Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210537.roa
File: AS210537.roa (raw, json)
Hash identifier: QlJfdlaxMdbyBPMxTe9PuBEsBi9+xSiDQuZfAS+U3zs=
Subject key identifier: F7:90:F8:00:3A:7E:F8:62:77:87:60:95:69:AE:2B:73:A2:77:27:BE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4B7E288BC6B45B6EC18F9F40937B8C1D0E8102F6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210537.roa
Signing time: Wed 21 Dec 2022 16:56:56 +0000
ROA not before: Wed 21 Dec 2022 16:51:56 +0000
ROA not after: Wed 20 Dec 2023 16:56:56 +0000
asID: 210537
IP address blocks: 2a06:a005:d2d::/48 maxlen: 48
2a06:a005:1507::/48 maxlen: 48
2a06:a005:1508::/48 maxlen: 48
2a06:a005:20c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7e:28:8b:c6:b4:5b:6e:c1:8f:9f:40:93:7b:8c:1d:0e:81:02:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:56 2022 GMT
Not After : Dec 20 16:56:56 2023 GMT
Subject: CN=F790F8003A7EF8627787609569AE2B73A27727BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:b8:c6:9c:10:f0:7b:a6:bd:f4:df:9f:66:
49:b2:21:a4:5e:65:ea:ef:12:77:ac:d0:fe:77:e2:
e4:19:e5:45:3c:0a:d6:cc:4b:d4:9d:e8:b5:a6:a3:
4b:a2:3c:68:f0:54:3a:ce:81:0f:97:f0:f5:88:6d:
0f:d7:69:c2:62:97:06:4a:56:1c:8c:32:49:63:ad:
0c:9d:a2:c6:4c:f6:b2:4c:60:2d:a8:11:2d:b4:d6:
ab:7d:f3:86:0f:6c:63:2c:17:38:b1:e3:cf:e3:b6:
8e:a2:d8:1e:bc:85:51:0d:96:dc:5d:93:b3:87:3b:
d0:39:7f:08:51:6d:b7:fe:19:42:0e:d5:10:f1:17:
41:79:06:60:ea:d4:cb:4a:39:f7:14:6a:e1:84:6a:
ee:ab:59:c6:40:32:f8:3e:74:17:87:8d:5f:61:a5:
02:ef:45:47:6f:0c:36:ef:6e:47:da:05:44:e0:89:
c1:65:e7:5f:e2:1a:08:70:34:10:37:70:bc:3f:bd:
86:b9:ba:60:ee:62:63:2d:b0:5d:4a:99:6e:6d:c4:
5e:92:66:d9:12:31:e7:89:84:b8:65:dc:7a:a8:78:
e8:49:ac:90:c5:59:17:b9:44:cb:76:b0:5f:ef:94:
b5:e7:21:13:4d:5b:ad:3e:65:19:1c:93:3c:9d:da:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:F8:00:3A:7E:F8:62:77:87:60:95:69:AE:2B:73:A2:77:27:BE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2d::/48
2a06:a005:1507::-2a06:a005:1508:ffff:ffff:ffff:ffff:ffff
2a06:a005:20c0::/44
Signature Algorithm: sha256WithRSAEncryption
99:ce:53:6b:21:ea:e0:67:c7:f6:e7:4b:4e:b8:a7:ac:ac:90:
12:68:1d:c0:4c:73:d4:09:3f:59:27:46:0f:cb:13:a4:8d:e7:
33:c3:b7:83:2f:9f:b4:d6:d1:11:19:cc:ba:97:c7:41:ed:a9:
b9:b3:b9:85:ef:e6:ee:05:9b:2f:aa:3d:f6:38:a7:6b:87:70:
86:a5:a2:0e:2c:c4:7c:bd:87:53:6c:ff:8e:46:81:97:cd:10:
9f:10:10:15:bb:90:49:8d:b7:b8:88:da:76:42:77:d4:5a:14:
75:04:30:4e:c0:a8:7f:ec:11:99:4f:2c:7b:67:ce:a7:ad:89:
96:93:09:56:7d:70:67:26:9b:af:e7:50:4b:74:a4:2e:8c:97:
ef:5d:97:f4:d7:f2:6f:2b:74:d2:52:0c:03:c8:2b:c3:78:1c:
7d:24:ce:8f:f5:ed:a6:bc:a2:e6:f0:57:5f:5a:61:c6:52:5e:
65:94:f5:2a:ef:7b:32:e8:84:11:de:52:ab:90:b1:0c:ef:0a:
22:54:25:2d:e2:b4:b5:8e:3f:89:73:df:5e:d5:a8:69:42:e0:
fb:f8:bd:c9:b2:0b:cc:89:1b:4e:40:be:e6:3d:02:6a:6a:cf:
c5:a7:1c:9b:a2:ca:d3:b9:b2:3c:0a:0c:43:45:21:7f:70:21:
ff:db:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:34 2025 by rpki-client