Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210842.roa
File: AS210842.roa (raw, json)
Hash identifier: ZwRVVqaHuufzkw2YdfOaq+jTETNZUHcWKcXuJqgGDp0=
Subject key identifier: A7:F7:BE:FB:6E:EC:E3:02:57:62:67:CD:6C:85:19:6E:4B:5A:16:FB
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7124553F1115DD8C8B896EF2C28EE46C07BB43D7
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210842.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 210842
IP address blocks: 2a06:a005:880::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:24:55:3f:11:15:dd:8c:8b:89:6e:f2:c2:8e:e4:6c:07:bb:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=A7F7BEFB6EECE302576267CD6C85196E4B5A16FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:26:84:d7:a2:a3:10:34:63:07:4a:28:26:
67:f6:4e:94:f5:c6:90:80:b9:7e:b4:da:a9:36:3b:
c6:10:dc:db:58:50:24:27:72:b7:71:32:77:d7:da:
e3:e6:43:00:80:17:75:01:6f:40:e7:79:b4:f9:5b:
53:12:7d:88:3a:85:fb:3d:0e:32:4c:8e:c6:aa:95:
af:27:a0:8f:11:92:6c:b7:29:6f:9d:54:25:7e:a6:
01:64:8a:f4:e8:a1:bf:28:be:8c:03:83:57:28:bd:
15:99:4f:69:ab:7b:2f:ce:75:c9:01:c7:07:ba:5a:
f5:ec:21:7c:6d:66:63:ee:43:20:fe:23:36:1d:5c:
04:22:da:09:de:52:36:89:c8:b0:81:d2:00:1b:73:
c8:5c:9a:ad:f1:0f:87:1f:b7:8c:09:43:fd:64:44:
47:7a:9d:0a:f2:64:54:24:22:2a:f4:80:98:f2:e7:
11:08:23:64:c1:0d:be:3a:da:fc:d5:8e:e5:cd:33:
94:96:2e:0f:70:d4:fe:6f:9f:a0:b1:d0:8a:cb:6f:
df:cd:22:72:bb:b5:96:9b:0a:58:f0:4d:04:0a:00:
db:9c:f5:7f:c3:2b:cf:8c:93:29:9e:ae:b8:e2:26:
8b:09:1d:9f:0c:3f:70:df:e4:ec:1f:25:47:80:28:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:BE:FB:6E:EC:E3:02:57:62:67:CD:6C:85:19:6E:4B:5A:16:FB
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:880::/44
Signature Algorithm: sha256WithRSAEncryption
b0:e8:18:84:03:1c:e2:3e:6c:af:7b:bc:12:d6:26:ba:e2:d0:
14:cc:33:20:22:2c:05:b6:fc:96:c2:e9:52:2b:63:c1:6c:d4:
31:54:15:42:2f:72:e9:b4:fe:e4:b1:ab:c2:0d:10:33:ed:37:
90:b6:0a:5a:cf:56:f4:88:ea:1c:22:21:45:09:82:0d:f1:d5:
c2:8d:9f:ec:7d:ee:8a:3e:f2:5d:b0:93:5b:85:ab:d2:6b:1e:
4a:75:dd:8f:a8:f8:c9:8e:0b:f4:13:e5:b1:0c:b5:3a:32:6b:
db:cd:25:67:b0:b2:27:8e:8a:e8:22:f6:c1:83:84:bb:eb:50:
6b:09:fd:2d:75:31:c0:19:1f:af:6a:53:49:93:5e:bf:c8:ae:
41:fd:33:d8:da:ce:c0:2d:a9:14:3d:b1:68:41:c3:91:01:53:
a6:1c:41:72:f4:b3:0c:fc:61:f0:2a:87:21:c1:14:01:5f:6e:
e3:14:1c:7a:a0:90:39:54:e0:1c:80:e1:ed:4e:c2:e7:0c:68:
1e:88:6c:0d:f1:88:7c:61:39:d1:04:6c:e3:f1:b6:9d:e7:83:
40:23:47:94:ad:16:91:c4:df:b6:ae:15:ac:57:80:8d:72:35:
94:15:e2:8e:3a:96:3e:62:96:a4:13:d5:f5:d0:2c:d9:25:f7:
9c:68:0f:f5
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUcSRVPxEV3YyLiW7ywo7kbAe7Q9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKEE3RjdCRUZCNkVFQ0UzMDI1NzYyNjdDRDZDODUxOTZFNEI1QTE2RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopyaE16KjEDRjB0ooJmf2TpT1
xpCAuX602qk2O8YQ3NtYUCQncrdxMnfX2uPmQwCAF3UBb0DnebT5W1MSfYg6hfs9
DjJMjsaqla8noI8Rkmy3KW+dVCV+pgFkivToob8ovowDg1covRWZT2mrey/OdckB
xwe6WvXsIXxtZmPuQyD+IzYdXAQi2gneUjaJyLCB0gAbc8hcmq3xD4cft4wJQ/1k
REd6nQryZFQkIir0gJjy5xEII2TBDb462vzVjuXNM5SWLg9w1P5vn6Cx0IrLb9/N
InK7tZabCljwTQQKANuc9X/DK8+MkymerrjiJosJHZ8MP3Df5OwfJUeAKJ+nAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUp/e++27s4wJXYmfNbIUZbktaFvswHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEw
ODQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQiAMA0GCSqGSIb3DQEBCwUAA4IBAQCw6BiEAxzi
Pmyve7wS1ia64tAUzDMgIiwFtvyWwulSK2PBbNQxVBVCL3LptP7ksavCDRAz7TeQ
tgpaz1b0iOocIiFFCYIN8dXCjZ/sfe6KPvJdsJNbhavSax5Kdd2PqPjJjgv0E+Wx
DLU6MmvbzSVnsLInjoroIvbBg4S761BrCf0tdTHAGR+valNJk16/yK5B/TPY2s7A
LakUPbFoQcORAVOmHEFy9LMM/GHwKochwRQBX27jFBx6oJA5VOAcgOHtTsLnDGge
iGwN8Yh8YTnRBGzj8bad54NAI0eUrRaRxN+2rhWsV4CNcjWUFeKOOpY+YpakE9X1
0CzZJfecaA/1
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:20 2025 by rpki-client