Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212049.roa
File: AS212049.roa (raw, json)
Hash identifier: yjZrpD29BYvk+7qxUJz/fg7o1pqgeE3h0QrlMPfcDj4=
Subject key identifier: EB:36:25:5E:E0:11:38:2C:8F:5E:AF:8D:C2:36:33:10:FC:2A:04:52
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3D3DD5753FB0F7F239D4B4AA80876B7A174E0B4A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212049.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 212049
IP address blocks: 2a06:a005:1083::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3d:d5:75:3f:b0:f7:f2:39:d4:b4:aa:80:87:6b:7a:17:4e:0b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=EB36255EE011382C8F5EAF8DC2363310FC2A0452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:77:6d:23:a2:a1:b5:fb:7c:74:66:f3:d8:
ed:ca:85:0c:45:2e:02:79:df:16:05:d7:9f:de:ff:
b9:6e:4a:78:48:ab:07:97:d5:7a:2c:b7:60:73:cf:
7f:62:f1:90:77:22:78:56:e8:a4:5c:08:69:5c:0b:
46:6d:5d:38:b4:02:c9:6e:1f:64:6c:44:8f:6a:93:
ab:83:4b:b0:6a:a9:84:f8:de:bd:35:6e:ec:e8:07:
ae:97:fb:47:2a:dd:9a:eb:2e:e1:c4:3e:b7:e5:a0:
62:11:0b:7c:7b:60:bd:41:88:b2:70:69:72:a0:7d:
36:dc:6f:02:bd:d7:58:68:13:4d:aa:c5:96:9f:43:
6f:04:92:5e:84:01:a4:64:e7:ef:07:81:da:b8:23:
5b:f8:55:39:74:b4:a2:50:09:4b:82:57:7d:ba:a4:
7f:61:92:32:79:b8:66:97:b7:d7:58:57:bb:64:ff:
6f:cb:87:80:3b:8b:6b:00:f4:05:15:11:6d:be:09:
6f:98:fa:bd:33:64:52:5d:4c:4f:93:c0:96:75:93:
08:3a:0b:d6:da:a6:92:85:52:06:96:93:f1:08:de:
35:76:b8:2f:eb:7b:e5:56:dd:09:48:af:d9:5b:49:
92:73:46:89:ca:79:cc:22:ae:3e:38:af:9b:30:f2:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:25:5E:E0:11:38:2C:8F:5E:AF:8D:C2:36:33:10:FC:2A:04:52
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1083::/48
Signature Algorithm: sha256WithRSAEncryption
28:8f:cb:f8:74:47:05:fa:ad:18:ba:47:ac:a2:d5:68:0a:9e:
4e:0d:5d:3d:38:35:03:5d:ab:ac:8c:a2:f0:db:ea:c6:b3:b1:
8e:d4:7f:3e:6b:c9:34:08:54:17:38:cd:12:10:48:03:d8:44:
dd:ed:10:cc:c4:b7:01:e2:93:c6:d7:bc:00:99:7b:7f:be:dd:
72:87:ea:3e:7e:52:c2:08:be:b4:2e:36:c7:d3:e4:d9:bc:6f:
75:bb:c7:dc:68:a0:32:ea:c4:f1:2a:f8:d8:c9:18:54:b1:f7:
5b:3a:fc:27:54:3f:8f:d9:1b:f8:8c:fa:96:78:9a:00:e2:32:
67:04:fe:bc:c5:3a:7e:c1:3e:cd:d6:77:75:87:ed:32:29:18:
c2:1b:4e:4a:f8:fd:c8:cf:e5:7a:44:aa:21:17:76:77:80:10:
6b:43:c6:54:8d:f9:be:5f:47:e2:a7:92:58:53:84:2d:14:d1:
03:39:14:4d:cf:92:a1:f1:c7:e0:38:24:13:fa:c4:c2:d2:0a:
50:6b:7e:40:ab:19:32:ad:1e:39:f5:c9:ec:4a:6a:e9:97:6d:
70:16:60:b7:83:26:46:c7:39:c9:1e:b7:1e:6e:78:f7:c8:d5:
5e:8f:f3:bb:c5:4d:ad:08:db:b2:dd:d0:14:45:ae:d9:d5:65:
11:b5:81:c2
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUPT3VdT+w9/I51LSqgIdrehdOC0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDRaFw0yMzEyMjAxNjU2NDRaMDMxMTAvBgNV
BAMTKEVCMzYyNTVFRTAxMTM4MkM4RjVFQUY4REMyMzYzMzEwRkMyQTA0NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3ndtI6Khtft8dGbz2O3KhQxF
LgJ53xYF15/e/7luSnhIqweX1Xost2Bzz39i8ZB3InhW6KRcCGlcC0ZtXTi0Aslu
H2RsRI9qk6uDS7BqqYT43r01buzoB66X+0cq3ZrrLuHEPrfloGIRC3x7YL1BiLJw
aXKgfTbcbwK911hoE02qxZafQ28Ekl6EAaRk5+8Hgdq4I1v4VTl0tKJQCUuCV326
pH9hkjJ5uGaXt9dYV7tk/2/Lh4A7i2sA9AUVEW2+CW+Y+r0zZFJdTE+TwJZ1kwg6
C9bappKFUgaWk/EI3jV2uC/re+VW3QlIr9lbSZJzRonKecwirj44r5sw8q8PAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQU6zYlXuAROCyPXq+NwjYzEPwqBFIwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEy
MDQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBRCDMA0GCSqGSIb3DQEBCwUAA4IBAQAoj8v4dEcF
+q0YukesotVoCp5ODV09ODUDXausjKLw2+rGs7GO1H8+a8k0CFQXOM0SEEgD2ETd
7RDMxLcB4pPG17wAmXt/vt1yh+o+flLCCL60LjbH0+TZvG91u8fcaKAy6sTxKvjY
yRhUsfdbOvwnVD+P2Rv4jPqWeJoA4jJnBP68xTp+wT7N1nd1h+0yKRjCG05K+P3I
z+V6RKohF3Z3gBBrQ8ZUjfm+X0fip5JYU4QtFNEDORRNz5Kh8cfgOCQT+sTC0gpQ
a35AqxkyrR459cnsSmrpl21wFmC3gyZGxznJHrcebnj3yNVej/O7xU2tCNuy3dAU
Ra7Z1WURtYHC
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:49 2025 by rpki-client