Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210925.roa
File: AS210925.roa (raw, json)
Hash identifier: aAwtwlvj6PM7u9b1YbZT1ViNsEPYg3Au8bFtJAeUio0=
Subject key identifier: 33:E0:27:40:34:5A:44:9B:3C:DF:51:50:77:64:3F:F9:5A:2E:97:29
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2CF712B066B54FABD1BC1CA63456134EBB363864
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210925.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 210925
IP address blocks: 2a06:a005:14::/48 maxlen: 48
2a06:a005:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f7:12:b0:66:b5:4f:ab:d1:bc:1c:a6:34:56:13:4e:bb:36:38:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=33E02740345A449B3CDF515077643FF95A2E9729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:91:36:c9:17:90:a7:0a:de:36:0b:a0:87:
ac:b7:50:87:1b:2c:a5:f4:3c:35:8d:31:a4:b6:1e:
c2:ae:7d:12:2e:6d:a0:8b:25:98:2e:59:e5:1d:1c:
63:27:94:58:00:a1:f8:05:90:b8:7c:0a:b6:1d:10:
a4:20:80:63:1d:fd:4d:d4:25:c7:b5:49:8b:72:13:
1a:15:92:b1:d1:02:00:a9:d3:6a:35:f0:14:c1:f7:
e4:91:47:53:f4:ba:7f:4c:03:62:e3:a5:d2:ed:08:
1c:7f:f9:c6:16:f8:13:a0:dd:7c:a3:b3:ae:75:ca:
6a:20:41:85:8a:64:94:fa:c1:c6:2e:b2:74:58:aa:
50:9e:f9:aa:61:48:43:41:59:f6:b2:3d:b2:a5:f7:
f6:53:4b:e3:c7:4f:a2:93:a2:4d:27:e6:b7:75:99:
19:a8:de:70:0d:0c:e2:55:1a:f5:52:be:09:ca:17:
10:d7:93:79:e2:11:f7:72:7f:d1:05:99:a5:17:d8:
c7:bb:7a:d6:b9:45:5f:2f:1b:90:4e:0c:4b:44:2b:
77:de:8e:c1:9b:f6:bb:0d:f0:89:76:37:91:87:39:
03:4d:19:3f:07:67:cc:72:88:de:70:01:d1:86:d6:
0d:7c:5c:b3:7b:09:81:2d:2a:8e:18:cf:bb:8c:7b:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E0:27:40:34:5A:44:9B:3C:DF:51:50:77:64:3F:F9:5A:2E:97:29
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14::/47
Signature Algorithm: sha256WithRSAEncryption
5f:e3:73:16:c9:b8:2c:94:ae:e4:3b:c2:ab:e8:1b:ba:09:96:
1e:de:18:12:13:46:f4:a8:a0:dd:c7:5e:65:73:e7:8e:22:5e:
87:ae:a1:82:76:f8:c0:dc:e5:b9:17:17:3f:99:9f:a4:b4:07:
22:2e:20:c3:cf:79:c7:cb:b0:55:e3:eb:92:d4:27:f2:6c:15:
36:2a:2d:bc:16:9e:a2:c0:98:22:f1:8d:87:f2:e7:6c:e2:d1:
60:83:ef:19:39:30:5b:b0:f9:a4:d0:9b:0d:a2:d0:1c:ff:24:
a5:65:b2:a8:9d:45:e5:aa:c9:b4:e6:3f:91:2a:8b:b7:61:a3:
54:a2:b5:67:b5:af:8d:72:44:cc:e8:dc:38:b7:a3:df:87:75:
a1:f0:8f:9b:d3:dc:ad:f8:2d:7b:d3:2d:df:0a:58:55:43:44:
03:3a:c5:e6:2d:04:69:9c:27:53:c9:2f:59:01:30:f2:da:1d:
6a:b5:2b:f5:37:fd:67:b8:f1:9e:9b:9e:13:83:99:9d:95:70:
7c:b7:1d:c6:5d:ee:fc:96:fa:22:b2:f3:38:ec:e9:32:a6:e1:
f9:7e:76:af:ec:1f:2b:5a:11:d6:4b:ef:8f:ab:0d:2e:a3:0e:
74:89:fb:cf:bd:82:96:52:bf:d5:c8:f4:ac:47:a6:11:26:5d:
b6:08:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:54 2025 by rpki-client