Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210951.roa
File: AS210951.roa (raw, json)
Hash identifier: 2iww48Ohx2U13PsKdiNVbP+VgB2aZgZZ83uO/PLw45k=
Subject key identifier: 59:62:D4:34:77:0E:53:56:EC:29:3A:62:78:51:1A:84:42:3C:4E:E3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 430611960A2C9FFDA2B3D05932218C97387CD0B8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210951.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 210951
IP address blocks: 2a06:a005:5c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:06:11:96:0a:2c:9f:fd:a2:b3:d0:59:32:21:8c:97:38:7c:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=5962D434770E5356EC293A6278511A84423C4EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:db:cd:09:2d:44:1d:56:e1:2f:ef:7f:b0:
3c:ba:35:e2:da:27:50:77:98:db:50:5c:42:70:4f:
9f:3f:48:c1:bb:68:2b:86:e9:93:20:fa:2c:27:b6:
e4:c5:9e:e0:96:32:71:8b:94:74:65:72:d0:83:50:
b0:ae:6c:90:12:6b:bd:34:00:5d:0d:94:53:43:c5:
e0:3d:e9:ef:c0:d8:0d:20:d7:b6:24:27:f3:bb:3a:
d3:aa:95:c2:e6:80:f8:b9:99:16:63:81:93:e1:3a:
d3:a5:f2:a6:fc:ec:dd:c7:e0:6a:fb:3c:8a:29:72:
b1:01:63:6d:78:b4:28:63:1d:c8:76:02:1a:ba:af:
01:4b:3c:36:7a:69:55:70:c5:ea:ac:10:dd:7a:60:
d3:32:61:a0:55:fc:33:29:84:64:dc:36:d6:33:85:
3c:95:a4:2e:7d:12:5f:bf:ab:56:45:ba:6b:d6:0c:
ef:0a:7f:57:03:d6:12:32:bd:51:cd:5d:14:89:0d:
ea:c9:99:86:a6:6c:44:65:f1:98:d7:c1:f6:9b:2c:
c5:67:18:87:6b:69:70:c8:79:47:2a:ad:cc:49:61:
d5:00:3a:b0:49:73:13:0c:48:86:c3:c2:d9:04:a4:
7c:36:e6:26:a3:21:4b:5f:9e:33:26:4d:44:ca:53:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:D4:34:77:0E:53:56:EC:29:3A:62:78:51:1A:84:42:3C:4E:E3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
e4:8d:71:c2:50:5f:92:7d:11:28:59:22:ff:c4:1b:a4:2d:79:
9b:65:f3:fc:7b:76:f8:24:0d:9d:8b:11:9e:54:ce:2f:0b:bc:
11:af:bc:8e:4d:9b:53:c2:f0:c7:45:03:e0:93:41:20:89:75:
44:b5:4d:19:c9:34:df:f1:db:5c:85:11:6e:cd:78:a2:1f:fb:
5b:97:0b:81:15:b3:b2:56:fb:cb:2e:b4:33:d1:f2:b1:31:e3:
3a:5c:4b:f7:b6:84:eb:34:a2:2d:d6:e4:e7:29:6e:39:7f:8e:
88:dc:e0:c5:f7:d6:ef:6e:bd:ae:49:b6:01:69:a6:fd:5f:ec:
72:8c:b9:a0:67:03:da:7c:9d:52:02:a1:3b:12:74:ce:59:a6:
4f:08:0d:55:a4:37:0e:75:e3:28:d2:27:4a:ad:5c:18:56:62:
c0:36:b2:14:f9:27:d2:1e:1a:6f:fe:ec:ae:07:93:d2:cc:5e:
e2:ab:de:25:ac:9e:fb:ee:4c:61:7e:fd:b7:0e:d6:8d:35:b7:
5a:b7:1b:d5:52:57:45:7b:1f:e0:a5:e5:87:9f:7b:66:0a:0c:
2b:ef:aa:dc:75:5a:7f:79:4e:1b:ee:9f:4c:02:b6:ca:f7:fb:
b9:61:37:f7:c6:45:41:37:b7:ff:4f:c8:82:e8:d1:75:6e:ad:
5f:39:10:53
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUQwYRlgosn/2is9BZMiGMlzh80LgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTBaFw0yMzEyMjAxNjU2NTBaMDMxMTAvBgNV
BAMTKDU5NjJENDM0NzcwRTUzNTZFQzI5M0E2Mjc4NTExQTg0NDIzQzRFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgS9vNCS1EHVbhL+9/sDy6NeLa
J1B3mNtQXEJwT58/SMG7aCuG6ZMg+iwntuTFnuCWMnGLlHRlctCDULCubJASa700
AF0NlFNDxeA96e/A2A0g17YkJ/O7OtOqlcLmgPi5mRZjgZPhOtOl8qb87N3H4Gr7
PIopcrEBY214tChjHch2Ahq6rwFLPDZ6aVVwxeqsEN16YNMyYaBV/DMphGTcNtYz
hTyVpC59El+/q1ZFumvWDO8Kf1cD1hIyvVHNXRSJDerJmYambERl8ZjXwfabLMVn
GIdraXDIeUcqrcxJYdUAOrBJcxMMSIbDwtkEpHw25iajIUtfnjMmTUTKU1CNAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUWWLUNHcOU1bsKTpieFEahEI8TuMwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEw
OTUxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQXAMA0GCSqGSIb3DQEBCwUAA4IBAQDkjXHCUF+S
fREoWSL/xBukLXmbZfP8e3b4JA2dixGeVM4vC7wRr7yOTZtTwvDHRQPgk0EgiXVE
tU0ZyTTf8dtchRFuzXiiH/tblwuBFbOyVvvLLrQz0fKxMeM6XEv3toTrNKIt1uTn
KW45f46I3ODF99bvbr2uSbYBaab9X+xyjLmgZwPafJ1SAqE7EnTOWaZPCA1VpDcO
deMo0idKrVwYVmLANrIU+SfSHhpv/uyuB5PSzF7iq94lrJ777kxhfv23DtaNNbda
txvVUldFex/gpeWHn3tmCgwr76rcdVp/eU4b7p9MArbK9/u5YTf3xkVBN7f/T8iC
6NF1bq1fORBT
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:02 2025 by rpki-client