70:3f:c9:f4:f1:df:17:b1:0f:ba:22:
b5:06:58:33:11:c5:82:a6:ef:32:96:53:24:a8:ca:
79:f8:b0:8b:02:01:e3:21:17:b0:57:55:e3:27:75:
64:c4:2b:92:15:91:8f:3a:97:d9:0f:b4:e2:e2:01:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F5:0C:DF:7B:16:3D:BD:40:AD:EA:7A:61:D0:A4:10:DA:4B:AF:58
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f60::/44
2a06:a005:2180::/44
Signature Algorithm: sha256WithRSAEncryption
88:a7:fc:88:d9:46:d1:1b:d6:eb:91:dc:a1:43:3b:15:e8:51:
00:5b:e0:1e:05:e4:46:68:88:ea:1e:8b:77:96:73:69:95:34:
be:36:b9:80:8c:ed:9f:6a:5d:59:40:3b:68:da:82:12:90:3c:
ef:b2:a1:73:0c:72:e5:74:59:1b:10:74:15:2e:42:dd:73:f9:
48:dd:64:9a:7a:75:48:55:fc:f7:08:f7:dd:65:6d:d8:7a:86:
4f:ee:1a:70:5b:e5:49:38:53:96:e0:7b:15:93:c6:1c:2c:b6:
44:44:ca:a5:84:ff:2f:6b:f8:9e:1c:b1:41:c1:cf:ed:e3:3e:
ae:3b:eb:a0:26:d5:2d:de:8b:0f:5e:4e:6c:24:c9:e6:b3:22:
2e:e9:ee:07:e7:ae:29:ae:f6:a2:1b:07:8b:66:92:52:65:b8:
c8:99:d1:51:6b:28:b7:d1:61:bc:55:dc:e9:28:f8:18:e2:f6:
cf:78:07:a3:06:98:24:1a:43:b1:62:7b:f7:c6:f4:f3:8f:c5:
c5:d4:14:ae:1a:42:e5:2e:d9:84:d2:36:1f:6b:3f:c0:c2:ee:
f0:41:78:65:a6:84:5d:1b:41:71:cc:b5:fd:6c:4e:cd:0e:21:
1b:5d:f5:dd:c6:03:96:ca:2c:8b:61:31:a6:d4:68:e0:12:d2:
7b:39:67:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:49 2025 by rpki-client