Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211405.roa
File: AS211405.roa (raw, json)
Hash identifier: iRLXi0eIfYTLLlwHha7EcvufOMt3ZYf3cLPRuJzyEw4=
Subject key identifier: 12:B8:EE:AA:DA:1C:CC:8A:F0:B8:60:49:21:51:E3:C1:68:CC:53:FF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 601E6A34C29351202A0D7F5C91F09DB219ADA52F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211405.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 211405
IP address blocks: 2a06:a005:16a0::/44 maxlen: 48
2a06:a005:1920::/44 maxlen: 48
2a06:a005:1ad0::/44 maxlen: 48
2a06:a005:1ae0::/44 maxlen: 48
2a06:a005:1b50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1e:6a:34:c2:93:51:20:2a:0d:7f:5c:91:f0:9d:b2:19:ad:a5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=12B8EEAADA1CCC8AF0B860492151E3C168CC53FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:5e:15:b3:3f:99:0d:38:a4:e2:85:b2:6b:
b3:d8:b2:f9:76:2a:a6:b3:2b:d3:f4:45:1d:c2:a0:
de:79:31:29:23:4c:f3:ea:e2:bf:b1:bb:9b:2d:8e:
2c:61:9e:15:04:0a:b7:c2:c4:52:a4:fd:9d:0f:72:
5d:65:83:44:38:9a:90:d7:35:54:6f:94:a7:63:95:
59:b5:a0:30:9f:65:b2:32:8f:33:31:11:73:46:94:
34:1f:f1:f5:9e:6f:0b:96:3c:ef:f0:80:7b:d0:1b:
32:91:44:23:01:94:4c:0d:c1:86:8c:1b:72:12:4c:
3e:f8:e2:c6:8d:ff:fe:91:60:3e:a8:db:63:89:3d:
96:1c:30:ef:82:66:c7:f5:2a:e2:94:85:d3:6d:42:
c9:d5:69:ee:9e:de:1c:47:b6:1a:67:6a:90:ec:e6:
cb:d6:9f:27:72:ee:3f:ac:46:30:24:0b:0a:f7:98:
6d:2c:bc:c7:bc:b0:e8:33:4b:2d:9e:4a:e2:91:98:
0e:4d:20:e6:32:8e:40:d2:2d:85:96:2f:ab:4f:96:
84:f8:ba:7b:dd:11:f9:11:45:b8:25:bb:fe:1f:e7:
c0:2c:9b:4e:bb:6a:36:e7:d3:7d:be:5e:57:ce:53:
5e:ba:da:b2:53:09:3f:54:40:8b:82:a5:93:d1:9b:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:EE:AA:DA:1C:CC:8A:F0:B8:60:49:21:51:E3:C1:68:CC:53:FF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:16a0::/44
2a06:a005:1920::/44
2a06:a005:1ad0::-2a06:a005:1aef:ffff:ffff:ffff:ffff:ffff
2a06:a005:1b50::/44
Signature Algorithm: sha256WithRSAEncryption
d0:80:e3:95:90:68:00:3d:f4:52:d9:92:22:57:0a:08:89:62:
56:50:7a:62:4c:c2:65:ab:26:fe:3e:a2:43:3f:bc:be:c6:8f:
65:81:e0:93:f1:f3:2d:06:f7:73:eb:bf:67:fe:96:0f:5c:df:
ee:85:9d:b1:42:c6:45:69:33:62:cd:db:ad:64:dc:5f:e4:07:
4d:26:7c:64:97:80:21:33:78:6f:bc:5d:db:38:48:bc:52:4b:
1b:85:32:3a:24:90:6c:97:42:14:dd:7d:bb:6e:22:b4:ce:46:
4a:32:af:42:55:86:f6:08:f9:52:48:e8:11:0f:66:28:61:aa:
b3:e8:b9:e9:45:43:ed:06:69:d7:ed:7b:cd:41:9b:19:36:82:
7d:e4:4b:11:f0:55:73:8a:1a:f9:0e:a8:54:a3:e1:ac:60:09:
64:6a:f6:0b:56:a5:35:80:ee:ef:82:d3:c6:9e:02:b5:d0:b8:
3e:4f:b1:66:9b:fb:7f:85:65:48:b7:7c:10:a5:93:64:32:f7:
18:fe:58:96:f2:7e:3a:68:8d:af:89:97:73:35:3c:0b:19:34:
5e:1f:af:f0:b8:48:97:bf:54:b1:7c:64:41:01:28:49:0c:39:
f7:83:2f:78:77:93:20:a0:1f:76:cf:25:1a:6b:2b:3c:0d:fd:
f7:c6:33:f5
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUYB5qNMKTUSAqDX9ckfCdshmtpS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTFaFw0yMzEyMjAxNjU2NTFaMDMxMTAvBgNV
BAMTKDEyQjhFRUFBREExQ0NDOEFGMEI4NjA0OTIxNTFFM0MxNjhDQzUzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXf14Vsz+ZDTik4oWya7PYsvl2
KqazK9P0RR3CoN55MSkjTPPq4r+xu5stjixhnhUECrfCxFKk/Z0Pcl1lg0Q4mpDX
NVRvlKdjlVm1oDCfZbIyjzMxEXNGlDQf8fWebwuWPO/wgHvQGzKRRCMBlEwNwYaM
G3ISTD744saN//6RYD6o22OJPZYcMO+CZsf1KuKUhdNtQsnVae6e3hxHthpnapDs
5svWnydy7j+sRjAkCwr3mG0svMe8sOgzSy2eSuKRmA5NIOYyjkDSLYWWL6tPloT4
unvdEfkRRbglu/4f58Asm067ajbn032+XlfOU1662rJTCT9UQIuCpZPRmyxtAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUErjuqtoczIrwuGBJIVHjwWjMU/8wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEx
NDA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/
BDkwNzA1BAIAAjAvAwcEKgagBRagAwcEKgagBRkgMBIDBwQqBqAFGtADBwQqBqAF
GuADBwQqBqAFG1AwDQYJKoZIhvcNAQELBQADggEBANCA45WQaAA99FLZkiJXCgiJ
YlZQemJMwmWrJv4+okM/vL7Gj2WB4JPx8y0G93Prv2f+lg9c3+6FnbFCxkVpM2LN
261k3F/kB00mfGSXgCEzeG+8Xds4SLxSSxuFMjokkGyXQhTdfbtuIrTORkoyr0JV
hvYI+VJI6BEPZihhqrPouelFQ+0Gadfte81Bmxk2gn3kSxHwVXOKGvkOqFSj4axg
CWRq9gtWpTWA7u+C08aeArXQuD5PsWab+3+FZUi3fBClk2Qy9xj+WJbyfjpoja+J
l3M1PAsZNF4fr/C4SJe/VLF8ZEEBKEkMOfeDL3h3kyCgH3bPJRprKzwN/ffGM/U=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:05 2025 by rpki-client