Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210881.roa
File: AS210881.roa (raw, json)
Hash identifier: rea8799xfKeUOBmZUGBDBF1HZ1zNnSRpcVxT1PSZWrA=
Subject key identifier: 28:54:AA:52:01:75:27:55:47:F3:BC:BF:94:8E:8B:B5:8F:38:E6:B4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 789D30C1D12249B0886C6966CFDFC7E9387F3EE6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210881.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 210881
IP address blocks: 2a06:a005:920::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9d:30:c1:d1:22:49:b0:88:6c:69:66:cf:df:c7:e9:38:7f:3e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=2854AA520175275547F3BCBF948E8BB58F38E6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:12:bc:43:60:97:9b:ce:ca:a4:d0:80:6d:
20:96:01:50:c8:68:c1:45:18:1f:be:9e:cc:0a:0a:
d6:20:01:06:07:33:48:f7:5e:af:d7:1f:9a:7d:7a:
c7:d5:f2:ac:d2:ec:ed:d6:da:b3:84:7e:88:bb:7c:
b8:cc:9c:91:1c:35:50:cb:10:7e:5b:8f:2b:08:3b:
73:76:52:da:cd:bd:5a:90:0a:87:5a:1e:bb:1f:48:
31:4f:8c:f6:f1:0e:7e:d6:37:17:2b:75:be:77:93:
87:26:29:a7:93:6a:4f:d4:9d:fe:61:a9:c2:fb:05:
9a:68:58:c6:1c:40:0a:76:2f:1a:ea:f4:5c:8b:44:
74:7c:b2:84:60:57:f2:e3:71:71:bc:14:73:ef:07:
4b:b9:75:0a:fd:fb:57:8b:19:04:80:be:bb:e2:d3:
c1:2d:13:84:5c:38:50:ee:cc:e1:de:9e:76:96:1c:
20:9f:8f:89:a4:fc:51:04:a7:71:b3:4e:7e:90:73:
cc:27:c8:63:d5:d2:53:57:90:0c:28:d7:82:4c:a4:
d5:82:0b:f2:d4:6b:60:a3:49:10:2e:40:19:cf:1b:
c2:df:97:99:3d:d2:be:a2:c8:c7:f4:38:e2:f6:60:
6c:c2:25:f3:2c:cc:33:2e:21:66:03:96:26:e9:57:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:54:AA:52:01:75:27:55:47:F3:BC:BF:94:8E:8B:B5:8F:38:E6:B4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:920::/44
Signature Algorithm: sha256WithRSAEncryption
b6:03:54:92:9a:4e:11:83:9b:47:b3:d8:8e:2b:a6:9b:d0:d0:
c7:a2:e3:16:f2:98:17:9c:4b:35:b9:6d:49:0c:7e:c3:eb:3c:
30:e0:16:ed:f9:49:39:c9:35:2d:8d:86:16:da:c6:47:a5:fd:
75:d2:49:06:f1:a8:b1:20:7f:d1:fe:97:a2:22:0f:79:d7:b7:
86:15:f1:25:26:fd:a3:cf:6c:51:05:1a:ee:67:75:ff:1e:3d:
c0:30:29:a7:ec:e2:13:15:6a:a6:61:eb:df:46:70:1f:a2:5b:
2a:0e:1b:95:25:3e:2d:20:03:f6:06:a3:c0:ef:6a:44:b6:7e:
7b:2b:ed:06:99:e6:d7:66:6e:82:fa:32:cd:75:d5:fe:c6:10:
9c:03:c7:cd:2a:f1:fe:9e:12:b7:59:37:b5:db:3d:82:52:3e:
b6:f4:55:ad:d5:aa:cf:69:9b:50:8a:45:88:7b:4a:d1:27:b2:
6b:c7:d1:96:9f:4a:ed:7b:2a:77:9f:7c:f0:93:4a:43:f0:fc:
ca:d7:84:96:5b:17:ad:9f:57:ec:2c:d4:78:49:58:22:60:cd:
bb:f5:18:d4:3d:93:3c:5a:13:90:2c:78:fc:ff:db:ee:45:7e:
80:08:e5:22:ac:de:9b:7f:6c:2b:2e:1b:5a:aa:e3:d6:6a:a9:
3d:bf:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:15 2025 by rpki-client