Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211843.roa
File: AS211843.roa (raw, json)
Hash identifier: c7vDvppYlCLN8DKr+d4CZc5TBe/XZF54KQjUUus9Bu0=
Subject key identifier: 68:5C:45:7A:ED:9B:72:ED:2B:FB:BA:C7:88:18:04:33:DB:6B:8D:C3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 75C5451E2055D421FEE433CA18317060224526BC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211843.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 211843
IP address blocks: 2a06:a005:a13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c5:45:1e:20:55:d4:21:fe:e4:33:ca:18:31:70:60:22:45:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=685C457AED9B72ED2BFBBAC788180433DB6B8DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:df:fa:9d:be:a5:65:1d:93:26:93:51:8b:
3b:b4:6c:0d:b8:26:96:1b:9d:82:62:98:de:92:e2:
c3:84:67:0e:0c:57:1b:74:00:22:13:8a:f6:06:77:
e1:d8:5d:4b:f8:14:4e:3e:14:5f:79:e0:f7:43:d1:
2c:46:3f:9e:78:98:b8:f1:12:6d:5f:15:cd:73:c0:
97:f1:e1:58:31:c8:08:c7:4e:af:b7:81:ab:26:18:
e1:e6:37:73:b7:ac:23:7a:75:bd:c6:5e:1d:17:18:
69:71:28:cd:12:44:bd:0b:3f:a5:75:6a:e8:48:fe:
dc:23:73:79:9b:6d:ea:36:60:af:d9:03:62:1f:73:
02:80:e1:7a:60:25:90:5f:8a:a1:43:ac:39:9c:87:
03:25:2e:fa:b7:dc:f7:7c:c7:ae:f8:28:3a:7b:06:
96:af:4e:74:84:98:72:6d:4b:1c:24:c4:c8:a4:6b:
9a:ff:1d:df:85:5b:00:3c:db:df:a0:e5:10:72:9a:
8d:1d:ba:55:74:d3:2f:1f:0c:d8:70:76:fb:52:e6:
c3:62:6b:24:1f:bb:03:a5:32:a6:9b:2e:41:84:ed:
52:8b:3a:94:b3:15:cb:10:49:06:6f:eb:03:7d:c1:
30:dc:36:71:9e:80:6e:bd:99:ae:a2:be:10:a8:37:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:45:7A:ED:9B:72:ED:2B:FB:BA:C7:88:18:04:33:DB:6B:8D:C3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a13::/48
Signature Algorithm: sha256WithRSAEncryption
2e:5f:4e:21:49:5e:eb:a9:82:9e:9e:49:58:56:21:83:a8:e4:
6e:b3:f7:c1:17:3f:92:8a:47:94:72:e0:a1:3d:cb:7b:55:61:
c4:20:86:4a:5c:c9:63:f0:80:33:dc:48:95:e8:ed:65:cc:15:
a2:dd:73:a2:e9:db:18:ff:f0:d8:3e:68:6b:0b:24:dc:b2:76:
83:5d:e7:75:a6:2a:83:df:af:31:56:75:48:52:f3:40:31:a8:
e1:68:d0:d4:e9:bd:fd:95:a2:96:12:22:35:bd:7a:ed:65:5d:
f3:34:0c:83:46:d2:a0:c9:8d:41:08:81:a3:7c:59:46:21:c1:
0a:26:b0:5a:97:d3:d7:1e:6a:4b:02:64:f5:f1:a7:85:02:ec:
8f:70:d5:fd:59:60:e1:a4:aa:c9:58:eb:9a:8c:b5:b7:b6:6a:
65:c1:78:89:ee:3d:b4:cc:d8:71:b9:c3:4b:df:44:b7:44:27:
75:49:82:e9:63:0a:f6:53:46:cb:60:63:db:a7:df:bc:a0:e3:
4d:52:73:ff:fd:e3:cf:c9:0f:71:53:33:24:0d:4c:07:76:6a:
8f:e8:49:89:60:dc:32:4c:7f:8f:38:82:45:40:f6:8a:76:db:
85:e6:3b:c7:44:b5:95:f5:fe:23:06:e5:24:1b:08:e4:1f:24:
9e:f0:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:11:25 2025 by rpki-client