Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211495.roa
File: AS211495.roa (raw, json)
Hash identifier: 6Mvl/BOgzHX4dsLiOvTZF5PKfxj2JFgid9VLbT4xJ2g=
Subject key identifier: D1:6B:71:26:96:03:46:F3:93:92:32:27:54:57:7B:8B:BA:B8:9C:A5
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 25DC1E3CA94FC78A181BCFD121172F62716544CE
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211495.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 211495
IP address blocks: 2a06:a005:6b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:dc:1e:3c:a9:4f:c7:8a:18:1b:cf:d1:21:17:2f:62:71:65:44:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=D16B7126960346F39392322754577B8BBAB89CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:fc:be:b6:69:56:13:a2:ea:38:0c:8f:48:
64:50:52:78:dc:20:34:58:75:c3:e2:39:a5:1a:ef:
32:e4:17:a4:20:b3:eb:6b:35:e8:5e:b0:2a:fb:ce:
da:05:28:00:96:45:91:bb:75:6f:e7:27:01:96:54:
b5:68:5d:8f:96:fc:7a:1d:b4:b9:28:b5:1d:6e:5d:
c0:71:e7:38:c6:be:2a:31:5d:76:1c:8d:da:64:77:
f3:56:b0:82:89:05:9c:c9:68:67:01:37:9f:cf:c4:
11:cf:9e:ab:1c:17:3b:fd:28:d3:bc:c8:7c:f6:75:
77:2a:b5:56:9e:fc:56:5a:e3:08:28:05:d9:60:70:
8c:29:6a:30:f2:9f:be:53:cf:65:5d:ad:7a:73:09:
42:60:68:c7:c9:b1:be:65:37:2b:02:ad:30:a4:84:
67:05:ca:19:1e:66:c6:26:41:cc:9c:f4:d1:27:12:
d8:b6:3f:f9:11:bb:92:85:87:2f:10:26:e7:9a:6c:
42:32:3a:d2:45:b9:c3:3b:ed:12:67:3e:f9:c6:2d:
c5:7e:00:a5:95:af:62:d6:c4:93:9d:f1:82:98:7c:
99:b0:c4:b5:e3:34:c7:6b:5e:da:fa:ec:17:e3:35:
93:4a:35:21:81:1b:d3:cb:d0:73:ee:1e:8f:ce:82:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:71:26:96:03:46:F3:93:92:32:27:54:57:7B:8B:BA:B8:9C:A5
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6b0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:21:b1:5e:30:58:2c:e0:86:04:a6:5c:03:f8:e7:78:b8:07:
71:fb:8d:47:7f:a0:02:aa:47:3f:28:f1:4c:c8:b2:23:dc:bd:
b6:f2:f5:3f:33:8f:c9:a8:14:6b:66:d8:88:93:dd:9f:f4:2f:
b7:16:4e:49:30:9d:df:92:da:fb:3a:49:8c:81:51:ec:df:a7:
88:3a:1a:fb:0e:71:07:c9:e3:f2:f9:9d:a4:b7:4a:c0:8a:8a:
12:aa:d8:ea:9d:89:8b:3d:9c:31:f4:f9:53:16:37:2a:a0:10:
56:e2:9f:dd:55:68:8f:13:60:4a:00:dc:b7:82:c4:23:46:1f:
d1:37:9f:c5:9f:9d:01:74:44:16:3c:d1:92:f4:f0:90:60:e9:
1b:35:7f:99:76:d4:1a:5d:45:e3:5b:20:06:d5:7a:fe:43:be:
32:6e:b6:5d:c0:e9:7a:49:75:9c:bd:8c:55:0d:6e:a2:54:f8:
fc:c8:18:03:4f:a7:74:6a:bb:fb:c1:95:42:11:89:2d:4b:07:
c0:df:dc:64:b7:9d:e2:41:78:db:0f:22:da:c5:ae:85:b3:e2:
33:f4:19:28:cd:11:9c:09:4c:05:1b:53:ef:40:e4:67:76:f4:
78:df:35:c9:47:07:c6:a4:46:e1:27:8c:c6:7e:0a:5b:83:64:
62:08:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:43 2025 by rpki-client