Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211360.roa
File: AS211360.roa (raw, json)
Hash identifier: xn3tgi/mOuS7dQ1AUkQ5AstQB/BdzYkufdONX7F6V+o=
Subject key identifier: 3A:65:A0:82:57:2E:13:40:46:BF:A7:EA:DD:8C:A9:C7:8C:D6:A5:C0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 656D1CF6110FE5726C6EBCF3D88BB1F526DFD49A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211360.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 211360
IP address blocks: 2a06:a005:1f::/48 maxlen: 48
2a06:a005:a90::/44 maxlen: 48
2a06:a005:aa0::/44 maxlen: 48
2a06:a005:ab0::/44 maxlen: 48
2a06:a005:ac0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6d:1c:f6:11:0f:e5:72:6c:6e:bc:f3:d8:8b:b1:f5:26:df:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=3A65A082572E134046BFA7EADD8CA9C78CD6A5C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:af:36:57:34:06:b5:45:85:ed:59:6e:c9:
80:ab:f6:68:3d:ca:b0:91:c3:51:b1:a5:f5:5a:ec:
19:bd:5c:d8:af:0a:4f:4b:94:8f:6f:e3:41:1d:85:
88:48:2b:f9:c4:85:14:bc:f2:cc:55:e1:dc:83:06:
96:86:a4:81:e9:c1:97:35:27:4b:68:40:e5:fa:8e:
cb:36:9e:77:11:0d:b2:76:13:5f:91:c9:12:be:bf:
ad:51:a6:b3:04:e9:53:be:58:a6:55:a9:9c:10:58:
f3:a3:6b:09:c9:64:90:9d:69:58:1e:f5:1a:63:15:
be:48:4b:00:09:75:8e:29:61:94:ae:3a:4f:0a:92:
65:66:3c:b1:c7:a4:ea:9a:db:34:d5:48:40:9a:a7:
11:d6:95:fd:09:1e:52:d9:c3:d3:54:3b:b8:c5:28:
a0:fc:28:a2:87:6d:42:85:c2:a9:59:c2:d9:9c:c3:
d9:0c:57:f4:b9:8d:6e:32:88:36:dc:4a:ba:66:1f:
1c:40:57:a5:1a:1e:56:03:c3:85:f3:fe:7b:d0:b0:
5b:80:51:6a:1f:d8:c5:26:80:43:75:e9:d9:e5:5c:
a9:6e:c7:38:c8:f9:5d:ee:46:64:81:9e:09:0e:39:
78:cb:aa:c7:08:48:32:e3:63:26:ab:87:bd:2a:e6:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:A0:82:57:2E:13:40:46:BF:A7:EA:DD:8C:A9:C7:8C:D6:A5:C0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1f::/48
2a06:a005:a90::-2a06:a005:acf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:c6:4f:43:ca:3e:96:41:2f:ad:12:99:66:1f:53:ea:6d:cc:
0d:84:e1:dd:ec:5e:30:75:2d:70:ed:67:e0:f7:30:ae:80:f7:
49:5b:6a:1e:2d:68:f2:01:0c:78:fc:10:f6:6e:b7:77:c0:0f:
e6:b6:46:30:ab:82:aa:15:d9:58:a0:ce:c0:57:aa:cd:b9:6c:
c2:4b:3d:ab:9d:31:cd:1f:2f:ac:ec:07:31:90:50:93:f5:14:
20:1f:2b:83:ec:f8:bf:99:0c:37:38:07:b7:a1:94:9a:4f:60:
e9:2d:1f:cf:8a:d3:fe:13:43:2b:5b:70:4a:22:04:dc:18:7d:
af:18:ea:04:67:53:97:c7:22:6d:40:64:f4:a0:d6:e8:e7:37:
46:b1:1b:2a:a8:47:a5:1e:34:70:49:73:b6:f8:81:1e:b9:e7:
95:8b:23:b3:df:3a:b9:0d:7c:3d:57:d0:81:a8:65:ff:b8:ea:
50:74:b6:c5:08:29:ac:5b:3e:8b:52:3f:33:33:7b:1e:ba:ff:
4e:d0:91:bb:74:89:79:08:da:fa:bd:be:fb:4c:3c:1e:3d:15:
0b:1f:19:78:53:2d:43:ce:81:5b:01:e9:9f:ee:d9:99:dd:4a:
8e:1c:c7:0f:a6:38:31:63:95:43:19:c7:04:6f:74:a0:fb:de:
b9:d7:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:27 2025 by rpki-client