Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211443.roa
File: AS211443.roa (raw, json)
Hash identifier: QG21kztbVCEZrgHkcLY3wvs7q1InY7Xf/I6KgocmHIg=
Subject key identifier: 7D:D5:F5:3D:D1:30:08:6D:B0:BC:EE:3D:17:27:18:57:89:77:60:02
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4ED8150E730AB0240BCF4B7EC0D71B305647494B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211443.roa
Signing time: Fri 30 Dec 2022 08:56:19 +0000
ROA not before: Fri 30 Dec 2022 08:51:19 +0000
ROA not after: Fri 29 Dec 2023 08:56:19 +0000
asID: 211443
IP address blocks: 2a06:a005:116a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d8:15:0e:73:0a:b0:24:0b:cf:4b:7e:c0:d7:1b:30:56:47:49:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 30 08:51:19 2022 GMT
Not After : Dec 29 08:56:19 2023 GMT
Subject: CN=7DD5F53DD130086DB0BCEE3D1727185789776002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:fb:b8:83:0f:c5:33:a7:13:bc:a1:e1:42:
9c:1c:8d:86:7f:a2:99:c5:1c:32:90:4f:8a:05:24:
f2:59:48:ba:68:fc:53:84:b0:8e:48:e4:0e:32:f9:
13:4d:db:76:f1:8c:c3:f8:2e:0d:28:2d:7c:15:d7:
a5:ea:19:4f:2c:40:63:43:87:fb:da:f7:d0:84:da:
1a:db:e4:74:07:0a:2b:15:a1:74:52:65:48:57:6c:
c7:48:1a:93:40:36:fe:21:37:27:20:63:f0:ef:55:
54:f2:21:a3:23:51:ee:9c:18:6c:f5:a4:60:25:3d:
13:29:29:00:50:3e:eb:d9:c3:92:51:51:6e:60:2c:
93:e1:b2:52:4a:2c:27:71:3f:8b:cc:15:a9:8f:b4:
89:78:f0:80:c4:cd:98:de:ca:0d:59:49:44:0d:e1:
6a:58:e3:1e:6a:d6:14:96:26:49:fe:ab:9a:60:b0:
73:35:49:d2:ab:bb:05:32:45:ce:f5:7c:35:a6:03:
c1:52:91:f3:5e:ca:bc:9d:c9:fa:4d:30:92:83:97:
35:4e:b1:e6:61:7b:48:f6:2d:dd:59:49:4e:1d:66:
64:9f:b6:fe:26:8b:a3:a1:28:82:f1:f1:c6:6a:68:
1b:16:c2:1d:89:9b:17:df:d0:84:95:53:e5:ab:a9:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:F5:3D:D1:30:08:6D:B0:BC:EE:3D:17:27:18:57:89:77:60:02
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:116a::/48
Signature Algorithm: sha256WithRSAEncryption
4d:d1:e3:48:fd:f9:11:9f:7a:a8:19:5b:b1:1e:00:b8:dc:b7:
a5:b5:67:b3:36:80:a8:7e:00:fb:3e:d8:86:95:a6:ad:63:90:
c6:0d:d4:0e:d5:49:07:be:bc:8f:51:0a:b7:35:41:e2:fe:96:
e3:a5:a7:ff:f2:cd:f0:35:1d:d2:50:30:e3:1c:77:15:3f:51:
51:0e:1e:06:0e:35:ec:a2:03:27:41:21:39:86:58:72:12:0d:
cd:b7:72:ff:50:2c:85:85:cb:2f:f4:6e:7b:69:54:84:1b:45:
7e:00:e4:c3:f6:ea:b0:d2:84:9d:ed:b7:88:83:84:3d:8e:08:
b4:06:0a:45:4d:c1:b3:43:99:66:c3:8d:23:ad:66:c9:44:76:
e3:75:87:1c:47:b8:8a:24:22:43:8a:f1:68:23:7e:50:0d:9c:
be:bb:6b:7d:e0:20:df:fc:8c:86:94:c8:89:9d:cf:54:42:76:
17:b6:01:e7:bb:3c:ce:9d:8e:f9:8b:6b:b2:73:c5:dd:07:93:
04:31:3a:ca:62:d0:a0:16:d0:c5:8a:83:24:42:b6:1b:93:49:
5c:9a:24:45:e4:c0:1b:33:f6:15:12:f8:45:f2:58:ad:eb:80:
4c:c9:11:cc:8c:58:15:72:13:2e:f0:71:51:79:0e:3f:42:6f:
00:a4:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:52 2025 by rpki-client