Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211139.roa
File: AS211139.roa (raw, json)
Hash identifier: tZZq/gGVE7jXC65j2Zt/0ryi3pFpn/VuubXPCFDSN0c=
Subject key identifier: 2B:7B:59:7C:4D:E9:4C:34:6D:EA:88:CF:47:CC:62:BD:72:70:F5:49
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6EE4B37D93FA275E67ACB08F861959215AB63B2E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211139.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 211139
IP address blocks: 2a06:a005:2c0::/44 maxlen: 48
2a06:a005:2d6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e4:b3:7d:93:fa:27:5e:67:ac:b0:8f:86:19:59:21:5a:b6:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=2B7B597C4DE94C346DEA88CF47CC62BD7270F549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:17:7c:40:e0:a4:dc:64:d4:36:38:bd:ed:
43:27:4e:cb:12:fa:d6:43:bf:94:69:43:26:7f:32:
b0:0f:b6:ee:59:01:82:18:f5:f3:76:84:2e:97:6c:
0f:a7:18:b2:6b:24:29:54:02:72:04:9b:5f:a6:56:
8f:82:66:85:9a:cd:9c:33:f4:58:c4:65:b3:89:d4:
1c:2f:79:55:a0:a9:ca:27:e0:0c:f1:2f:70:4e:84:
e3:a6:14:a8:91:8e:9b:19:e6:d6:77:26:fb:f1:3c:
ed:d6:f5:a0:6a:78:b1:e5:67:7a:a7:65:37:c0:fb:
17:0d:ee:18:5a:4b:70:d8:ac:81:0b:1e:b4:8c:69:
d3:24:70:5a:37:9e:8d:c7:b3:10:e1:19:eb:f0:0d:
18:63:d1:70:d2:05:3d:75:95:6a:05:1b:3b:20:3f:
d4:10:da:74:a6:3d:48:16:09:2a:b8:72:03:90:e3:
8a:e1:91:24:16:a9:ba:dd:d7:fc:af:65:51:a0:4f:
84:f9:e7:ac:c7:b3:30:53:29:f1:53:5c:80:c0:7a:
fd:0b:56:c1:76:72:42:c8:0a:76:e7:6b:96:e0:72:
30:0a:0c:55:3c:77:b5:c7:03:f0:1a:24:5f:8d:f5:
4a:5d:78:d6:b9:f2:ca:cb:d1:67:cd:2e:87:bc:7a:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7B:59:7C:4D:E9:4C:34:6D:EA:88:CF:47:CC:62:BD:72:70:F5:49
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c0::/44
2a06:a005:2d6::/48
Signature Algorithm: sha256WithRSAEncryption
c9:46:19:e3:b5:50:59:00:6f:94:54:20:23:4a:30:82:39:8c:
54:06:91:f6:18:76:49:c6:36:b1:9f:14:98:c3:1c:e7:7b:c4:
47:60:a4:59:e3:fd:89:4e:e6:6d:8d:99:a9:ee:86:fd:30:a4:
01:ea:69:af:a7:c7:8b:66:e0:56:ae:08:bc:ff:98:1e:05:8f:
7c:f2:41:fa:fd:38:45:39:22:b7:de:99:6d:ef:f3:61:11:8b:
f1:06:2c:ab:b8:61:67:18:a3:f2:69:47:21:38:5a:6a:52:03:
ae:4a:24:8c:cd:f1:40:82:87:c9:c6:53:59:6f:55:d0:3e:64:
14:90:4b:da:87:c9:24:25:f5:66:4a:df:e8:a4:a5:b1:89:73:
6a:c1:d7:7b:21:33:3e:73:66:3e:5e:6f:63:ad:9d:53:3b:73:
43:e5:90:8b:18:49:91:4f:27:84:e9:22:03:62:19:1e:95:58:
e2:bc:65:9f:dc:94:90:56:63:92:82:d6:50:c5:b6:00:e3:e6:
d6:f0:db:66:9c:33:53:a7:86:29:5f:96:a0:15:b6:f2:48:ec:
99:66:47:14:02:c9:d1:04:8c:1f:25:13:43:26:17:59:cb:6d:
f9:a7:a2:fd:0a:b1:df:3e:9c:27:87:07:28:89:90:a2:f2:37:
d2:cd:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:58 2025 by rpki-client