Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211571.roa
File: AS211571.roa (raw, json)
Hash identifier: vvVKJQMJRNF8YJFSMCuAkPwhEqWsd5enhQnwL1yVWfI=
Subject key identifier: DB:5C:48:AB:53:A3:61:6F:4C:D5:E6:F5:2E:7A:BF:C1:10:0D:16:F0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 72BF1BF361CEC798522005B7A663677C5DDE489D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211571.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 211571
IP address blocks: 2a06:a005:85e::/48 maxlen: 48
2a06:a005:9c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bf:1b:f3:61:ce:c7:98:52:20:05:b7:a6:63:67:7c:5d:de:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=DB5C48AB53A3616F4CD5E6F52E7ABFC1100D16F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:ed:d1:04:de:23:0d:03:35:a5:b4:50:5d:
59:0b:ee:a7:f0:2a:23:dc:5a:8c:d5:b3:25:e0:2e:
32:52:5b:04:96:b2:b6:43:e2:e0:0b:a2:a3:c5:9d:
5d:e6:6b:56:84:75:1b:d2:02:ed:44:c5:80:5d:03:
05:a9:ea:b5:6c:d7:e9:57:08:f7:ae:06:15:01:41:
b6:64:34:2a:c8:65:50:16:89:0e:6b:da:08:28:62:
e9:ac:74:35:1f:18:28:4b:92:7d:11:97:3d:a9:b4:
c5:4a:45:f0:58:49:0d:ec:8c:53:ef:34:97:61:9c:
d0:c6:74:b9:b6:91:62:9b:62:e6:c9:f8:e9:44:46:
4a:10:b7:64:3f:67:3d:32:9e:d3:12:f6:fb:f6:e6:
dc:f8:20:f5:25:9d:16:7e:16:d3:fe:e6:28:66:1e:
59:13:d5:5e:2a:58:6c:b6:bc:85:55:dc:04:dd:ae:
d1:1f:3d:69:a9:d5:de:cd:4a:2d:1f:c4:36:80:2b:
94:92:81:f1:8d:c3:05:9e:47:0d:54:9e:2c:30:10:
1c:a6:90:41:d3:35:63:89:43:40:fc:68:14:fb:74:
5f:f0:34:61:9f:e9:e0:db:72:fb:fd:66:b9:36:2e:
95:5b:ff:43:8f:f0:ef:99:fd:c1:b2:7a:b2:2e:ec:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5C:48:AB:53:A3:61:6F:4C:D5:E6:F5:2E:7A:BF:C1:10:0D:16:F0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211571.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:85e::/48
2a06:a005:9c0::/44
Signature Algorithm: sha256WithRSAEncryption
5a:a7:49:3d:a2:7f:b4:73:5b:72:d9:76:01:11:68:b8:34:0d:
2b:19:6a:50:dc:12:ea:b5:5e:3d:77:77:05:05:b6:1a:ff:09:
f0:67:49:6f:5a:0e:41:1d:ab:a3:ca:a0:ae:c9:a1:df:71:d0:
aa:aa:ae:ca:3e:a6:f2:83:06:90:08:01:85:aa:3e:6f:6d:0f:
f8:5f:68:6e:d2:87:5f:1a:57:ea:a3:1c:bc:f4:49:71:77:ee:
7f:1d:1f:bd:d5:9d:44:99:bb:00:ac:d0:7c:e7:fa:e4:86:03:
b5:4e:7c:81:2f:13:63:cc:9e:19:8b:39:3f:01:24:6d:70:75:
5a:ae:20:4e:66:18:0c:cb:84:ae:cb:5a:7f:21:52:dc:86:b4:
6d:44:1d:5e:21:50:03:11:77:89:8c:6b:89:1d:91:25:a1:85:
5d:e0:a0:8a:9a:3f:06:78:fa:8e:ae:88:8d:db:80:a4:c7:5f:
e5:88:a6:c5:b4:0c:66:d1:5e:8e:d6:09:ab:4c:8c:54:dd:77:
ac:c0:5e:d0:11:67:69:49:27:95:a0:2b:30:5f:71:9e:73:33:
b2:df:c1:6b:28:66:b8:40:b3:96:f1:52:99:cb:73:36:cc:7e:
c5:89:2a:e3:b4:8b:1c:c4:95:f4:4b:7d:bc:29:34:7c:bf:fa:
f0:b9:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:18 2025 by rpki-client