Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212034.roa
File: AS212034.roa (raw, json)
Hash identifier: 1NHL2s1K59tmcILGkv1Qn3POBujNGj1proVSReKaNQs=
Subject key identifier: A2:AF:77:88:B0:25:DB:E9:23:53:60:2C:4E:6B:0F:5D:F5:42:80:A7
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1CF994D988C3BBD8D66AECD420AD60DB914B3C92
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212034.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 212034
IP address blocks: 2a06:a005:26b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f9:94:d9:88:c3:bb:d8:d6:6a:ec:d4:20:ad:60:db:91:4b:3c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=A2AF7788B025DBE92353602C4E6B0F5DF54280A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:a0:27:e1:01:64:5b:dc:ae:df:46:30:ce:
09:e2:ee:0e:64:ab:36:8c:fb:d2:d2:3d:2a:14:77:
62:5c:29:f2:33:f2:13:b7:67:b1:22:e4:51:f8:23:
ac:38:e6:c5:14:e4:a0:49:8c:8b:cf:51:0e:03:d0:
ca:d0:ee:3b:ed:88:b3:f2:b7:cd:2c:fa:c2:f5:06:
4d:92:24:6a:d3:99:99:98:66:e2:a2:81:3f:4d:48:
6f:3b:3b:38:c6:ca:ac:3b:75:51:5b:e0:5c:68:40:
1f:56:0c:a8:dc:3c:f5:76:ed:46:97:1e:3b:e4:29:
a6:cc:c4:ad:88:ee:6e:b0:8e:e9:22:77:4f:fe:df:
0f:e0:2c:39:f3:c8:da:1b:54:e7:94:84:05:bd:60:
1e:20:30:1c:24:02:7f:e8:2c:2b:92:45:4e:e6:59:
11:ba:36:a7:66:78:ea:ba:0c:91:86:ab:0a:08:b1:
62:ff:2d:e1:d9:18:67:e0:78:f1:ab:de:b2:56:28:
12:49:2e:c3:19:5d:fe:01:db:01:c6:14:3d:2f:37:
2e:0c:a7:c6:11:80:df:99:b0:7b:0f:89:b3:21:ee:
fa:d5:78:5d:39:2f:9f:31:75:b9:8f:74:ff:fa:95:
16:bf:47:fa:d4:ca:1a:a9:f4:cd:2f:ff:c3:61:a4:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:77:88:B0:25:DB:E9:23:53:60:2C:4E:6B:0F:5D:F5:42:80:A7
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26b0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:68:03:d3:23:b8:88:e9:2d:04:cf:f3:6b:47:bc:85:1a:f8:
a1:5a:2a:1a:6d:40:14:73:2c:b0:4f:c5:34:6f:c7:13:53:36:
c6:92:03:73:ff:40:0c:ed:44:df:b8:30:0c:5f:6f:af:1d:0f:
81:c4:8e:b1:5b:ec:d7:57:fb:2e:c2:ec:b0:d9:a1:d3:48:77:
6a:79:77:fb:2a:15:df:8e:65:bf:a5:d6:65:74:ac:39:9f:7f:
dc:a2:b2:54:ae:4d:c5:0a:7f:d6:aa:f0:cd:c5:07:d0:ba:a5:
9f:48:34:e6:16:55:84:3f:89:63:f5:ba:4f:45:d5:6a:30:96:
e8:bb:9a:bc:a2:62:ea:a2:c1:1f:5d:76:8d:25:5e:24:97:58:
48:4a:72:04:e3:af:2b:a9:b5:2e:89:d5:a4:4d:d6:8e:b8:62:
02:ee:94:6f:74:58:3d:09:64:f3:a6:4a:ec:98:05:22:6b:87:
0c:25:8f:d8:93:1a:ca:d3:b6:c6:61:e8:ac:74:12:8d:70:b3:
03:6e:39:b1:b1:4f:fa:68:76:46:22:8c:d2:3d:04:48:2c:62:
d3:69:08:5c:f5:9f:dc:87:f0:83:5f:a0:43:40:df:58:23:69:
3f:bb:8d:66:87:74:8f:2b:55:12:81:96:b8:f3:8e:40:b2:82:
4f:86:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:26 2025 by rpki-client