Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211390.roa
File: AS211390.roa (raw, json)
Hash identifier: sRupLLz6EOPJ4m8rH2zPEZjh2SooApzUUns/8Bo5qTI=
Subject key identifier: 28:63:3D:37:B7:A9:6A:DB:38:AF:B0:95:C5:38:C7:E9:1B:0A:17:EC
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7675A8C29652E5F5C2DAFCF94DAF1E239DD602FE
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211390.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 211390
IP address blocks: 2a06:a005:45e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:75:a8:c2:96:52:e5:f5:c2:da:fc:f9:4d:af:1e:23:9d:d6:02:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=28633D37B7A96ADB38AFB095C538C7E91B0A17EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:e5:5c:1c:f3:03:21:de:81:68:7c:d4:09:
bd:f6:b6:bd:d3:30:4d:0a:67:ad:3e:4e:fd:23:a6:
1d:85:1f:44:d2:b5:67:75:b8:5c:37:26:c4:a7:63:
fc:9a:1b:32:5a:27:2f:a0:9c:2a:c8:0c:66:67:67:
7e:53:72:36:28:bd:f4:d9:3a:fc:28:90:b1:51:d6:
7d:bf:d5:95:67:85:08:7b:c7:90:9f:1c:1c:26:49:
aa:74:7e:66:b5:ae:9c:d1:dd:32:1b:71:dc:8c:50:
86:f2:14:06:26:a6:a6:79:77:0a:06:17:d1:f1:d0:
4a:5a:ae:2c:cc:55:06:ba:08:8f:cc:68:b1:42:9e:
83:2d:de:11:80:fb:be:57:82:6c:60:0f:79:6f:d8:
30:88:0e:83:2a:61:96:01:be:95:e4:d2:4a:3a:45:
0c:4a:f3:d0:dc:ae:28:e4:b6:5a:a0:88:d2:ef:6c:
14:b8:b4:d3:ea:f2:1f:66:8c:8f:74:ec:9d:1e:97:
76:f4:d1:29:1d:fb:22:c0:3a:58:d6:dd:a8:89:ee:
d5:56:ef:52:b5:e8:95:7f:97:68:ba:9a:b3:c3:e9:
f9:79:89:2a:5f:6d:96:3f:78:09:01:7e:91:dc:b4:
2e:25:eb:16:f6:8c:46:0d:43:96:4d:99:98:a6:12:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:3D:37:B7:A9:6A:DB:38:AF:B0:95:C5:38:C7:E9:1B:0A:17:EC
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45e::/48
Signature Algorithm: sha256WithRSAEncryption
37:a7:90:6d:4c:60:35:44:99:02:8f:64:47:36:91:00:68:72:
e6:12:36:72:0e:29:80:d3:d3:9f:75:e8:09:4c:8b:bc:a0:e6:
f5:3a:c1:ea:b3:1b:53:cc:99:7b:76:9e:e4:3d:12:fb:82:2d:
db:57:88:f3:55:b6:a6:e0:5e:85:e8:b0:d9:a5:c4:56:42:a7:
0f:96:74:70:08:aa:d9:88:8a:a0:39:8c:71:3f:2f:47:e1:3a:
43:de:25:1b:ab:09:97:75:ae:dc:36:1f:9c:54:96:0f:42:cc:
ea:e7:5b:f5:77:a9:5d:5f:40:e7:b2:ef:79:56:1e:28:19:cf:
95:2e:34:07:f3:0b:a7:4b:65:60:db:8f:cb:70:09:e9:b5:c1:
4b:b9:ba:0e:98:e9:06:d1:ea:53:e4:f3:1d:0b:b7:36:08:29:
d1:0b:19:e2:e0:12:d4:f4:1b:12:b6:b9:c9:17:98:15:61:99:
1a:f5:ee:7c:31:6b:f6:d2:10:0f:52:9c:67:26:e8:f4:ad:ec:
00:bc:25:61:b0:ad:bd:24:9e:c7:41:15:73:cc:d2:ea:03:9b:
16:03:73:3f:8f:83:2a:23:0e:23:83:39:2e:28:68:41:d0:5d:
fe:27:51:df:1e:ad:e7:ad:a1:d8:4b:f8:f1:ab:41:2e:4d:0e:
b0:dc:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:17 2025 by rpki-client