Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211877.roa
File: AS211877.roa (raw, json)
Hash identifier: dbYI3O6UOA5zJb8zPCjbVpUju6XZ3CFq6WiksWsbJ8w=
Subject key identifier: 8C:8B:A3:02:C2:BE:28:9A:9B:6C:D4:8F:15:2C:92:9D:14:E1:08:1D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 07066518FA18990FAF3524FAB374995B571AC559
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211877.roa
Signing time: Sun 01 Jan 2023 02:10:25 +0000
ROA not before: Sun 01 Jan 2023 02:05:25 +0000
ROA not after: Sun 31 Dec 2023 02:10:25 +0000
asID: 211877
IP address blocks: 2a06:a005:d40::/44 maxlen: 48
2a06:a005:ed0::/44 maxlen: 48
2a06:a005:1030::/44 maxlen: 48
2a06:a005:20a0::/44 maxlen: 48
2a06:a005:20b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:06:65:18:fa:18:99:0f:af:35:24:fa:b3:74:99:5b:57:1a:c5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Jan 1 02:05:25 2023 GMT
Not After : Dec 31 02:10:25 2023 GMT
Subject: CN=8C8BA302C2BE289A9B6CD48F152C929D14E1081D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:b2:70:b0:bd:e7:dc:4a:fe:da:97:9a:71:
eb:d9:c5:ac:99:d3:18:e2:6e:b8:59:52:be:c2:68:
b0:e8:57:f2:96:ec:47:98:aa:d1:4d:a0:b9:7e:81:
f9:67:70:9a:e8:2d:75:90:40:ba:17:e5:1c:a2:86:
90:1b:59:5c:ce:a0:22:19:e7:be:ea:c6:ca:01:a0:
11:6a:75:d6:65:03:10:07:f1:a5:fe:13:81:ff:34:
96:76:6b:3f:c9:25:20:82:b8:ed:1f:c4:84:c6:39:
a2:46:ef:2f:ba:51:f5:e6:d2:22:e3:ce:0a:dc:9d:
6e:1f:7c:28:05:92:3c:66:46:db:dd:46:8a:2e:57:
9e:ea:4f:2b:69:03:10:d3:16:62:4a:41:83:91:4b:
65:3e:8c:63:50:43:bf:ac:d4:05:4b:a8:71:12:03:
45:d5:97:29:67:d3:5e:0a:ed:07:c8:4d:af:36:d3:
45:b8:76:0a:6f:fa:0e:67:75:18:22:8a:fe:76:07:
45:0c:f4:de:b8:76:2b:18:31:08:92:b5:cc:c6:11:
05:63:c7:8e:2c:2e:a0:36:58:00:57:7d:83:67:8c:
0a:f6:8c:c4:41:d2:a7:84:f1:d1:4b:0e:90:db:df:
88:75:84:cd:dc:20:d0:48:4d:a4:58:1b:17:83:39:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8B:A3:02:C2:BE:28:9A:9B:6C:D4:8F:15:2C:92:9D:14:E1:08:1D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d40::/44
2a06:a005:ed0::/44
2a06:a005:1030::/44
2a06:a005:20a0::/43
Signature Algorithm: sha256WithRSAEncryption
6f:9d:97:97:13:8f:90:15:f6:5f:8c:41:cc:49:07:f9:4c:b5:
90:8e:7d:54:a3:74:1c:9a:b2:ce:b8:bf:e2:b4:2d:b7:f3:88:
49:bb:d8:82:f1:ab:11:38:4b:b2:27:4d:f6:15:6e:f2:93:7d:
27:28:dd:2a:c7:26:d5:13:67:90:f6:95:d0:59:a6:20:e9:72:
43:a4:72:3d:a1:27:48:1a:ba:db:02:d8:a5:b2:72:0c:fa:5e:
31:14:5a:96:8e:29:01:73:45:33:4a:8a:6a:3d:4d:4a:b9:33:
a3:f9:72:64:35:49:9a:e0:29:a0:8a:95:06:d9:4d:b2:54:c0:
73:d9:c7:1b:e5:81:1b:cb:2e:c9:10:56:95:b4:bb:22:56:ec:
f0:cf:a9:05:bf:d2:07:31:bf:84:57:3e:1f:1a:6a:ac:d9:fe:
96:93:d2:69:12:aa:ad:38:f1:1f:17:e2:bc:a8:4c:c5:92:53:
31:35:30:59:9f:10:fa:5a:12:01:b5:4a:d4:f4:8a:85:cc:87:
0c:a0:0b:51:8c:87:9c:0d:54:4c:03:d9:74:49:a0:2b:11:7f:
25:53:34:98:fd:bf:fa:df:15:22:59:be:5d:33:7b:fe:c0:bb:
05:f3:da:a8:12:b6:ac:20:1a:4a:63:64:d8:94:90:0c:e8:21:
db:e2:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:24 2025 by rpki-client