Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211509.roa
File: AS211509.roa (raw, json)
Hash identifier: Y8Vk4cf18wMIYZI8pP1AdQcR3rdXA5Ww5U9OIyMwGX0=
Subject key identifier: 02:25:D9:65:4E:74:8A:EB:47:22:DB:A3:1A:D1:98:DF:5E:16:FA:8D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 388375E349DC01DAC54ABDA52B981822015AF32C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211509.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 211509
IP address blocks: 2a06:a005:8::/48 maxlen: 48
2a06:a005:f70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:83:75:e3:49:dc:01:da:c5:4a:bd:a5:2b:98:18:22:01:5a:f3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=0225D9654E748AEB4722DBA31AD198DF5E16FA8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:c8:ba:c0:e5:67:8f:d0:61:a7:07:5f:23:
68:6c:77:2b:2d:4f:68:21:0e:e8:b4:09:7f:8a:b6:
cb:50:97:c8:1a:a8:08:8e:32:8a:5c:de:ee:ce:82:
c4:bb:43:84:ae:d5:76:41:6a:42:66:ac:fa:e6:ae:
17:b5:5b:f9:2d:f9:cf:7c:c4:dc:f1:3d:f1:55:e4:
7b:cb:7c:15:66:41:16:4b:ea:66:00:b3:56:d5:0b:
30:44:8b:31:57:ac:42:53:d4:46:d1:79:a7:bb:0e:
e6:0c:b8:4f:1d:3e:df:f6:09:60:28:0e:a0:06:f7:
64:19:c8:87:f4:f6:98:ed:a3:7f:fa:f5:f3:60:2a:
77:89:d8:cc:25:47:c5:ae:01:35:11:9d:fa:c3:08:
c8:ac:12:49:a0:d8:02:e6:df:2e:67:17:a4:60:b0:
cd:3c:13:55:27:57:aa:86:8c:ce:f4:61:90:57:f0:
57:f2:74:2b:97:57:f1:af:56:32:b0:88:16:76:9e:
d1:ae:33:84:98:7e:2c:e6:04:8c:a9:9e:fd:9e:32:
68:12:4a:e2:e5:b8:52:1d:71:6e:ed:5f:17:37:f5:
a9:07:b0:4c:ce:03:71:b5:a2:1a:cd:6c:92:0b:2a:
82:fc:34:63:c9:b0:30:b0:08:5f:e3:dc:f8:67:2e:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:D9:65:4E:74:8A:EB:47:22:DB:A3:1A:D1:98:DF:5E:16:FA:8D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8::/48
2a06:a005:f70::/44
Signature Algorithm: sha256WithRSAEncryption
db:f8:1d:1f:4a:a5:d0:d5:0e:e8:8e:08:9c:ed:31:1d:4c:cd:
4f:22:17:9b:8b:0d:45:08:b8:94:0d:29:4e:53:f3:53:4b:ca:
7f:91:be:70:b0:76:cc:38:f4:03:91:65:6c:07:ac:4f:93:de:
d0:13:49:e3:19:c8:64:52:d2:b4:05:33:b8:a1:a3:9d:64:9a:
f2:97:a7:56:07:04:8d:1c:b6:4d:6b:47:46:ba:50:18:fe:75:
cb:b0:a2:d0:b4:b0:0e:3a:1e:98:ab:c6:2f:8d:f4:eb:90:e4:
20:f7:48:64:9f:67:9c:b7:30:86:bc:52:42:1a:a4:d2:1c:36:
47:eb:6e:c3:14:ec:9d:4d:12:43:35:4b:49:08:97:26:37:57:
a2:18:30:c2:ab:96:49:6a:7e:9c:64:53:e1:36:f5:83:7d:c0:
02:88:c7:16:a2:6b:8b:2d:a2:6f:fc:5d:a8:7d:94:93:4a:c2:
89:ac:55:3b:4b:94:23:c6:9c:74:55:bb:b5:63:bf:40:3d:82:
74:05:1c:ed:39:d3:ac:b2:f1:57:21:5f:ff:67:f2:31:b5:41:
97:bc:9f:3d:a1:32:ca:8a:d5:78:5b:cc:50:8a:09:7a:c8:df:
40:e6:f1:79:56:13:7d:e5:7a:ec:ad:bc:07:a6:9c:87:e5:5d:
c0:1b:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:06 2025 by rpki-client