Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211535.roa
File: AS211535.roa (raw, json)
Hash identifier: pyHTo40lz+tqlU0t9T/mGpl+TPgBTUiCY6Cv1zHn360=
Subject key identifier: AD:A8:A7:9A:C4:99:3A:D9:F7:F2:71:95:0F:BF:11:A7:6F:89:E8:B6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 608B3E4EA641C65298A52D330A9D86759FFFE595
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211535.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 211535
IP address blocks: 2a06:a005:1670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8b:3e:4e:a6:41:c6:52:98:a5:2d:33:0a:9d:86:75:9f:ff:e5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=ADA8A79AC4993AD9F7F271950FBF11A76F89E8B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:19:4a:2b:bc:ff:4d:ff:83:18:90:35:be:
fa:e8:a9:14:d1:38:d3:44:69:a5:5c:57:2e:fe:0f:
0f:b3:1a:e9:d0:64:f5:38:be:49:43:92:5b:f6:d5:
99:20:1a:d2:7c:9e:47:4b:94:25:42:1d:c2:56:ec:
28:ad:0d:1b:92:ee:42:3f:32:c5:2f:1f:85:e5:54:
fd:dc:8c:d6:97:ef:db:4d:df:9e:f8:ac:a0:15:f6:
4d:75:e4:d5:bd:a3:be:10:1e:94:6b:4e:0e:2e:a8:
4a:30:1a:9c:3f:df:16:65:3f:97:b1:4a:0c:63:6e:
69:55:1b:3b:90:c7:2f:3b:e1:75:db:82:0f:55:2b:
c3:3f:1f:1e:40:dc:52:ba:50:ee:09:69:ba:c5:5a:
59:2d:aa:53:96:01:ea:6b:08:97:1f:79:e3:9c:2a:
8b:ac:ce:b6:d0:8e:46:42:7b:c7:bf:3f:00:51:8c:
1f:79:5f:c5:1c:fd:a6:3b:1e:09:47:9b:56:06:fa:
77:a4:f1:bc:7d:07:94:b3:fa:3f:b9:1a:84:6c:47:
d5:78:d7:5c:74:5a:0d:49:5c:af:16:45:e5:06:e7:
fd:a6:85:19:bc:34:f7:f6:da:b9:e1:57:c9:8d:fc:
00:9e:1b:f0:ed:6d:2f:bf:aa:2c:a4:0f:a9:d7:9a:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:A7:9A:C4:99:3A:D9:F7:F2:71:95:0F:BF:11:A7:6F:89:E8:B6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1670::/44
Signature Algorithm: sha256WithRSAEncryption
8a:83:95:51:6b:70:65:62:fc:8c:bc:46:39:fc:a1:c2:26:fd:
ce:c3:34:25:ff:f2:9c:e2:c2:61:a3:47:21:a4:03:9d:6a:07:
95:52:10:c4:4f:6e:40:ad:c2:f2:c4:d2:ed:8f:e8:61:2b:b4:
63:bc:38:53:e1:29:d9:10:d9:f0:a9:62:54:6a:1c:b1:8a:1b:
eb:d1:9a:b9:86:12:5b:8b:fa:db:66:54:28:ba:ac:31:ca:86:
e8:48:28:71:20:76:6c:c3:fb:ea:77:9a:34:e7:5a:c3:c6:7a:
e9:2f:b3:6c:ec:74:ba:58:18:5f:b2:f7:fe:ac:d9:93:a1:f3:
2d:69:30:ef:69:a6:c7:6b:64:a9:dd:4e:23:19:bb:5d:17:4f:
8f:e1:bd:ac:87:80:da:bf:b0:61:25:1b:65:f3:4f:2f:ae:af:
87:1d:ba:13:8e:5e:57:28:5a:3c:a5:df:09:a8:0f:d9:9b:13:
e5:2f:d5:e2:36:a4:f0:6c:c8:3f:e3:72:c2:25:f1:9d:61:57:
7f:8a:1c:d4:92:57:9c:03:d4:d8:40:4d:a1:70:c0:b0:39:12:
e6:8a:ae:05:15:ef:a9:9e:76:3a:dc:46:77:a5:f7:58:fd:1d:
9d:b4:1f:94:e8:58:76:a9:b9:3d:b4:00:c1:7e:f4:0f:89:b9:
b2:39:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:04 2025 by rpki-client