Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210912.roa
File: AS210912.roa (raw, json)
Hash identifier: rSw/bdsjiUneT4UOL4z8ThPOxXr0XLkMjEvDkf18XTc=
Subject key identifier: 08:05:E8:29:46:57:84:F6:82:DE:E4:FA:37:B9:58:60:25:AE:5B:13
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 67C1D47BDF0F0B0CB92ED218C096259A9A83CE77
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210912.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 210912
IP address blocks: 2a06:a005:2600::/44 maxlen: 48
2a06:a005:2610::/44 maxlen: 48
2a06:a005:2620::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c1:d4:7b:df:0f:0b:0c:b9:2e:d2:18:c0:96:25:9a:9a:83:ce:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=0805E829465784F682DEE4FA37B9586025AE5B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:c0:44:7f:26:76:76:61:b9:73:3f:53:05:
99:52:aa:b0:de:d7:fc:94:f1:a5:5e:b9:ff:23:17:
91:15:2b:44:d0:b6:cc:c5:9d:29:c5:d6:d5:a8:5a:
3e:c3:85:19:77:98:ed:9b:43:07:52:18:4c:ee:57:
ba:a3:1b:fd:20:65:6a:d7:93:c5:56:31:92:f3:97:
19:5d:ed:5d:91:03:0d:e9:ac:d8:a7:db:44:b4:66:
77:f3:af:49:e3:78:29:b8:74:6a:e1:1c:e8:d9:8e:
8b:fd:d1:a2:85:08:77:cd:84:c8:08:d3:99:39:43:
4a:b2:6e:2e:05:61:8e:80:d4:95:46:b1:74:44:9f:
ec:26:7e:b9:21:33:0d:a1:b6:2d:d2:e0:9f:84:7c:
86:ae:ad:03:90:2f:70:0a:05:3b:e8:7c:67:e6:50:
bf:ba:3d:a4:c7:90:7e:89:42:fb:71:2f:c5:4b:40:
0f:52:d8:23:37:7f:f2:e1:ef:39:1a:81:24:52:34:
17:59:d6:d7:45:13:8b:cd:ef:e3:36:3e:b3:76:9d:
c9:dd:ff:5e:38:83:b5:1e:98:81:57:ef:ff:c5:4a:
93:7f:21:5f:8e:b9:79:6c:a4:cf:4e:f6:4b:c3:c6:
be:54:61:ee:f2:44:80:94:ac:a3:c2:4a:71:c4:d2:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:E8:29:46:57:84:F6:82:DE:E4:FA:37:B9:58:60:25:AE:5B:13
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2600::-2a06:a005:262f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:9a:5a:9f:a0:d9:11:6e:d2:94:6f:d2:13:87:c9:ba:d8:39:
96:36:3b:0a:a9:11:3e:9b:92:a2:0c:2e:20:a8:b7:6f:c8:fa:
dd:34:13:9f:83:2b:9b:09:a6:fb:2f:b4:57:ae:49:6f:ce:d4:
92:4f:c7:2d:da:53:95:d5:c5:2d:3a:e4:c9:07:dc:7a:84:9c:
b6:fe:6b:f0:9d:30:0d:94:64:16:26:d9:3c:9a:9d:41:08:00:
e3:5d:06:a1:b3:ab:50:bc:01:18:ec:da:ce:90:14:85:2b:71:
e5:b3:c0:55:95:49:37:d6:c6:32:16:e5:cb:43:a9:a7:87:9e:
3d:51:cf:ef:65:f7:cd:35:4c:2b:64:df:3f:4a:0b:cf:3c:1b:
93:a0:46:e2:d4:88:7c:c6:7c:1d:fe:83:45:be:35:4e:bf:45:
bd:05:2d:d6:cb:09:d6:3a:e1:7f:5b:64:ef:77:9e:29:e7:3d:
34:91:b0:20:e4:e3:e5:8c:4a:74:c6:db:47:2e:17:00:f7:16:
63:d4:40:b2:3e:48:c4:c9:af:6e:ee:b6:88:87:50:03:db:26:
a1:d6:2c:de:9b:e4:6c:e1:5a:44:c8:ef:e2:43:62:30:87:44:
ee:4a:4c:5a:e3:01:14:5c:ac:07:a4:fe:50:a7:39:3f:f3:0a:
c5:19:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:16 2025 by rpki-client