Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210576.roa
File: AS210576.roa (raw, json)
Hash identifier: Ker0Q8HqBfz7FbC04vtp0EQzDGiApy6h2s42L4nqUuM=
Subject key identifier: 1B:E7:3F:66:67:68:47:25:A3:F6:F7:8B:54:50:DC:AD:31:CC:E4:01
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 183FCBDFCF84B69E173F181C58FA5146DA4BC606
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210576.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 210576
IP address blocks: 2a06:a005:5fc::/46 maxlen: 48
2a06:a005:1100::/44 maxlen: 48
2a06:a005:1110::/44 maxlen: 48
2a06:a005:1120::/44 maxlen: 48
2a06:a005:1130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3f:cb:df:cf:84:b6:9e:17:3f:18:1c:58:fa:51:46:da:4b:c6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=1BE73F6667684725A3F6F78B5450DCAD31CCE401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:1e:7e:28:07:05:09:78:9d:5a:bc:da:f6:
a8:12:8e:43:70:74:fb:41:25:27:00:d4:98:70:82:
59:16:c1:fc:22:dd:9e:a2:94:44:e3:93:de:ae:73:
c2:20:c7:13:89:69:dd:bb:be:bd:bd:a1:b0:e2:c6:
51:10:58:0c:0c:a4:cf:70:09:4e:bb:a2:ef:c0:ae:
67:9b:86:b2:82:33:a4:a0:1e:67:ae:1c:06:99:19:
c9:42:1d:02:63:31:33:5f:80:f1:c5:20:9e:db:1e:
a1:81:8e:46:1a:e4:fd:6e:0d:43:30:e9:9e:b4:28:
be:0f:3c:bf:73:f4:09:78:2e:53:4e:6b:50:15:5e:
56:6f:16:fd:af:28:28:7e:d8:32:0d:f5:71:90:52:
9a:08:df:7f:82:82:af:6f:89:93:8f:bf:2f:b2:83:
e1:fb:09:8a:c2:ac:e8:b7:84:9d:5d:dd:79:4f:75:
5b:5e:b5:ac:1e:aa:2b:e2:63:7f:3e:ab:5b:eb:8c:
c0:18:b1:71:f9:57:18:a3:f5:b1:b8:05:6a:cb:9d:
50:b3:4e:9d:e2:75:41:b0:b4:7d:18:16:8b:6c:70:
67:15:da:65:b4:f3:5e:4b:8b:0c:ee:23:6c:0a:28:
3d:c6:f5:be:f8:e2:c9:7b:82:02:6a:58:79:9d:7c:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:3F:66:67:68:47:25:A3:F6:F7:8B:54:50:DC:AD:31:CC:E4:01
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5fc::/46
2a06:a005:1100::/42
Signature Algorithm: sha256WithRSAEncryption
87:c7:7c:0a:58:8c:a8:6d:3f:df:f5:7d:67:d5:7b:d0:59:ac:
80:fb:e1:73:48:e8:8a:1b:e9:66:59:6a:ce:7a:ec:58:5d:ba:
e3:f3:b7:80:7c:c3:a7:47:da:39:12:ab:a9:9e:2a:21:bf:5b:
40:3b:7c:8f:17:8f:44:9d:d7:a1:7c:5d:c4:db:25:1a:6f:87:
32:70:67:ad:8f:dc:6f:4c:60:90:4f:16:31:ee:12:48:ef:37:
da:93:79:b6:99:f4:ac:09:e0:a6:3b:96:45:0c:5b:c4:c0:e5:
54:32:42:14:3d:7f:fb:fa:f0:6b:6e:8a:5f:03:32:17:b5:3c:
84:e1:71:94:4f:70:13:ba:ad:3d:5b:9f:74:e6:1a:36:22:d9:
4e:df:2e:87:17:15:dd:c4:2c:77:10:93:33:04:0b:61:a8:66:
9e:bf:a3:78:b0:75:c7:09:58:47:3c:8e:2c:61:59:63:f7:bf:
c0:16:98:49:58:dd:48:a8:30:c1:0b:d2:92:c5:7c:30:bf:bb:
8d:ac:0a:15:62:89:7a:9b:91:74:51:1b:10:16:b2:0d:9f:a4:
e4:de:73:b9:bd:10:ec:7a:7c:7b:0b:85:ea:81:0a:9e:86:ae:
7f:4d:e2:c4:28:9d:eb:0a:2f:5e:63:76:7d:c4:58:d5:cf:02:
7e:32:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:23 2025 by rpki-client