Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210562.roa
File: AS210562.roa (raw, json)
Hash identifier: UQqwa77f2VAirxf9On8qAmSgQGw0qCg+9LOVQcBXx/Q=
Subject key identifier: 47:71:AB:4A:F4:B1:BE:59:E6:17:D0:44:E8:48:B1:6A:06:32:44:BE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4C39E84D650CF61C337DACBCBAF759D71202915A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210562.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 210562
IP address blocks: 2a06:a005:1c7d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:39:e8:4d:65:0c:f6:1c:33:7d:ac:bc:ba:f7:59:d7:12:02:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=4771AB4AF4B1BE59E617D044E848B16A063244BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:43:60:ae:e1:86:a2:5b:03:8e:9a:b4:d8:
f1:11:ae:bc:46:b0:1d:dd:d6:ed:79:11:19:68:15:
91:db:d2:1d:b3:47:04:0e:da:f4:2b:ea:53:65:25:
db:53:03:29:b0:b6:8c:de:06:a6:64:2a:dc:8e:e2:
ce:92:c4:da:c2:20:42:58:84:ae:5e:5f:92:03:fa:
4a:2f:00:49:69:f2:e1:f6:cc:89:62:c5:e2:e7:91:
90:f1:e2:1c:1b:08:b4:6f:60:5a:02:5e:17:09:59:
03:97:e5:05:eb:9a:f7:e3:82:85:40:93:b3:00:40:
99:b9:ee:57:69:06:cc:6b:02:2d:aa:02:07:1e:ab:
ee:21:0a:28:68:15:f2:96:26:17:88:53:81:c8:94:
0c:7a:92:ba:fa:d9:11:45:11:09:83:a1:68:a6:8d:
ee:a1:80:9a:ae:e7:40:2a:9f:c3:69:48:27:ab:78:
1d:6e:5f:3c:17:19:79:f4:39:c7:6e:bb:8c:31:55:
af:bc:90:2f:31:98:9a:a4:7e:11:7a:3b:e5:c6:15:
a8:7f:9a:e1:0f:0b:8a:04:39:26:91:aa:36:58:ea:
e2:d3:79:a2:65:2c:fb:6f:b1:67:24:23:8b:be:90:
90:b9:8e:f6:5d:db:9c:79:4a:a4:bf:f0:b9:ae:4b:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:AB:4A:F4:B1:BE:59:E6:17:D0:44:E8:48:B1:6A:06:32:44:BE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7d::/48
Signature Algorithm: sha256WithRSAEncryption
12:3a:9e:6e:b5:dd:c3:27:74:44:16:f1:fa:18:5e:9c:ef:49:
dd:13:58:74:1f:de:e7:7b:7a:44:cf:84:b1:01:d4:87:13:ee:
c0:ee:78:4a:a9:a6:0d:1c:14:c2:1b:d8:f9:ee:2c:68:1b:e8:
bd:5e:e9:44:07:05:a6:6e:b4:af:0e:d2:e0:51:ad:d4:fa:a3:
56:ef:4c:14:21:82:42:b6:60:eb:d2:2d:7d:b0:af:a9:a1:3f:
9a:41:0b:44:67:7c:40:89:d2:d2:af:75:c2:d3:f1:2d:4c:09:
94:df:f6:7e:58:b8:24:6c:8b:ef:52:c3:aa:9a:f4:bd:fd:95:
23:7f:c0:16:db:c5:d8:5a:c3:7d:07:91:21:f0:f6:87:06:2c:
c6:e8:50:5c:71:92:89:e4:c1:42:39:ac:67:07:8c:ae:b5:89:
71:64:c0:ef:84:27:f7:29:3e:5f:fc:46:ca:19:18:cd:16:09:
80:16:a6:e9:3a:4e:c4:5f:75:c1:9d:5e:35:eb:a9:b7:1d:85:
f1:85:4b:0e:65:53:d3:f3:bc:4d:7b:86:4e:01:53:94:ba:44:
dc:0b:f0:bb:b1:3a:72:1e:2b:f9:e5:ba:80:46:56:e6:7a:b9:
d3:7c:18:8e:80:3a:6b:b0:4c:90:64:79:9f:46:7e:e0:be:fc:
ab:02:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:23 2025 by rpki-client