Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211622.roa
File: AS211622.roa (raw, json)
Hash identifier: ZGcQ3qIH8d/HJGwiNhC66rO6+aPwcj7oy0biHkOSRwU=
Subject key identifier: 91:54:E6:A3:A4:91:10:07:9A:C1:A3:B1:11:D9:D8:6C:CA:A8:BC:6F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 61BE03AF5BE781B22E3460C66B79C0D406624484
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211622.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 211622
IP address blocks: 2a06:a005:860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:be:03:af:5b:e7:81:b2:2e:34:60:c6:6b:79:c0:d4:06:62:44:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=9154E6A3A49110079AC1A3B111D9D86CCAA8BC6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:ed:41:dc:d2:fc:0a:3d:7f:ca:41:cd:aa:
ee:86:b4:67:49:34:12:99:c9:89:ff:6e:38:43:5e:
2e:00:1c:29:2a:d1:c2:ee:da:17:ef:22:ea:d3:1e:
fd:bb:9f:8f:f4:46:dc:e3:00:ea:84:4c:3e:d2:54:
df:0e:9b:4e:7f:e7:9e:a7:57:7a:91:fa:af:32:92:
0a:6c:70:dc:9a:b2:2d:ef:06:98:5e:22:56:67:c0:
cf:b5:94:3a:56:43:a1:b2:d8:bc:73:e0:0e:b1:ea:
a7:ef:cb:d7:bb:f8:49:57:2e:fc:50:14:59:34:e4:
bd:6d:95:f6:62:70:61:b2:d2:cc:28:a1:6d:58:2c:
63:9b:c4:3d:1a:0e:96:5d:41:96:4a:75:22:08:32:
40:dd:dd:cd:52:65:f6:b1:8a:cb:4b:28:1e:0f:91:
7c:36:3a:04:81:4f:8e:91:ad:d1:7c:b0:82:ea:6a:
aa:03:a4:17:ec:20:53:f3:77:f6:14:c4:aa:59:5f:
13:b7:99:dd:8b:53:e7:36:60:23:3e:a7:8c:89:34:
14:c5:47:e6:bd:30:bd:a9:73:d4:83:8f:5d:35:16:
a2:84:2c:13:a2:9a:a4:20:ba:4b:23:25:1c:7b:37:
cd:4f:09:4b:2a:e4:9d:73:f0:47:ea:b9:66:f7:b5:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:54:E6:A3:A4:91:10:07:9A:C1:A3:B1:11:D9:D8:6C:CA:A8:BC:6F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211622.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:860::/44
Signature Algorithm: sha256WithRSAEncryption
8c:99:4f:35:82:17:f8:55:29:8e:03:76:f7:b0:6c:b9:85:b0:
0b:9c:19:d5:68:5d:fd:9c:cb:09:08:14:24:49:ab:37:2f:9b:
84:ef:33:1c:84:5d:c0:d3:ac:b4:ee:65:d0:59:d4:90:39:4f:
1c:ce:89:b9:9d:22:b8:5b:e5:92:8d:55:5e:7b:d4:86:43:c1:
ed:fb:d8:5b:00:7d:34:65:03:a8:eb:ad:52:b7:35:3f:84:f5:
db:62:35:76:44:2f:5d:89:cb:7d:fb:e7:48:84:ac:b4:05:56:
23:c9:56:fd:d6:01:4f:6f:e5:ba:9a:80:4a:51:e0:1a:bf:04:
25:bb:8d:e5:8a:bd:59:50:c8:02:01:fe:64:02:f3:34:90:3f:
17:13:19:c7:90:2f:09:d1:33:70:8d:33:71:57:c3:d0:4e:9f:
c7:13:b6:44:e3:00:a5:dd:a9:11:cc:99:de:87:77:e2:2b:c9:
f9:72:53:a7:61:6c:d6:8b:28:97:81:fb:3e:19:ee:35:f8:d7:
bb:01:93:8f:7f:a4:d9:1e:bb:5c:93:01:d8:b3:49:71:49:02:
e8:85:33:8c:11:a6:7e:ea:0a:60:37:3c:33:95:c6:d8:e4:e1:
3c:69:95:07:6d:15:29:6d:37:3c:87:9d:72:76:76:a3:6a:ae:
bc:28:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:26 2025 by rpki-client