Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211548.roa
File: AS211548.roa (raw, json)
Hash identifier: 1e2KB4sD7j3qpUYtLQI8rdDp3teQ9UEOcVK+R96YXMs=
Subject key identifier: 26:2B:E0:5E:D4:95:99:87:EE:69:70:71:E6:EA:F4:04:16:DC:36:2B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2CEB08B669182C7E4D025F149440ED5F3EFFFE84
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211548.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 211548
IP address blocks: 2a06:a005:d27::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:eb:08:b6:69:18:2c:7e:4d:02:5f:14:94:40:ed:5f:3e:ff:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=262BE05ED4959987EE697071E6EAF40416DC362B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:6f:4f:83:bd:6d:9c:5e:d7:62:4c:1a:b7:
32:ef:2a:d9:a0:11:83:50:d3:08:40:65:b7:9a:11:
f4:14:6c:57:54:22:c0:f4:16:10:01:a4:20:58:e7:
fe:ba:80:f9:54:67:85:18:64:49:e3:07:86:ee:81:
b7:f0:f4:ae:36:1a:bd:fb:aa:07:8d:58:70:94:ec:
6c:72:ed:7c:1d:2d:e6:8e:2b:91:6e:c3:fb:82:21:
93:61:50:60:37:69:e3:b8:2c:6b:6b:e8:5f:8b:58:
01:c4:bc:1c:25:61:2c:4b:b7:9c:ea:ea:79:b1:57:
80:0f:8e:1a:b9:c6:6a:c8:bf:75:ed:0a:13:46:11:
9b:d0:b0:2a:ee:9d:bc:cd:28:bc:b9:7c:ba:dc:e1:
d7:57:ea:f7:91:b6:a1:a4:db:d7:48:66:2b:e4:32:
73:8d:2c:7f:39:a2:a4:0f:45:72:05:2e:9e:0b:9c:
39:87:74:82:f7:3f:eb:e8:05:fe:37:1b:a8:42:c5:
ae:d5:de:1c:90:05:9a:e1:33:10:a2:4d:87:61:94:
26:ab:6b:77:59:96:de:59:1f:cb:06:1f:3d:6e:9f:
bb:70:7d:71:fc:b9:75:b0:23:80:cf:71:25:d7:6a:
56:13:82:de:5a:20:bc:88:ed:17:74:82:ba:a1:94:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:E0:5E:D4:95:99:87:EE:69:70:71:E6:EA:F4:04:16:DC:36:2B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d27::/48
Signature Algorithm: sha256WithRSAEncryption
60:d5:72:6a:f0:fb:b9:2f:9b:8a:77:c2:e6:e3:8a:4c:da:64:
e1:05:cf:08:17:d0:45:28:d8:94:47:56:1f:65:3b:e1:6e:b2:
73:a9:ec:b5:4e:8e:e9:02:45:3a:ef:a5:77:b0:a3:ab:29:49:
fb:ac:e2:b3:88:a8:64:a2:38:9a:ad:5e:08:5c:5c:13:9e:3f:
91:90:96:e3:e4:29:b9:ab:de:1d:6a:7e:e4:03:01:93:3c:1b:
6b:1d:a8:6d:9b:06:51:98:aa:8d:57:bf:44:f3:47:9c:32:b8:
d4:82:59:fe:5d:f1:2f:d4:35:bb:fb:a4:89:c4:a8:ba:9f:f9:
10:62:3f:65:97:3f:73:6d:d4:b5:f4:15:6f:49:1b:15:cb:76:
ba:c1:0f:0d:17:5d:80:28:7c:19:23:0f:3a:86:bd:f2:02:bc:
f9:40:37:5d:ec:21:5d:7e:26:29:43:b5:76:0a:07:38:ba:35:
41:47:35:e2:d5:81:d5:e5:c8:8c:9c:8c:d2:13:99:f7:1a:67:
33:ad:05:f2:5d:d8:11:ea:7e:c6:17:91:90:80:11:e2:cf:f9:
91:38:3d:43:8e:9a:6f:7f:f8:97:e3:ed:25:5e:00:75:f5:55:
b7:2a:d3:e7:67:a6:f3:72:60:2a:97:58:5e:31:c1:27:04:ec:
98:94:91:d6
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIULOsItmkYLH5NAl8UlEDtXz7//oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDJaFw0yMzEyMjAxNjU2NDJaMDMxMTAvBgNV
BAMTKDI2MkJFMDVFRDQ5NTk5ODdFRTY5NzA3MUU2RUFGNDA0MTZEQzM2MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUG9Pg71tnF7XYkwatzLvKtmg
EYNQ0whAZbeaEfQUbFdUIsD0FhABpCBY5/66gPlUZ4UYZEnjB4bugbfw9K42Gr37
qgeNWHCU7Gxy7XwdLeaOK5Fuw/uCIZNhUGA3aeO4LGtr6F+LWAHEvBwlYSxLt5zq
6nmxV4APjhq5xmrIv3XtChNGEZvQsCrunbzNKLy5fLrc4ddX6veRtqGk29dIZivk
MnONLH85oqQPRXIFLp4LnDmHdIL3P+voBf43G6hCxa7V3hyQBZrhMxCiTYdhlCar
a3dZlt5ZH8sGHz1un7twfXH8uXWwI4DPcSXXalYTgt5aILyI7Rd0grqhlFp3AgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUJivgXtSVmYfuaXBx5ur0BBbcNiswHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEx
NTQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQ0nMA0GCSqGSIb3DQEBCwUAA4IBAQBg1XJq8Pu5
L5uKd8Lm44pM2mThBc8IF9BFKNiUR1YfZTvhbrJzqey1To7pAkU676V3sKOrKUn7
rOKziKhkojiarV4IXFwTnj+RkJbj5Cm5q94dan7kAwGTPBtrHahtmwZRmKqNV79E
80ecMrjUgln+XfEv1DW7+6SJxKi6n/kQYj9llz9zbdS19BVvSRsVy3a6wQ8NF12A
KHwZIw86hr3yArz5QDdd7CFdfiYpQ7V2Cgc4ujVBRzXi1YHV5ciMnIzSE5n3Gmcz
rQXyXdgR6n7GF5GQgBHiz/mROD1Djppvf/iX4+0lXgB19VW3KtPnZ6bzcmAql1he
McEnBOyYlJHW
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:34 2025 by rpki-client