Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211367.roa
File: AS211367.roa (raw, json)
Hash identifier: /xjjXD3kJvpK+vg/JnZtKNYmxwppMWjKscNlc1bznYE=
Subject key identifier: 09:68:9F:5A:8E:E2:7B:8F:A4:4F:16:34:80:A8:F6:0E:70:95:3B:1F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0E75AA571EF2BB59A937436F6594CE0952C7F491
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211367.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 211367
IP address blocks: 2a06:a005:420::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:75:aa:57:1e:f2:bb:59:a9:37:43:6f:65:94:ce:09:52:c7:f4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=09689F5A8EE27B8FA44F163480A8F60E70953B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:96:c7:81:b5:8b:a1:ff:21:43:72:dd:7d:
d4:18:6d:c6:ee:c1:b7:39:3e:34:8c:73:bf:5c:b7:
80:be:31:e7:c3:7b:1e:94:3f:5f:a7:9f:4f:ba:af:
ee:5d:88:5d:72:12:2a:5f:37:20:f7:f7:52:9a:71:
cd:f8:99:db:89:02:ee:96:cb:14:e7:6b:93:95:b8:
f5:49:f9:4b:f7:5c:20:aa:a9:e3:41:61:9f:26:e3:
12:41:8b:77:cc:01:f6:20:6c:56:cd:1b:ae:d5:03:
aa:22:35:d8:24:18:b5:36:11:f3:df:ce:9c:79:aa:
d5:b3:de:f6:85:ba:3b:dc:9e:a0:34:f3:88:6f:14:
b3:1f:b8:3f:d5:2f:5a:76:1e:0c:7d:af:e2:df:a9:
8e:62:d9:a8:1e:c5:62:c0:e6:16:5d:35:0a:0a:d0:
e7:f0:a7:fa:15:66:88:01:28:c9:6a:b2:17:f5:63:
7a:e6:e4:57:8c:f3:46:e2:ae:29:5f:8c:e4:0b:cb:
5c:8b:bf:b2:b2:1e:c9:5a:9e:b4:cf:f1:a1:b7:57:
30:fd:a5:ef:cd:1a:5a:8c:fd:53:cd:68:71:0e:c4:
c5:a9:6c:bf:63:76:6e:70:5b:35:ee:c6:4a:0f:c3:
5c:3a:af:5a:f3:90:56:0c:c9:c2:10:10:47:ff:77:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:68:9F:5A:8E:E2:7B:8F:A4:4F:16:34:80:A8:F6:0E:70:95:3B:1F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:420::/44
Signature Algorithm: sha256WithRSAEncryption
a4:e3:5c:ff:ce:1a:f4:7c:f4:41:07:cd:8d:83:d2:fe:6b:7c:
ff:5c:64:0d:9c:7f:62:f2:65:8f:89:3b:e8:86:ca:19:59:7d:
da:20:69:05:5d:73:ba:1c:12:ca:65:0f:48:1a:a4:95:58:a5:
3b:81:11:6f:89:be:2e:9e:82:cb:c9:9e:e3:67:ad:7c:5d:be:
34:55:2a:e5:e0:56:6a:11:ad:73:47:5b:c6:40:e6:59:d2:96:
40:93:f3:1f:f6:e3:03:fd:2a:e7:19:9e:67:c1:28:b8:24:52:
f5:29:b2:1c:1e:d8:10:83:d9:00:73:cc:1e:85:20:ed:ee:40:
2f:6a:bf:97:a6:f6:b0:c9:43:2d:56:47:b6:5e:fd:63:50:e3:
d1:7e:e8:fd:17:63:30:a6:95:4a:66:18:99:c3:de:82:33:e1:
05:fb:44:d2:d5:6c:f5:95:96:0a:a2:41:1f:97:2d:de:2a:de:
18:44:02:f0:59:c1:2c:6e:9b:f0:3a:13:7c:ff:ed:38:64:61:
fa:43:a6:ca:e6:fb:f0:21:f5:3c:d5:88:9f:93:0e:97:d7:c8:
c5:68:72:05:ad:47:f9:4c:9d:27:be:b8:47:43:c1:8f:0d:4a:
15:5b:cf:99:68:46:6f:95:c7:45:fb:94:5e:1c:89:e3:91:42:
5f:69:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:59 2025 by rpki-client