Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211431.roa
File: AS211431.roa (raw, json)
Hash identifier: ewtK1pQ7vwkVhJpJKpGX9HrVgjzfA8nxTQwr800Nn54=
Subject key identifier: 4C:1C:A2:B1:74:83:14:A4:0D:DB:34:90:FC:5C:C3:3B:75:18:27:14
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 412DD051F10A198A1530A69C9AAA2482AB882454
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211431.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 211431
IP address blocks: 2a06:a005:1720::/44 maxlen: 48
2a06:a005:1790::/44 maxlen: 48
2a06:a005:17b0::/44 maxlen: 48
2a06:a005:17c0::/44 maxlen: 48
2a06:a005:17d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2d:d0:51:f1:0a:19:8a:15:30:a6:9c:9a:aa:24:82:ab:88:24:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=4C1CA2B1748314A40DDB3490FC5CC33B75182714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:a4:c9:5a:fd:e8:f5:a8:8d:b4:7a:1e:0f:
9e:0c:78:81:a1:d6:f2:20:37:ac:a9:d1:77:16:b1:
fd:60:0d:45:0c:a1:4f:fb:01:95:46:11:64:2f:d9:
2b:62:74:b4:4c:9f:f0:83:74:5b:01:c0:55:01:34:
bb:26:c9:db:d1:13:32:2a:bd:48:8f:ad:6d:6c:f2:
fa:d3:9a:d3:4f:0b:e1:f0:ee:05:27:d9:fb:79:b7:
06:3a:24:c0:36:d3:f4:54:31:01:84:e8:54:f6:1f:
60:f0:b2:13:ed:f3:04:56:41:10:fc:a1:6a:81:78:
f4:70:67:37:87:66:dd:e8:f1:d7:ce:92:6e:19:4f:
91:12:0d:37:b9:91:ba:39:9b:e6:11:a3:ef:47:c3:
05:63:13:12:f8:d7:b6:39:f5:8b:e6:b3:a8:79:f3:
6f:83:02:6e:8d:07:57:dc:f9:3d:b6:11:6a:2a:c6:
9d:cc:04:1a:01:d9:3f:e7:ee:bd:ac:5c:88:2d:78:
03:e1:e7:f3:e7:18:f4:19:07:3d:80:28:f7:20:19:
6f:1e:d7:4d:19:bc:5c:33:b5:4a:7b:ac:26:62:87:
23:3a:24:34:4a:f3:c0:e5:23:e0:92:1c:2e:cf:73:
fa:a8:38:c8:f8:08:e6:85:23:83:d7:c5:8a:aa:79:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:A2:B1:74:83:14:A4:0D:DB:34:90:FC:5C:C3:3B:75:18:27:14
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1720::/44
2a06:a005:1790::/44
2a06:a005:17b0::-2a06:a005:17df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b2:b1:38:b3:ae:26:8a:ea:8a:ca:67:ba:80:37:b0:d1:ca:56:
6d:95:47:4b:11:e5:6b:5b:4f:f5:6d:e5:be:d4:4b:98:0a:5a:
66:7c:8b:64:70:8b:41:59:7d:9c:27:7e:49:8e:88:85:4c:69:
0a:f8:c0:36:fd:12:3b:f5:86:f8:4f:41:fe:e3:14:42:76:ac:
f7:c5:38:22:43:88:c6:a7:62:0b:c1:a8:bf:ba:41:91:55:a7:
4f:80:9c:66:c7:52:22:4e:d9:9b:3b:63:cd:94:e9:ac:ab:50:
b0:e1:a8:4e:30:f4:59:26:2d:84:e9:b1:dd:7f:a3:26:15:7e:
7b:9c:31:c1:95:6d:93:f2:c3:3a:a2:f1:64:0b:cf:b2:78:64:
2a:40:c4:82:8d:4f:bd:c3:1e:4a:d6:10:24:18:32:b0:95:fa:
58:c0:32:8c:52:44:b5:98:10:f1:48:9c:2c:8a:14:08:5a:ef:
c6:d0:ff:4b:ae:30:ad:f3:40:ee:9b:0b:7e:8c:8e:93:3b:ea:
86:a7:cb:00:fe:93:f4:62:8d:de:3d:a4:df:6a:1a:ce:0e:b8:
c3:92:38:77:68:db:3d:5b:84:5b:fc:62:7f:70:ee:36:a3:38:
cf:f9:82:f0:1f:e7:65:24:98:e7:12:ba:df:12:ef:29:c2:56:
d1:a3:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:06 2025 by rpki-client