Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210761.roa
File: AS210761.roa (raw, json)
Hash identifier: dIslfZFg8BkN4SVvGetrvJ7swEApILeMUopu9jzVcQI=
Subject key identifier: 4C:94:1A:46:24:A9:C8:54:A1:55:D3:77:7A:2F:4F:83:0C:0C:34:F1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 41AECE1417B829E17121E1E8ABCEF05B2CCA44B4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210761.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 210761
IP address blocks: 2a06:a005:2d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ae:ce:14:17:b8:29:e1:71:21:e1:e8:ab:ce:f0:5b:2c:ca:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=4C941A4624A9C854A155D3777A2F4F830C0C34F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:e0:7c:9d:3d:9c:fb:4e:6b:a2:48:aa:f5:
d5:02:3f:9d:6e:87:ca:3d:2e:38:10:7f:4d:43:0e:
fa:e1:46:72:5d:20:01:5b:fa:2d:cb:88:50:8e:b9:
ab:74:55:5f:9f:6a:d3:5e:29:68:a7:ea:87:40:32:
04:cb:77:1b:ec:25:bc:ad:00:b8:69:d6:53:b4:d5:
88:9d:3a:a5:ae:fd:30:26:63:f8:a1:00:e0:52:20:
b1:f5:24:30:8c:f1:cf:89:8d:b8:00:99:20:5e:d8:
51:f0:ef:c1:27:bd:1d:33:0c:4c:a2:86:15:5f:8f:
bb:79:5f:82:1f:0d:af:0b:b4:f0:c2:7e:26:64:18:
3b:cc:15:7e:8e:02:90:6d:75:59:3a:28:57:19:8e:
82:12:c9:7d:82:84:a5:59:bd:3e:92:3e:3a:cb:40:
d4:7e:03:ef:46:a6:0a:32:41:01:12:02:37:ce:fc:
b8:28:9b:13:24:88:0b:bb:3d:de:b2:b8:0d:27:0d:
ea:26:92:15:7a:8c:08:09:f4:f9:5c:3a:4c:e6:58:
22:a9:68:98:62:63:79:48:9b:64:98:21:e4:45:4c:
8f:05:08:09:b3:a4:d0:45:1c:06:72:8c:0d:08:b8:
7c:d0:79:1b:89:37:e2:16:64:19:01:64:ef:c8:27:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:1A:46:24:A9:C8:54:A1:55:D3:77:7A:2F:4F:83:0C:0C:34:F1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210761.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d1::/48
Signature Algorithm: sha256WithRSAEncryption
40:72:e9:f3:23:0c:05:80:95:a9:3f:1e:e4:58:b2:61:3b:6b:
93:b7:e8:38:b8:bb:99:39:1b:26:bb:6c:86:51:99:24:d0:cc:
b3:38:8b:31:4f:13:87:25:02:33:20:7a:f7:31:db:07:ac:ca:
d8:9f:cf:df:a4:d1:7d:59:32:bd:64:b1:aa:6b:89:c4:e6:aa:
c6:ac:7b:9e:81:35:a6:e2:13:7d:3c:50:2e:70:ee:48:2b:ee:
a7:31:ea:ee:00:08:44:51:f4:4c:ca:c7:84:25:57:af:33:6f:
12:a6:0a:42:3f:d9:63:7b:f3:7f:32:ea:54:7a:1c:62:62:11:
57:0f:44:4b:ac:f4:fb:26:80:aa:49:e9:2f:2f:07:3a:e6:79:
db:eb:39:42:c3:60:4f:18:3d:06:58:7c:28:4c:3a:f8:64:42:
b9:66:8c:dd:fb:73:b4:2c:ce:12:60:d4:6d:0a:3f:6b:80:81:
08:80:2a:ad:f1:4d:60:aa:30:21:83:8a:0f:98:9d:11:b5:15:
0d:fc:bd:24:fa:fa:7c:33:76:50:06:2c:98:8e:1a:46:43:61:
b3:f9:7b:f0:bc:a3:07:13:81:5f:5a:6c:8c:0a:e5:5a:f5:33:
44:e6:cb:7c:4d:e6:d8:cd:6e:f5:5f:25:6f:74:53:9f:b5:b1:
11:e6:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:03 2025 by rpki-client