Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210630.roa
File: AS210630.roa (raw, json)
Hash identifier: 4vJqKqNAvDJnohAF66GXo2YiY2E0j2Yy8UZux/xsQoM=
Subject key identifier: 84:DB:02:C0:21:3F:2A:82:63:0E:FE:0D:1C:79:57:6F:22:8D:CD:3C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1D00D047D7EC6967A0941A5B319A4DCF17018A20
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210630.roa
Signing time: Sun 01 Jan 2023 07:41:10 +0000
ROA not before: Sun 01 Jan 2023 07:36:10 +0000
ROA not after: Sun 31 Dec 2023 07:41:10 +0000
asID: 210630
IP address blocks: 2a06:a005:15d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:00:d0:47:d7:ec:69:67:a0:94:1a:5b:31:9a:4d:cf:17:01:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Jan 1 07:36:10 2023 GMT
Not After : Dec 31 07:41:10 2023 GMT
Subject: CN=84DB02C0213F2A82630EFE0D1C79576F228DCD3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:87:dc:75:5f:86:25:cf:f5:56:5a:56:d9:
32:9b:30:a3:90:4e:6b:06:38:e2:eb:99:79:22:47:
95:f9:bb:45:52:b7:68:29:69:bc:c6:e2:1c:99:a1:
63:ed:c7:1a:9a:b7:e2:ca:c7:62:89:e5:f1:a9:63:
fe:24:0f:52:f1:2e:be:4a:29:69:09:78:53:89:39:
93:10:0f:e5:ee:7b:ff:23:92:8e:d3:b4:48:ea:1d:
1d:2f:d7:23:bb:7b:42:1f:e5:db:cf:49:9f:77:a9:
9f:4b:40:a0:a9:c4:80:35:17:c4:97:ef:a0:86:57:
c5:e8:4e:3d:6e:31:c1:19:76:9c:b0:4a:9b:2c:60:
dc:9e:5b:13:49:9f:fe:7f:e9:df:8e:6b:68:a0:64:
f3:6e:cf:76:e4:65:60:8b:6d:f7:9a:57:6a:d5:ca:
cb:81:1d:cc:23:86:88:a7:4e:8b:62:02:ab:55:ed:
fe:d8:6d:ed:bc:80:8a:79:3b:17:5a:43:6c:c6:5c:
e0:94:ec:c9:0a:6c:aa:6f:9c:05:de:84:bf:87:95:
2f:75:8f:e9:a1:d2:2e:01:6d:86:a2:c0:4e:7e:73:
22:23:e5:06:a9:5f:15:78:a9:96:a3:65:55:02:c0:
9e:b1:fc:d2:27:b0:91:c6:42:b3:0c:c4:35:eb:40:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:02:C0:21:3F:2A:82:63:0E:FE:0D:1C:79:57:6F:22:8D:CD:3C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15d1::/48
Signature Algorithm: sha256WithRSAEncryption
9f:24:d1:d5:75:5c:03:d6:03:e8:24:5b:6b:3e:8b:64:bd:c8:
e1:95:7a:96:77:41:c4:42:4b:82:ba:46:41:c9:1c:b1:db:85:
5a:45:8f:f2:e7:7c:a9:1c:69:a7:cb:d6:cf:89:7e:e3:f4:b1:
2d:65:e7:b9:7d:a2:26:26:9d:ac:61:55:5e:8d:3c:bc:dc:e0:
31:3d:08:29:82:4f:ec:d4:4b:40:16:c6:d9:fb:84:6c:43:9a:
9b:11:bc:af:f9:17:2c:c2:c2:ce:a0:21:39:b4:29:b4:cd:f4:
44:4b:ab:68:38:2d:fc:b4:0b:11:85:ce:bb:14:59:2d:94:a0:
8c:f4:76:68:a2:33:82:9d:fd:57:35:56:0e:36:f4:bc:a4:77:
df:d0:b1:e9:e9:10:ab:28:fd:85:30:da:3e:3b:23:db:c9:96:
d0:23:d9:9d:fb:b8:31:87:47:42:8e:15:5b:5a:7b:5c:e8:18:
a6:33:7b:80:32:ba:c0:58:d7:fa:69:ce:b8:1c:36:b4:8b:18:
17:ee:2e:dd:46:bc:59:80:b6:c0:80:02:bf:99:2c:81:23:a0:
6a:b6:5f:e8:0c:d2:eb:03:28:67:04:7e:ec:5b:e4:9f:08:41:
1b:73:c8:ed:85:16:9d:2e:ac:91:4b:2e:e6:01:b0:d6:98:4e:
6d:ce:10:41
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUHQDQR9fsaWeglBpbMZpNzxcBiiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMzAxMDEwNzM2MTBaFw0yMzEyMzEwNzQxMTBaMDMxMTAvBgNV
BAMTKDg0REIwMkMwMjEzRjJBODI2MzBFRkUwRDFDNzk1NzZGMjI4RENEM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGX4fcdV+GJc/1VlpW2TKbMKOQ
TmsGOOLrmXkiR5X5u0VSt2gpabzG4hyZoWPtxxqat+LKx2KJ5fGpY/4kD1LxLr5K
KWkJeFOJOZMQD+Xue/8jko7TtEjqHR0v1yO7e0If5dvPSZ93qZ9LQKCpxIA1F8SX
76CGV8XoTj1uMcEZdpywSpssYNyeWxNJn/5/6d+Oa2igZPNuz3bkZWCLbfeaV2rV
ysuBHcwjhoinTotiAqtV7f7Ybe28gIp5OxdaQ2zGXOCU7MkKbKpvnAXehL+HlS91
j+mh0i4BbYaiwE5+cyIj5QapXxV4qZajZVUCwJ6x/NInsJHGQrMMxDXrQHGTAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUhNsCwCE/KoJjDv4NHHlXbyKNzTwwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEw
NjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBRXRMA0GCSqGSIb3DQEBCwUAA4IBAQCfJNHVdVwD
1gPoJFtrPotkvcjhlXqWd0HEQkuCukZByRyx24VaRY/y53ypHGmny9bPiX7j9LEt
Zee5faImJp2sYVVejTy83OAxPQgpgk/s1EtAFsbZ+4RsQ5qbEbyv+RcswsLOoCE5
tCm0zfRES6toOC38tAsRhc67FFktlKCM9HZoojOCnf1XNVYONvS8pHff0LHp6RCr
KP2FMNo+OyPbyZbQI9md+7gxh0dCjhVbWntc6BimM3uAMrrAWNf6ac64HDa0ixgX
7i7dRrxZgLbAgAK/mSyBI6Bqtl/oDNLrAyhnBH7sW+SfCEEbc8jthRadLqyRSy7m
AbDWmE5tzhBB
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:03 2025 by rpki-client