Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210836.roa
File: AS210836.roa (raw, json)
Hash identifier: 5RriZKgSJG22loupqLWjjo26qpy2xRYdGeZFqrflAU8=
Subject key identifier: A8:74:31:E8:B6:AD:DC:87:16:C3:01:D2:CE:DB:FE:50:95:E2:29:09
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 20F62A32ACB144627FC42B43D9CF45BC25DB0243
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210836.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 210836
IP address blocks: 2a06:a005:5bc::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f6:2a:32:ac:b1:44:62:7f:c4:2b:43:d9:cf:45:bc:25:db:02:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=A87431E8B6ADDC8716C301D2CEDBFE5095E22909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:0b:e7:3b:ca:d6:dc:e7:4a:2b:aa:84:03:
3a:17:0c:ca:90:51:88:c7:fa:b4:53:34:c5:30:c4:
cd:24:83:ad:96:ed:ac:c3:fc:de:4a:a3:5a:d6:ae:
24:a2:12:32:fa:aa:1b:63:31:28:47:65:5b:76:ee:
8d:e2:f4:e8:55:d9:03:86:ab:a7:ef:c5:c4:71:ea:
39:e1:33:d0:50:5f:6b:3f:0e:dd:d5:bc:53:0b:07:
a6:4c:5c:fc:55:f6:31:de:b5:34:fa:5a:63:d3:2c:
6f:02:b0:bb:07:df:2e:a4:b6:60:ef:a9:11:c5:d2:
80:ef:98:53:20:d6:49:13:d0:f4:f9:62:0b:83:65:
d2:fc:27:21:19:a9:4a:98:d0:db:72:d2:db:53:92:
1d:47:df:2b:22:51:2b:6d:b5:6e:0d:c6:53:e1:90:
0d:8b:a8:00:94:64:f2:bd:f6:1e:80:b8:48:cf:ba:
d4:3d:43:4d:fe:d9:0f:15:48:fd:4a:f1:79:6f:7a:
f1:49:68:97:fe:d5:09:15:ac:80:60:b7:2f:66:5d:
66:54:e4:f6:5f:a9:08:be:72:1e:d7:c8:7a:2c:cd:
e5:67:aa:b5:fc:6f:36:14:d5:bf:bd:c0:24:fb:4c:
c3:9c:76:21:20:8a:b2:c0:f0:f6:b6:ed:63:f4:5a:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:31:E8:B6:AD:DC:87:16:C3:01:D2:CE:DB:FE:50:95:E2:29:09
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5bc::/46
Signature Algorithm: sha256WithRSAEncryption
44:12:82:17:2f:1d:4e:c8:8f:0b:41:4b:e0:2b:81:f6:0d:dd:
07:b2:85:84:bd:e4:ca:b6:56:ce:fa:d6:e5:b3:9a:09:3c:18:
ec:97:61:d3:82:2e:78:77:b8:81:f8:48:2f:db:5d:eb:3d:c2:
1e:48:36:66:8f:7a:07:8b:56:4b:f8:27:3b:40:ec:22:92:83:
0c:7b:05:c3:d0:a1:4b:69:de:a3:76:67:5f:a0:70:62:71:ea:
a0:95:0c:91:18:db:21:ff:68:bd:e3:93:4c:23:d8:26:4b:73:
db:5e:a2:1c:2d:52:79:61:bb:7d:d8:80:e5:62:e8:c5:89:94:
7c:b9:ee:e0:6d:14:39:c1:07:ff:44:05:23:90:62:94:64:3c:
3e:d0:3c:aa:ad:5d:77:06:07:61:00:aa:12:75:40:26:3b:56:
0f:be:31:09:a0:ff:65:35:78:b4:49:a4:9a:bf:a1:5b:06:c7:
60:b1:14:57:f4:19:9f:b1:4b:da:1f:84:6d:4b:d5:a7:4f:70:
e8:50:3a:1a:46:72:32:c4:af:91:6f:87:dc:88:47:75:a6:a9:
aa:95:a5:66:da:34:34:e7:65:94:f9:e3:13:3b:43:71:0b:92:
27:39:54:23:40:7a:20:c7:c2:98:b2:75:5d:7d:2d:c6:91:f3:
f3:04:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:04 2025 by rpki-client