Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211063.roa
File: AS211063.roa (raw, json)
Hash identifier: NmklZbpJfUG5j7IZR3GG6kfQuV3uhrtt1TAa3w9k8XY=
Subject key identifier: 45:26:28:B5:B4:A1:C0:D6:FD:CF:C6:62:5C:D7:8D:D0:FF:31:6D:6F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1E88EB092C16BBE2FA644F876DFFD654829B2B04
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211063.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 211063
IP address blocks: 2a06:a005:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:88:eb:09:2c:16:bb:e2:fa:64:4f:87:6d:ff:d6:54:82:9b:2b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=452628B5B4A1C0D6FDCFC6625CD78DD0FF316D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:a9:35:4e:fb:59:09:b1:8a:fa:3f:de:ea:
67:bb:47:c6:7a:e7:a9:66:8c:91:ea:8f:ed:7e:b1:
35:69:e4:b6:3f:6a:bb:fe:89:88:b5:60:0c:3d:76:
77:2c:24:61:8c:6e:ff:36:96:03:3e:15:57:b7:27:
16:87:e2:73:34:fe:66:2b:e5:76:54:e1:24:a8:be:
cd:f5:5e:0d:a8:f8:2c:43:50:c3:6a:94:2c:8e:1b:
ec:2a:93:78:22:57:b6:6b:e9:fd:55:c9:da:ea:50:
b1:6d:0b:5f:ce:de:89:f3:b6:82:48:53:41:fd:19:
ed:62:84:68:04:e1:86:58:ae:db:2d:1b:7b:9f:b8:
b6:81:05:43:1c:df:c7:4b:b3:b0:da:50:ff:c4:a4:
80:d6:ab:5d:c0:6d:9e:b9:59:45:c0:0a:2e:68:1c:
f9:ce:de:42:6e:e3:8b:2b:90:4a:f0:bf:e3:32:39:
f7:ba:01:b4:af:37:bc:6b:8e:f1:cd:12:3f:74:1a:
aa:0d:00:b4:c9:0d:95:09:b2:34:e2:96:86:6b:22:
58:b1:c2:4a:d5:83:e1:65:d0:75:73:4e:ae:85:a5:
12:95:21:f9:ec:df:83:9c:75:4d:2a:9e:a5:c3:7d:
bb:56:25:5a:27:3e:b3:0e:2f:60:44:40:b3:4f:c0:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:28:B5:B4:A1:C0:D6:FD:CF:C6:62:5C:D7:8D:D0:FF:31:6D:6F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211063.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d::/48
Signature Algorithm: sha256WithRSAEncryption
96:b1:b1:51:c8:0c:44:b2:38:08:9c:2d:19:02:b6:50:8e:1a:
d4:ff:c1:b5:82:32:8f:75:68:14:30:85:df:47:36:08:88:cc:
46:80:8f:9a:08:77:f0:fa:2b:ed:75:eb:3b:cd:2f:34:8d:35:
f9:e9:cd:d7:ee:a7:1d:b2:63:12:92:69:ee:10:bb:85:be:82:
b1:55:d9:3f:d6:d9:b2:74:2f:cd:e0:42:87:9b:14:c5:88:6e:
ec:ca:e3:85:82:51:b7:94:be:57:11:e7:e9:76:c9:d4:69:98:
ab:61:bb:36:d5:77:d7:c5:82:63:0c:58:83:15:0d:13:bd:3f:
fb:00:a0:d3:e6:21:3a:65:9a:cf:40:8c:60:75:c3:6c:9e:8b:
6f:ca:0c:cf:fb:fb:e1:1b:ee:a5:28:d8:b5:67:85:88:dd:99:
0b:9b:84:d1:cb:e0:f2:dd:91:3b:2b:e5:cd:56:23:54:52:fe:
d2:39:8a:16:1d:54:e4:11:d0:97:0c:33:e5:dd:78:fc:54:98:
e7:c0:ab:01:5b:89:61:d7:e7:ba:02:ae:0b:82:bd:90:76:d3:
f8:48:ff:29:07:53:b7:e0:6d:22:6f:aa:80:fc:2a:84:66:a7:
fe:ff:05:3f:d4:79:91:25:99:27:8c:07:38:f0:2e:2c:f3:ae:
1c:18:83:ff
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUHojrCSwWu+L6ZE+Hbf/WVIKbKwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKDQ1MjYyOEI1QjRBMUMwRDZGRENGQzY2MjVDRDc4REQwRkYzMTZENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkKk1TvtZCbGK+j/e6me7R8Z6
56lmjJHqj+1+sTVp5LY/arv+iYi1YAw9dncsJGGMbv82lgM+FVe3JxaH4nM0/mYr
5XZU4SSovs31Xg2o+CxDUMNqlCyOG+wqk3giV7Zr6f1VydrqULFtC1/O3onztoJI
U0H9Ge1ihGgE4YZYrtstG3ufuLaBBUMc38dLs7DaUP/EpIDWq13AbZ65WUXACi5o
HPnO3kJu44srkErwv+MyOfe6AbSvN7xrjvHNEj90GqoNALTJDZUJsjTiloZrIlix
wkrVg+Fl0HVzTq6FpRKVIfns34OcdU0qnqXDfbtWJVonPrMOL2BEQLNPwJcxAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQURSYotbShwNb9z8ZiXNeN0P8xbW8wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEx
MDYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQAdMA0GCSqGSIb3DQEBCwUAA4IBAQCWsbFRyAxE
sjgInC0ZArZQjhrU/8G1gjKPdWgUMIXfRzYIiMxGgI+aCHfw+ivtdes7zS80jTX5
6c3X7qcdsmMSkmnuELuFvoKxVdk/1tmydC/N4EKHmxTFiG7syuOFglG3lL5XEefp
dsnUaZirYbs21XfXxYJjDFiDFQ0TvT/7AKDT5iE6ZZrPQIxgdcNsnotvygzP+/vh
G+6lKNi1Z4WI3ZkLm4TRy+Dy3ZE7K+XNViNUUv7SOYoWHVTkEdCXDDPl3Xj8VJjn
wKsBW4lh1+e6Aq4Lgr2QdtP4SP8pB1O34G0ib6qA/CqEZqf+/wU/1HmRJZknjAc4
8C4s864cGIP/
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:36 2025 by rpki-client