Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210490.roa
File: AS210490.roa (raw, json)
Hash identifier: 5fALf8BnyJoKxwVXAYSFKuE8/g16I6id9ow6HnDy5DI=
Subject key identifier: E5:CC:FB:5C:60:7B:E9:4B:40:25:CD:78:5C:A3:8B:7B:07:E1:AF:A9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 491137AB8B962CCA4A681ADFCF343F870EEEE378
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210490.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 210490
IP address blocks: 2a06:a005:2190::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:11:37:ab:8b:96:2c:ca:4a:68:1a:df:cf:34:3f:87:0e:ee:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=E5CCFB5C607BE94B4025CD785CA38B7B07E1AFA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:42:f9:0e:7c:bb:7f:76:09:a9:de:d7:3b:
c6:37:ba:42:36:55:b7:d8:60:a9:02:51:38:5e:19:
a4:9f:fc:16:47:3f:58:33:91:9b:33:e3:af:5b:6d:
a8:13:b2:19:33:f5:df:68:96:5e:51:02:c8:c5:0b:
17:71:24:9e:e0:1a:bd:fa:fb:4f:0a:b2:30:b0:79:
cf:8c:32:8b:12:da:ff:d1:d7:57:65:37:f4:43:98:
40:9c:4a:5e:36:0c:1b:77:fc:00:90:ba:41:11:97:
a9:6d:7f:56:b2:47:06:aa:c7:84:83:d3:38:8e:77:
97:43:23:9a:bd:18:79:54:9b:76:a3:c1:73:06:d4:
28:e9:88:05:90:17:48:e1:13:15:77:06:a7:74:1e:
ac:7a:cd:65:c0:7d:79:8a:ba:03:92:d8:e2:5e:e2:
a0:5b:18:49:41:6e:6f:61:8a:f1:80:8e:fb:93:10:
b5:eb:c3:a9:b7:80:a2:9b:54:fd:0f:96:61:70:79:
c6:7b:5e:8a:32:eb:7e:50:28:36:60:b5:d4:ca:45:
a7:24:23:59:8e:bd:fe:c0:7c:6c:98:62:78:d6:1d:
7a:54:53:30:89:da:73:6f:70:3b:fb:41:ba:32:14:
a2:df:50:a4:b5:db:b7:f8:e8:71:59:4e:84:ae:12:
03:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:FB:5C:60:7B:E9:4B:40:25:CD:78:5C:A3:8B:7B:07:E1:AF:A9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2190::/44
Signature Algorithm: sha256WithRSAEncryption
79:c9:89:2e:e8:91:96:30:34:2e:89:83:48:ad:6b:6a:1b:28:
14:8c:c9:6f:ad:35:8b:a0:6e:0a:dd:bb:09:be:44:f9:c9:fb:
e7:ce:63:52:18:fc:3b:c4:66:b4:47:15:a1:c7:c6:13:5d:18:
5c:5a:72:98:2f:db:b7:6f:cc:6b:3b:67:bf:d8:c6:0d:b6:62:
25:38:df:76:17:dd:87:57:53:18:5c:5b:c7:62:dc:0b:a7:dc:
a0:5a:10:a7:47:7c:e4:73:01:cb:29:59:93:fd:a2:b9:46:c8:
4a:6b:a1:a4:0f:b5:c0:4f:2b:3a:bf:ad:62:61:01:10:f7:5b:
04:4b:aa:55:67:be:e5:65:9f:b1:b9:cf:58:45:16:f2:37:3b:
97:69:2e:c7:44:03:5f:a0:7c:f8:3e:a3:6d:c7:63:23:5b:31:
67:3a:0c:f4:1f:e5:59:87:26:55:7c:ac:eb:6e:d4:8e:51:2c:
5d:f8:f0:1f:11:a2:d3:f7:2f:c7:74:81:19:63:d0:1e:86:4a:
5b:8c:09:d4:1b:93:1e:7b:4e:4e:27:b5:cc:79:bb:2c:72:4c:
e7:52:9e:44:a9:eb:2b:74:0e:b0:06:08:60:14:e1:9d:ec:09:
c4:5f:29:be:28:11:09:5f:14:00:f0:0c:6a:f8:eb:93:ca:6d:
2f:c7:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:20 2025 by rpki-client