Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211946.roa
File: AS211946.roa (raw, json)
Hash identifier: SSjpBgNQamo4vMjlm8kemcrps8N96FgqxsZ6tRtwAc0=
Subject key identifier: 32:C4:23:1E:22:16:C6:66:C5:20:2F:FB:F3:D8:73:96:3F:2E:EB:1C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2BCF90F684247EFBB4E6BFC7530D6A6BEA0BB30E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211946.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 211946
IP address blocks: 2a06:a005:f40::/44 maxlen: 48
2a06:a005:1bd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cf:90:f6:84:24:7e:fb:b4:e6:bf:c7:53:0d:6a:6b:ea:0b:b3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=32C4231E2216C666C5202FFBF3D873963F2EEB1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:df:70:75:5b:c5:17:89:60:40:b7:a8:8e:
5f:7c:e2:47:74:05:98:d4:93:5d:21:0d:f6:82:3c:
a4:51:21:dc:e1:b3:b8:31:79:8e:a1:d1:aa:95:ab:
91:aa:d0:a6:40:b7:61:a5:e2:60:b2:c5:23:d7:6c:
14:ff:e5:37:45:91:6b:9a:56:db:a1:52:00:3d:8d:
e4:97:37:32:0c:8b:1c:f6:a6:9c:d8:b4:87:6c:ff:
30:89:1b:38:9c:41:e4:3f:45:27:49:70:fd:73:ac:
b2:06:bf:6a:ce:ff:8d:ac:8e:36:7c:e8:ab:37:51:
e6:d1:35:3f:df:f0:ef:59:d8:7b:de:2a:1e:75:ff:
22:da:ae:04:cd:2a:7c:01:05:7d:2f:30:7c:65:02:
98:a7:e7:1a:37:47:34:f2:09:86:fb:d5:d2:a3:56:
11:e7:11:09:84:12:63:2f:31:7d:1b:a9:02:cd:16:
81:81:88:26:80:8f:b4:64:cf:a8:c3:38:f3:b2:f8:
29:cb:90:0f:2d:f5:61:30:64:2c:28:22:5d:e5:b4:
36:40:82:c5:b2:2b:de:25:4e:d3:95:06:4f:67:54:
ac:c7:af:27:e2:4f:6c:56:b9:f7:f2:03:ce:73:9a:
43:0f:c5:d2:6c:38:83:88:56:e7:a9:ef:cd:71:5c:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:23:1E:22:16:C6:66:C5:20:2F:FB:F3:D8:73:96:3F:2E:EB:1C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f40::/44
2a06:a005:1bd0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:d4:e3:27:53:92:4d:ad:83:34:99:49:36:66:51:93:ed:3f:
43:50:12:e1:cb:eb:fb:b9:09:61:db:24:3a:75:cf:d4:3e:e2:
71:f1:b3:66:26:1b:1d:10:95:e2:da:a3:17:45:50:35:8a:30:
c4:f9:33:77:3a:92:d6:f9:f3:bc:39:61:61:96:af:4a:10:df:
e0:dc:fb:9d:3a:7a:12:13:51:bf:87:94:ed:aa:4c:90:0f:e4:
32:2c:a9:5b:44:a6:be:c7:38:72:23:11:45:8d:55:fb:b7:2d:
8e:ae:f5:8d:d5:0c:bf:9c:ea:ca:54:e0:c5:cd:43:dc:ec:61:
da:25:46:ef:5b:c1:59:08:47:00:42:c8:9a:28:53:5f:ac:c9:
34:4f:a5:a8:45:3f:55:7d:b2:9a:de:33:fa:53:ff:db:87:8c:
d2:1b:1b:f4:88:15:9f:89:30:56:2a:7f:ec:0f:dc:d8:ef:bb:
5f:08:bf:ef:f3:1b:f3:4e:bc:d6:8e:ec:05:65:8e:6f:ff:9d:
3f:74:f6:d9:d7:da:26:43:8a:da:a6:2f:d3:90:a5:e1:bd:86:
ea:27:2e:b6:6f:05:b6:32:49:35:ea:02:41:da:03:c6:90:56:
74:85:9c:70:d4:d6:59:06:c9:97:a6:38:41:a7:ef:93:3f:6b:
8a:eb:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:41 2025 by rpki-client