Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: 62y28LPuVyxFzF7STIXIflJM5DCYDUK5wiQD9XKhLog=
Subject key identifier: F9:18:7E:70:85:52:6D:F8:88:C5:FB:80:65:75:B8:0F:59:87:5C:9A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 428CD17E5F85474809C57AB57A73FB15BA2427F1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211484.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 211484
IP address blocks: 2a06:a005:2440::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8c:d1:7e:5f:85:47:48:09:c5:7a:b5:7a:73:fb:15:ba:24:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=F9187E7085526DF888C5FB806575B80F59875C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:65:1f:6f:26:51:46:92:3e:ae:ab:0c:89:
da:99:36:61:c1:36:ea:e3:03:03:5b:7a:0c:60:fa:
ce:68:42:35:f7:81:7d:84:da:e7:3a:9d:84:5a:17:
93:d4:d1:9b:17:ae:5f:2d:53:d7:dc:42:9b:3d:87:
ed:54:19:13:df:82:e0:92:7d:e4:42:1a:90:ac:2d:
e2:fb:19:d4:3e:11:ba:59:53:32:ac:3f:0a:e6:2d:
ae:cb:44:84:05:d8:c2:25:a1:7b:02:c7:ad:37:39:
c5:c0:43:5c:27:bc:5c:75:11:2e:68:99:46:1c:ee:
63:96:07:31:d4:36:72:94:60:17:95:f8:0d:db:0c:
ed:fa:63:f7:ae:72:82:75:41:79:4d:72:b5:38:5b:
07:12:7d:60:50:d2:0b:fe:23:73:a5:7d:c7:a3:9c:
e0:fe:29:b9:5e:31:7b:ae:fc:92:5a:ce:21:7c:16:
ae:92:fb:82:06:a6:70:01:78:b6:c0:12:a8:6b:ee:
85:5c:94:de:4b:62:d4:a9:46:07:94:35:1b:19:f4:
43:f7:ff:f7:ac:a3:c8:19:33:75:6d:51:c3:93:52:
74:c6:2e:e6:00:6f:73:fd:9a:3d:8a:a6:29:d1:b0:
4e:61:99:dd:80:fd:f1:4d:19:75:51:52:68:13:5b:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:7E:70:85:52:6D:F8:88:C5:FB:80:65:75:B8:0F:59:87:5C:9A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2440::/44
Signature Algorithm: sha256WithRSAEncryption
23:74:1b:4f:f2:84:49:28:98:02:4a:ce:ca:44:0f:f2:1d:5e:
fb:c7:c5:e5:88:88:26:cd:8f:0d:9a:33:96:c7:26:04:b1:e0:
5c:bc:30:94:41:bf:ec:20:37:9b:1b:44:0e:86:60:87:e2:17:
ac:9b:57:bb:1d:af:65:73:8b:31:59:15:7d:e3:7c:15:7a:b9:
7c:c4:fd:51:ba:8c:57:4b:1a:d5:b5:c3:00:95:70:6a:39:98:
9d:df:4e:b4:46:a1:01:36:f0:92:0d:75:90:e3:fd:33:df:19:
d0:e6:0c:0a:8f:5d:67:1b:b6:b1:6b:a5:8f:68:a2:8c:57:5f:
69:13:e5:bf:6d:e2:2c:d1:e4:e8:73:97:c4:92:a1:14:f5:30:
6b:2a:b3:f3:a9:b6:f2:05:86:b6:5e:a6:f8:71:0b:d5:f0:ff:
e6:af:9a:2a:44:48:62:30:3b:39:ee:b5:2a:e7:6b:5e:5a:d7:
05:c1:d4:62:65:58:da:1f:5b:e3:c9:92:54:a5:80:9a:8e:f8:
d0:3f:a9:e1:2e:2a:0a:1e:9b:8c:54:97:cd:70:25:1f:a7:fa:
b6:cd:17:92:72:85:5b:d3:db:c0:c9:32:3c:1f:29:d6:9f:7e:
f5:8b:29:79:b4:98:73:5c:87:59:41:7c:ea:75:5a:ae:54:21:
b2:4f:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:14:42 2025 by rpki-client