Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210932.roa
File: AS210932.roa (raw, json)
Hash identifier: /OJq+C6rdXBtbVN576/Z5QaTFD6SSN4wPXs2aLaGeg4=
Subject key identifier: 05:19:13:DE:F2:81:BD:2C:CB:60:9F:20:73:52:7E:0F:7C:FF:EB:84
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 32E19B80BCB4ACF2CD230A7348AE190F44AEB21F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210932.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 210932
IP address blocks: 2a06:a005:570::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e1:9b:80:bc:b4:ac:f2:cd:23:0a:73:48:ae:19:0f:44:ae:b2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=051913DEF281BD2CCB609F2073527E0F7CFFEB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:b0:de:c7:58:c3:ff:7a:95:ec:e1:46:c7:
73:72:3d:27:e1:ab:c4:6f:c0:7f:0f:e6:ed:6f:f7:
d9:fb:f9:c8:a9:91:a7:21:19:f9:32:25:1a:78:56:
96:4d:ea:91:77:a4:4c:8d:95:72:28:86:b2:93:ae:
ec:cb:35:cd:d2:f9:ab:ce:35:86:bd:d3:23:30:91:
51:73:c9:c0:68:26:b2:0e:14:f1:e1:f3:fb:f3:60:
7b:be:d0:fc:ee:f1:46:16:15:b8:d7:46:4b:46:b8:
59:b3:8e:5a:0c:b4:b2:a1:6f:b2:2f:80:81:a0:be:
5e:6e:69:2f:1f:7d:9e:a9:67:57:6a:14:05:75:a4:
e5:43:ef:3c:87:f4:67:44:52:88:3a:fa:cd:f2:69:
92:97:25:a3:fa:19:91:10:8b:36:24:8f:d2:9f:71:
60:94:0d:0f:0e:dc:f9:23:0f:d9:5a:06:7e:ec:02:
c0:09:4f:c1:0e:a6:24:07:e4:2f:28:b7:1c:21:a9:
17:23:bb:2f:77:75:56:2f:5a:98:a8:b3:9f:0f:ac:
cf:7e:c1:03:bc:a9:78:6b:3e:2a:e8:92:4f:f3:6c:
b3:cd:ed:7d:28:5c:19:26:63:17:35:d7:38:13:4d:
c0:b2:e3:61:b5:59:6b:ad:de:37:e1:af:4f:59:3e:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:19:13:DE:F2:81:BD:2C:CB:60:9F:20:73:52:7E:0F:7C:FF:EB:84
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:570::/44
Signature Algorithm: sha256WithRSAEncryption
41:9c:63:9f:ac:a8:6e:a6:c0:b7:13:cb:c3:2f:c3:c7:a3:f4:
c2:e5:d6:fe:42:95:c3:2b:25:7f:d9:43:56:07:7b:e9:c4:51:
74:15:23:1b:32:dd:ca:d1:30:fa:17:99:95:88:c6:9d:51:12:
d3:bc:ba:38:13:e0:e7:5a:56:79:0b:7f:ea:1a:68:7c:de:32:
1c:53:98:90:29:24:20:52:e2:ce:2d:2a:d4:a1:f0:d0:a7:c4:
0d:13:a4:71:da:87:71:e6:c9:52:ff:ba:41:13:48:d6:63:bb:
d0:08:9b:70:c2:5a:6d:0b:95:43:48:66:a4:06:6d:b4:f9:c5:
c2:68:a2:c9:88:a5:ee:f9:28:8f:55:03:53:17:2f:d8:e1:1a:
14:95:fa:e6:27:90:98:d4:18:51:6d:f1:44:a9:12:a0:68:b9:
48:37:44:8c:4f:17:58:d0:a5:56:2c:3d:7f:68:c8:ba:bc:62:
28:cd:ed:a2:6f:5f:d7:1d:1c:39:be:c1:e6:dd:59:e5:9d:6e:
9d:2d:9c:e1:b8:01:f5:2e:21:ca:08:d4:40:87:8b:38:41:f7:
00:59:54:fc:1f:a8:2d:e9:54:7f:e6:96:cb:a3:9e:76:6f:98:
20:8b:ae:bf:84:31:be:37:69:1a:05:ec:59:c7:9d:6d:6f:42:
bd:84:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:15:47 2025 by rpki-client