Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210461.roa
File: AS210461.roa (raw, json)
Hash identifier: zhh0IynbT3ln1cfPrVh92y+0CUIhkMIvaoULWiWK4QA=
Subject key identifier: 5F:4F:84:1A:1D:48:76:40:D5:02:D3:50:4F:EB:C0:42:98:C8:4A:D1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1F6FE6617EFC5CE942ACB94802113CD44224F502
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210461.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 210461
IP address blocks: 2a06:a005:16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6f:e6:61:7e:fc:5c:e9:42:ac:b9:48:02:11:3c:d4:42:24:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=5F4F841A1D487640D502D3504FEBC04298C84AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:36:39:1e:83:f8:7b:4f:7d:4a:3a:cb:6f:
20:70:ff:16:9f:d2:ca:ac:a1:92:5e:04:30:ae:d7:
13:9d:b4:38:37:6e:24:d8:70:0c:cc:af:1d:34:67:
81:ef:b5:d4:f0:ef:84:07:a1:56:7c:82:89:b7:40:
bd:88:5e:47:eb:af:03:e4:3d:37:4a:38:4c:1f:cd:
b0:75:0e:d7:15:4a:e7:a4:9b:c7:48:f0:a5:28:0c:
c5:4f:27:fe:29:82:5b:56:c1:33:ee:4d:16:ce:2d:
69:4f:eb:d2:7b:9c:02:43:aa:ae:e0:0a:89:1b:23:
cd:e9:d6:ef:d0:56:db:90:d1:04:fb:06:42:72:89:
91:0a:04:bb:59:62:01:6a:c7:36:55:93:29:b7:db:
53:a6:80:8a:44:71:5a:62:ca:e9:00:11:9d:1f:1d:
5d:2f:73:b2:33:7f:8a:d9:9e:29:be:ba:cd:4b:8a:
fe:22:a7:59:8c:b4:b8:a0:f2:7b:9d:2b:2d:a9:85:
10:82:b9:b8:2f:c0:a8:08:0b:e5:34:3a:5b:80:75:
af:4e:f2:e5:5c:3f:8b:6a:bb:a9:53:67:f9:72:d7:
7b:79:d6:28:fe:c8:1d:f2:af:23:10:7b:9b:e9:2e:
da:67:6a:2b:60:7e:e3:38:70:25:ec:f5:4c:5a:40:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:84:1A:1D:48:76:40:D5:02:D3:50:4F:EB:C0:42:98:C8:4A:D1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:16::/48
Signature Algorithm: sha256WithRSAEncryption
0d:a1:20:75:46:48:e5:3b:d9:9a:eb:da:ad:df:18:e1:08:41:
f9:ee:04:0c:cb:7f:3f:0d:20:71:44:04:52:ea:7f:f6:41:b9:
36:16:6d:6d:ce:c8:34:c7:db:c2:4a:af:0a:42:57:87:eb:23:
89:3a:78:f9:e6:0f:6a:20:d1:f0:4b:eb:de:03:20:9e:1f:b7:
aa:84:e4:5d:77:24:ba:d0:d3:d7:dd:ea:37:7b:24:38:99:13:
c5:e9:d6:75:0e:37:97:49:0e:60:13:7b:23:c2:02:e4:cb:0e:
ea:cd:6c:4e:a3:e7:19:1a:1a:7e:82:cb:b1:eb:c0:3f:8c:73:
22:0c:8f:ae:8f:58:86:d0:29:53:53:33:94:3c:f7:83:bc:c7:
e4:79:cb:6d:a2:1c:65:1d:b7:44:1f:7c:de:bb:b9:85:cf:8f:
d2:cf:ab:40:44:0c:32:7b:fd:fa:c8:2e:cb:d2:c7:70:0d:37:
4e:c4:b9:2f:0d:22:27:ac:d7:e9:3e:17:4b:db:ba:3e:0a:78:
74:b7:da:a8:c9:0e:1f:0c:ec:05:27:52:22:dc:00:7d:19:4a:
6f:e9:aa:4d:59:24:16:d2:89:87:90:6f:70:be:d4:05:58:54:
ff:04:ed:bf:43:a3:b3:35:20:53:b0:db:2b:fd:94:70:d0:27:
a2:cf:45:a7
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUH2/mYX78XOlCrLlIAhE81EIk9QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTVaFw0yMzEyMjAxNjU2NTVaMDMxMTAvBgNV
BAMTKDVGNEY4NDFBMUQ0ODc2NDBENTAyRDM1MDRGRUJDMDQyOThDODRBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5DY5HoP4e099SjrLbyBw/xaf
0sqsoZJeBDCu1xOdtDg3biTYcAzMrx00Z4HvtdTw74QHoVZ8gom3QL2IXkfrrwPk
PTdKOEwfzbB1DtcVSuekm8dI8KUoDMVPJ/4pgltWwTPuTRbOLWlP69J7nAJDqq7g
CokbI83p1u/QVtuQ0QT7BkJyiZEKBLtZYgFqxzZVkym321OmgIpEcVpiyukAEZ0f
HV0vc7Izf4rZnim+us1Liv4ip1mMtLig8nudKy2phRCCubgvwKgIC+U0OluAda9O
8uVcP4tqu6lTZ/ly13t51ij+yB3yryMQe5vpLtpnaitgfuM4cCXs9UxaQEupAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUX0+EGh1IdkDVAtNQT+vAQpjIStEwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEw
NDYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQAWMA0GCSqGSIb3DQEBCwUAA4IBAQANoSB1Rkjl
O9ma69qt3xjhCEH57gQMy38/DSBxRARS6n/2Qbk2Fm1tzsg0x9vCSq8KQleH6yOJ
Onj55g9qINHwS+veAyCeH7eqhORddyS60NPX3eo3eyQ4mRPF6dZ1DjeXSQ5gE3sj
wgLkyw7qzWxOo+cZGhp+gsux68A/jHMiDI+uj1iG0ClTUzOUPPeDvMfkecttohxl
HbdEH3zeu7mFz4/Sz6tARAwye/36yC7L0sdwDTdOxLkvDSInrNfpPhdL27o+Cnh0
t9qoyQ4fDOwFJ1Ii3AB9GUpv6apNWSQW0omHkG9wvtQFWFT/BO2/Q6OzNSBTsNsr
/ZRw0Ceiz0Wn
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:09 2025 by rpki-client