Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211604.roa
File: AS211604.roa (raw, json)
Hash identifier: flstnkaC92NXATQQE0u0+Vb88jfleSXK0unihcBAvYA=
Subject key identifier: 09:8F:2D:35:AB:08:1F:15:B4:95:00:C1:4D:FF:61:79:F3:55:2A:30
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3F7CE109BF081051CC2C86E8FABC7E1A0D5EB912
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211604.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 211604
IP address blocks: 2a06:a005:450::/48 maxlen: 48
2a06:a005:452::/47 maxlen: 48
2a06:a005:1274::/47 maxlen: 48
2a06:a005:12f0::/44 maxlen: 48
2a06:a005:1b30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:7c:e1:09:bf:08:10:51:cc:2c:86:e8:fa:bc:7e:1a:0d:5e:b9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=098F2D35AB081F15B49500C14DFF6179F3552A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:87:a9:30:7e:5c:58:98:f6:5d:07:c9:b5:
50:67:89:09:0a:4c:9f:4c:17:59:ae:ab:7b:03:b4:
42:33:7e:8d:6c:24:85:d9:4e:35:e1:3c:55:c5:ae:
21:9c:48:59:3e:0f:05:20:85:1b:ad:25:f5:99:86:
06:6a:6a:d9:d8:c7:b3:af:73:80:03:7d:7e:bb:b2:
35:a8:86:c7:19:89:b1:34:15:a5:a6:7f:f7:5d:62:
6e:67:c3:e1:f9:e8:da:78:ab:2c:a4:86:2c:4b:70:
9e:a4:db:9e:c1:82:a7:40:4d:5b:24:2d:a9:6b:fa:
b2:e5:02:9c:b4:59:4f:d8:32:4f:ec:01:e2:24:54:
a3:fd:1a:36:c1:4c:03:a7:a7:40:a7:3c:80:76:8d:
11:a8:9a:4b:26:4d:1f:e7:d1:ce:35:84:d4:d6:a4:
01:29:14:d1:ec:83:0e:5e:6a:00:c9:d7:c6:bf:00:
b9:67:95:18:44:5b:a8:be:bc:09:ad:aa:45:2b:87:
1e:a8:88:f7:31:1d:18:d8:24:46:a0:00:a6:7b:44:
12:f9:7e:50:41:25:2f:0f:c3:11:bb:3f:20:65:fe:
3b:bf:70:77:be:e8:6c:26:11:a9:87:00:46:f0:f1:
9c:ce:6d:29:22:c7:02:c8:28:b9:6f:45:1f:05:9e:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:2D:35:AB:08:1F:15:B4:95:00:C1:4D:FF:61:79:F3:55:2A:30
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:450::/48
2a06:a005:452::/47
2a06:a005:1274::/47
2a06:a005:12f0::/44
2a06:a005:1b30::/44
Signature Algorithm: sha256WithRSAEncryption
a9:1a:42:a0:9e:6a:a4:13:d3:e9:58:71:15:26:db:37:07:5c:
63:0f:b7:53:6a:a9:23:8b:dc:72:8d:7d:68:c2:2a:8e:a6:bd:
bd:c0:43:cd:09:9a:a6:fb:c3:a1:06:e0:b8:27:60:e1:d0:dc:
81:14:1c:fe:79:a9:e2:7a:ab:9b:0d:f0:27:c4:bb:f3:f8:70:
5d:7e:40:96:66:fe:eb:7f:98:89:8a:34:cd:b6:55:d1:4a:6f:
f1:29:0f:c2:c0:f1:4c:64:6e:3b:23:ad:3c:2f:0f:b2:53:fd:
f2:f7:7e:c5:2f:1e:7f:78:3b:8f:61:c2:ac:96:34:5d:27:94:
df:60:04:7a:b8:d7:69:be:b9:79:48:d2:bd:27:18:25:35:1e:
48:12:f1:7a:cc:16:03:06:99:f6:79:b0:30:57:5a:83:cd:f2:
3b:1e:93:62:2e:0c:23:38:3f:28:73:ea:4f:f4:1f:e1:71:24:
97:6b:24:92:1d:3e:6d:c7:e9:59:82:06:51:d2:a5:50:c3:dc:
a0:58:54:65:01:1b:c4:85:0e:8b:fb:5a:aa:e0:ab:09:fa:21:
58:b7:98:d5:e6:27:4a:18:7d:f0:c4:19:da:e7:a8:53:70:14:
61:e5:86:6a:f3:2f:bf:d9:ed:36:a5:4f:ed:d4:00:ce:01:7c:
42:da:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:30 2025 by rpki-client