Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211754.roa
File: AS211754.roa (raw, json)
Hash identifier: AyGdsKVh1GtgmF9ivNSt4zYQojgncOxWk8ftxlYY400=
Subject key identifier: 28:52:4B:B6:72:DB:7D:50:50:5A:DA:21:30:1C:52:AE:79:69:17:0C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3F655D74A407154BC3390B1472EF6E9874F0CE01
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211754.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 211754
IP address blocks: 2a06:a005:c90::/44 maxlen: 48
2a06:a005:ca0::/44 maxlen: 48
2a06:a005:cb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:65:5d:74:a4:07:15:4b:c3:39:0b:14:72:ef:6e:98:74:f0:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=28524BB672DB7D50505ADA21301C52AE7969170C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:b8:cf:3e:cb:77:d8:44:5e:5c:f9:30:76:
12:07:73:ac:b6:99:e4:58:74:36:7e:c6:a6:87:ef:
72:9e:11:66:86:0f:14:0f:68:14:7d:a2:b5:8c:5f:
34:c0:0c:3b:d0:db:29:c1:68:55:dd:71:94:92:b8:
72:f1:4d:fa:dd:8c:98:d9:e6:7b:45:5d:3c:53:90:
f5:d6:99:ae:11:77:4c:25:e7:d6:eb:a9:a6:8b:97:
95:3d:70:0f:99:e8:9c:8e:8c:bf:6f:f1:ba:b1:fc:
85:d0:7f:45:53:8e:7f:13:fa:a6:b9:25:e8:c0:48:
de:95:4e:36:a9:3d:b9:66:3b:dc:0c:59:f4:88:64:
b5:62:34:b7:23:46:a5:53:2b:fe:ff:55:4a:7c:41:
dd:a1:42:9c:f7:92:de:d7:1e:b1:98:2b:47:fa:18:
83:0e:e2:6e:f9:67:59:72:4e:e6:15:a7:1e:e9:48:
22:5a:49:54:54:52:45:cf:ee:98:11:97:ae:21:59:
9a:ff:79:74:ce:61:80:51:a3:e7:70:85:57:8b:4d:
2a:ff:9d:a8:09:00:27:6e:5f:0d:5f:98:34:b9:da:
ec:ae:80:ed:68:68:67:ef:b7:f8:f8:f3:6d:60:e3:
c0:3d:2e:82:bf:2d:c2:69:5c:e8:11:33:ed:ab:3a:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:4B:B6:72:DB:7D:50:50:5A:DA:21:30:1C:52:AE:79:69:17:0C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c90::-2a06:a005:cbf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:57:ce:d9:c5:b8:8f:4b:47:ae:3c:c4:90:c7:39:73:c4:b1:
5d:38:d1:06:72:b3:84:54:43:5c:60:30:52:e8:17:80:f8:9d:
7d:15:b5:4a:81:86:82:cf:b1:74:1e:55:d4:d5:e3:eb:09:0c:
26:9e:4b:c0:57:28:94:39:6e:65:ba:d2:9e:a0:e1:1c:79:dc:
42:16:4e:97:40:99:6a:47:08:db:59:f6:bd:27:dd:c0:6c:4d:
96:f2:68:69:52:50:a9:1c:60:fd:c0:9c:59:96:b1:96:e5:a0:
58:9d:59:83:32:e4:06:89:65:f7:b0:a1:e1:2b:72:0d:e2:76:
57:54:a2:96:f2:0d:ac:eb:4a:b5:0d:c5:c6:61:63:d0:a5:b9:
39:cb:84:4c:b5:99:c3:59:9b:a0:e0:9d:7e:89:24:d3:91:11:
ed:77:b9:ed:13:9a:19:b7:bb:4c:11:04:59:28:26:d3:1c:f1:
0d:28:d3:42:39:e7:a4:bf:c0:cd:3c:53:41:9e:ba:d7:bf:5e:
a0:c7:5f:1c:3a:3e:a4:2d:9f:9e:41:c3:6b:c8:38:23:9c:65:
e1:7b:54:f7:64:89:da:e7:d1:b0:d6:de:ec:51:67:8f:97:70:
85:28:b2:91:3e:80:94:ed:ae:5a:92:38:7f:5d:f7:e5:d2:2d:
9f:57:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:47 2025 by rpki-client