Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210888.roa
File: AS210888.roa (raw, json)
Hash identifier: 9bBD8IULB22aNHPmZ+8NeINuNIwnz6R6/qmXPeqqFd4=
Subject key identifier: FA:10:B5:AC:CD:09:75:8F:FB:7F:4F:A7:34:C1:51:78:B7:3F:91:A2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 49E5A335BD3339E42EE9CA5C6D4BD36F1A5F3323
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210888.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 210888
IP address blocks: 2a06:a005:4f0::/44 maxlen: 48
2a06:a005:1169::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e5:a3:35:bd:33:39:e4:2e:e9:ca:5c:6d:4b:d3:6f:1a:5f:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=FA10B5ACCD09758FFB7F4FA734C15178B73F91A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:88:ae:dc:64:4c:9f:39:4c:bb:f1:9c:af:
de:44:2d:6f:04:4f:57:04:7a:38:4e:80:4c:74:44:
51:1f:3f:15:fc:de:3d:19:5b:65:38:b4:a1:d1:50:
fa:0f:f5:57:58:01:7b:c7:25:ba:fd:38:07:92:da:
44:52:a8:c7:db:94:30:4e:31:e4:7a:c4:da:5e:a0:
44:62:bf:45:a2:8f:45:5e:7d:70:7b:61:ce:a8:85:
52:30:85:a6:0c:46:07:ae:aa:03:99:82:ec:2b:ed:
f4:15:5c:c6:3c:25:c0:30:e4:de:de:01:77:f1:b1:
6c:50:30:99:a8:fe:cc:8f:c7:8f:1e:94:1d:8e:75:
f1:8b:7a:44:79:42:63:7e:40:b0:52:a9:0e:62:20:
d4:08:ea:69:ff:55:51:5f:d6:c9:91:0b:2c:74:4c:
63:64:c4:4a:99:ff:d7:7e:f3:0b:54:0d:7d:a5:bb:
b4:b5:3b:9e:21:5f:07:95:9d:be:2d:de:9e:f3:4e:
0f:10:fa:24:2f:d5:3d:f0:33:60:a4:23:40:f5:b9:
bf:d0:cd:da:75:44:49:82:83:87:03:03:11:8e:77:
d9:73:1d:05:d3:20:8c:4b:14:27:d6:cb:8d:01:29:
9e:96:14:e1:68:9c:4c:a5:08:05:fc:c0:8d:be:c6:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:B5:AC:CD:09:75:8F:FB:7F:4F:A7:34:C1:51:78:B7:3F:91:A2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4f0::/44
2a06:a005:1169::/48
Signature Algorithm: sha256WithRSAEncryption
db:e2:16:68:50:ff:19:3b:5a:5e:fb:50:76:e7:2b:71:91:26:
da:f3:da:d4:39:41:aa:39:58:6e:3c:08:23:70:56:12:96:a9:
b3:9b:0a:b6:9e:c8:45:db:41:d5:24:5f:aa:a7:28:9a:0d:52:
f3:01:15:61:f2:b7:1e:4d:b5:fc:7f:c4:cd:5c:d0:b0:c9:43:
87:ff:95:a0:f5:0b:01:22:c6:4c:18:cc:47:1a:c8:ec:bf:62:
b6:64:01:2b:50:50:7e:b5:81:3d:44:86:7d:46:ab:c0:4c:83:
27:68:23:6b:a3:9a:ac:22:df:ac:19:e5:b9:93:ed:93:04:b3:
77:c1:75:4f:21:a9:2e:e0:5b:f2:04:db:da:fe:96:52:66:5d:
c1:54:ba:78:77:f0:10:bb:54:c2:b4:3d:d9:67:98:fa:8d:68:
1e:40:87:51:c7:d0:a4:e3:a7:e0:c7:1e:b4:48:08:c3:a1:2c:
4d:dc:c6:ca:01:e9:42:54:6e:e6:98:54:64:47:73:7d:d4:98:
f0:e3:46:cc:de:84:c4:63:e2:44:34:8e:c3:e5:67:e4:89:dc:
72:b6:61:8f:06:d6:8c:80:d9:e6:55:8b:8d:7d:3f:e3:3f:b8:
f3:ef:f9:96:8e:92:57:69:dc:5b:22:7b:62:7f:fa:70:f3:b6:
3a:22:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:08 2025 by rpki-client