Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210633.roa
File: AS210633.roa (raw, json)
Hash identifier: wGNNdXovUKKekQDmJl8Jzf9SUEX6tk7rcbpZxVPdvJU=
Subject key identifier: E3:D2:23:38:88:8A:52:A4:B5:17:08:0B:B3:26:0F:33:8B:71:D9:6E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 07534339C1F69CFE1182596F8F62F1C3A26E03CD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210633.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 210633
IP address blocks: 2a06:a005:7d0::/44 maxlen: 48
2a06:a005:7e0::/44 maxlen: 48
2a06:a005:7f0::/44 maxlen: 48
2a06:a005:800::/44 maxlen: 48
2a06:a005:810::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:53:43:39:c1:f6:9c:fe:11:82:59:6f:8f:62:f1:c3:a2:6e:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=E3D22338888A52A4B517080BB3260F338B71D96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:6b:4a:42:8f:83:15:49:1c:08:49:04:e8:
04:7f:c0:3d:de:7d:20:49:e4:bf:ee:76:6c:50:08:
4c:7f:8c:fe:08:d4:ae:c0:b6:83:b8:4c:df:77:5a:
49:9b:2c:77:62:ed:c2:95:a6:b4:6b:fe:16:7e:6e:
22:e6:3e:5c:36:67:cc:12:54:cd:46:bd:b5:8e:11:
1e:0e:6b:88:ef:cc:3c:df:6c:25:dc:8e:a7:df:0d:
0e:14:08:9e:66:7e:04:00:2a:4c:7a:83:e4:28:fb:
4d:f1:c6:bc:47:0b:28:2d:40:b0:00:f0:b9:c4:cf:
68:3a:12:de:24:44:18:bb:a2:f7:9c:71:b3:3c:ec:
ad:c6:7a:35:84:98:64:81:15:49:89:f8:fb:e5:60:
98:a0:0a:91:a1:7b:ae:96:be:7f:40:a4:9b:f8:08:
a0:c1:3a:dd:15:b0:72:fe:04:61:0e:de:93:0b:c4:
85:de:7f:36:76:b0:b7:ab:ec:ee:65:ae:94:d4:22:
0a:a1:22:55:ac:e9:ad:aa:2b:d9:ad:ac:c4:e8:48:
e3:81:09:a5:ac:bb:23:3a:d4:3a:1c:4a:b9:9e:76:
52:5b:af:7d:c9:7a:47:cd:b0:f1:96:5a:d9:fe:22:
56:b9:7c:55:83:f1:a3:4f:67:97:4e:a2:bb:0f:7a:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:23:38:88:8A:52:A4:B5:17:08:0B:B3:26:0F:33:8B:71:D9:6E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7d0::-2a06:a005:81f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
db:72:d1:b8:9b:0d:43:b5:f1:a7:eb:39:2d:93:31:b1:5b:92:
2c:eb:71:bc:2f:37:7e:97:e5:c1:74:be:f4:32:85:40:0b:b9:
79:f4:01:c0:aa:2a:c9:59:d8:3a:93:3d:8f:b6:fb:f9:58:65:
4c:f2:ac:04:1a:f7:98:00:23:72:56:14:03:b9:ee:4d:f8:c3:
c4:52:49:92:a9:8e:25:05:26:68:b3:ed:38:2c:25:79:be:18:
ce:86:fe:49:e3:65:35:18:9c:28:d2:86:10:52:a9:84:ad:0a:
f7:90:a8:f9:6a:10:cb:8b:1d:cf:f6:ae:45:95:59:77:da:14:
6b:b6:0f:58:8c:bd:4f:09:50:c6:d0:20:e0:21:f9:0b:d2:9f:
af:45:ab:b5:d2:15:15:30:69:ce:a7:39:14:f6:cd:4b:6a:6c:
fa:2c:51:3c:5a:bb:e9:b2:02:ba:f3:5e:97:55:2a:9c:6b:94:
d0:32:d0:80:67:7c:3e:78:3a:46:f0:c4:61:bb:84:77:53:b4:
bc:b4:2a:60:2f:d5:a6:17:db:3b:22:6b:b4:85:7f:0b:85:78:
d0:9e:d2:0d:32:e0:4e:28:c4:dd:9e:52:86:69:d1:23:b0:43:
a1:f9:74:d4:e9:ba:7c:e5:20:69:06:ef:12:07:34:d3:03:63:
0b:fe:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:03 2025 by rpki-client