Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210667.roa
File: AS210667.roa (raw, json)
Hash identifier: MrDaKmQ+AaNY7OnUoswFmk3RlkkssB35CRkWt34aVMg=
Subject key identifier: 84:DD:58:4F:26:82:0A:EE:CC:78:68:D1:17:1C:51:9E:75:DF:99:B2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2C5A08874174A78A11CBA31851D14FF34A4DCA3F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210667.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 210667
IP address blocks: 2a06:a005:2de::/48 maxlen: 48
2a06:a005:1250::/44 maxlen: 48
2a06:a005:1bb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5a:08:87:41:74:a7:8a:11:cb:a3:18:51:d1:4f:f3:4a:4d:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=84DD584F26820AEECC7868D1171C519E75DF99B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:e9:24:1a:34:ea:f1:bc:ea:c7:b0:22:77:
b5:f8:e8:1f:52:a5:d5:fd:fb:09:cd:94:cb:10:98:
1d:2d:d4:7f:9b:77:80:00:36:0e:50:11:e2:1e:41:
5b:6c:e3:06:0f:1a:47:33:b1:62:cc:9c:d9:ae:0f:
3f:ca:41:5e:9a:84:b1:4a:f5:43:74:ea:9c:f7:a6:
8a:d6:2e:66:45:31:b2:40:c1:e8:47:36:65:05:1a:
71:81:77:8b:d2:bc:e4:4e:c4:19:ea:86:7e:d6:f9:
02:f6:a1:54:09:b3:82:c8:a7:86:6a:d3:76:7a:0b:
d1:07:b6:d3:bd:f0:7a:a1:f8:eb:c9:10:bc:64:91:
b7:55:da:c6:3d:55:e0:b4:22:df:36:df:2a:b5:08:
fe:9d:a6:e9:a0:38:3f:21:52:c2:56:0d:93:60:4a:
ad:7b:53:a4:93:85:2a:58:60:e5:59:1e:42:fb:db:
30:5a:06:ef:d3:6f:91:83:98:00:97:28:5f:42:4b:
f1:19:41:05:58:c1:e9:c2:72:7d:01:6f:17:3e:3f:
95:85:c1:e4:89:9e:ca:2a:6a:f3:b5:9e:7f:d2:4d:
ba:4f:66:2c:6a:a5:dc:dd:0a:89:99:31:b1:64:92:
8e:36:23:fd:0e:3b:94:b4:e3:38:bc:c2:ec:1c:bc:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DD:58:4F:26:82:0A:EE:CC:78:68:D1:17:1C:51:9E:75:DF:99:B2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2de::/48
2a06:a005:1250::/44
2a06:a005:1bb0::/44
Signature Algorithm: sha256WithRSAEncryption
be:7a:1a:11:fa:d5:2a:a5:0f:56:f1:ae:b6:29:11:5e:94:d5:
c2:a2:a2:8f:92:26:96:d7:ea:19:69:bf:d4:cb:f0:f3:b1:4e:
03:11:d2:53:40:d8:e9:38:b4:18:cc:cd:84:8a:5a:31:f8:b4:
78:38:dc:ca:df:f8:84:31:59:76:35:27:68:b5:60:d5:cd:06:
3f:ec:b3:a5:36:33:71:0a:fb:a0:d2:e9:10:cf:6a:2c:4f:29:
c5:22:3e:5a:a2:4d:b3:ff:de:b3:44:bf:b4:9c:2a:30:65:61:
ea:ca:cd:72:5d:fc:a2:36:d0:da:9e:bf:6a:4c:53:ee:4a:1f:
ba:26:b0:30:88:65:34:8c:44:d9:b5:e8:52:35:a2:7c:dd:94:
3c:fe:a6:90:24:74:99:38:46:d9:15:f9:e9:ee:6e:eb:1c:e0:
5f:9e:95:86:8b:36:fc:90:7a:ac:4b:e9:b9:ea:8b:43:9f:41:
2d:35:70:f7:af:2c:ac:e8:94:0b:41:e9:a1:11:fc:43:a9:a6:
29:aa:c6:be:62:6a:6e:99:78:9d:d9:59:d0:be:37:49:61:fe:
b5:6a:cb:1e:6e:29:61:80:5a:57:3e:2b:c5:46:c3:ae:b7:6b:
a1:88:98:cd:51:3a:c1:f4:44:22:3f:85:bd:54:04:ab:0c:3a:
08:0c:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:49 2025 by rpki-client