Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212154.roa
File: AS212154.roa (raw, json)
Hash identifier: wYtHZlEybi3u342UoWCn2K+fyGJzOq8DOCjS8SnfDE0=
Subject key identifier: 65:02:2C:FB:B3:BE:A7:F5:39:5E:13:0A:03:B2:49:91:7E:51:BE:5B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4E03761DE8F0EF6EF309EC91B8E0904B5B443FEC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212154.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 212154
IP address blocks: 2a06:a005:5a5::/48 maxlen: 48
2a06:a005:a03::/48 maxlen: 48
2a06:a005:16f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:03:76:1d:e8:f0:ef:6e:f3:09:ec:91:b8:e0:90:4b:5b:44:3f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=65022CFBB3BEA7F5395E130A03B249917E51BE5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:c4:c2:49:1f:c1:e9:83:c9:a8:60:ed:90:
b4:d8:a1:e1:6c:06:8b:8f:7e:51:74:38:c7:c5:8c:
fb:07:3f:ec:1c:45:26:8e:0f:1c:f4:43:4a:75:61:
1b:f3:ab:62:33:a7:1d:dd:90:32:bd:e0:84:6f:a0:
0f:6c:8e:10:ed:71:3a:b0:12:d6:bb:d9:19:b0:a7:
f1:aa:a2:f6:d1:20:ce:03:33:dd:d2:ab:05:d0:d4:
fe:58:42:88:31:c9:44:c4:5c:93:f6:8c:f5:00:d7:
8c:f2:5e:23:88:34:e6:b7:ee:de:47:ae:6c:6b:50:
e6:5c:4b:f0:c2:08:d6:0f:eb:92:2f:1d:e5:af:0e:
4f:b8:7d:37:fa:cc:22:ab:36:0c:3b:77:75:04:bc:
28:70:16:89:d4:14:3e:d6:81:fd:24:07:ad:16:e5:
5e:b6:cd:97:70:65:d5:36:31:86:14:70:bd:c4:95:
1f:b4:f7:d5:7c:8c:f6:05:42:e6:61:25:ed:28:00:
28:4d:a4:1b:66:56:61:87:a5:bb:66:a0:48:d5:04:
ca:87:32:ea:ba:20:1a:e4:5a:45:36:f7:dd:2f:a1:
9f:1c:b3:2c:59:b0:3b:b1:8e:30:30:8b:b4:e8:b2:
b3:16:99:6d:23:1c:66:d2:2e:dd:78:5c:a3:72:fc:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:02:2C:FB:B3:BE:A7:F5:39:5E:13:0A:03:B2:49:91:7E:51:BE:5B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a5::/48
2a06:a005:a03::/48
2a06:a005:16f0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:62:0c:cb:a4:1d:f3:5f:00:75:c6:9f:0c:e2:f2:ad:53:4e:
93:70:9c:7b:cb:87:62:6f:44:c8:88:22:bc:46:ad:4c:d4:d1:
c2:51:67:f8:20:63:e9:ab:3a:88:cb:71:df:c1:5b:ab:fd:1e:
f1:12:24:03:e3:4e:bf:01:ff:88:7e:a7:05:66:a4:c5:c9:c7:
3f:2e:aa:49:a7:b9:45:64:ed:76:2a:5f:5e:de:a7:85:23:30:
9f:cd:a6:67:39:ee:12:b2:e9:77:1a:b3:81:41:26:92:92:50:
0d:d7:9e:22:7e:20:81:ed:e5:ea:58:ba:89:bc:0f:f4:de:42:
99:4d:11:69:fa:5b:be:bc:37:96:89:85:17:9e:d4:b8:94:01:
6f:7d:e1:43:e7:53:63:ef:3d:5b:39:b5:a3:61:a1:42:2e:4e:
45:7f:18:90:21:2b:9d:03:53:ff:cc:46:34:50:69:7d:72:58:
ce:e7:55:30:fd:8b:d3:6b:43:a0:8d:a2:84:b7:d2:ed:17:34:
2d:aa:41:8b:e4:85:8c:a6:79:4d:f1:d1:eb:a7:02:29:84:f4:
a7:e9:95:a9:4b:ff:51:68:03:8f:23:56:d6:8e:01:42:3d:02:
1b:a3:db:7b:0f:43:ac:ac:29:b4:82:9d:03:a1:0a:02:bc:0d:
74:72:c5:ca
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUTgN2Hejw727zCeyRuOCQS1tEP+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDVaFw0yMzEyMjAxNjU2NDVaMDMxMTAvBgNV
BAMTKDY1MDIyQ0ZCQjNCRUE3RjUzOTVFMTMwQTAzQjI0OTkxN0U1MUJFNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KMTCSR/B6YPJqGDtkLTYoeFs
BouPflF0OMfFjPsHP+wcRSaODxz0Q0p1YRvzq2Izpx3dkDK94IRvoA9sjhDtcTqw
Eta72Rmwp/GqovbRIM4DM93SqwXQ1P5YQogxyUTEXJP2jPUA14zyXiOINOa37t5H
rmxrUOZcS/DCCNYP65IvHeWvDk+4fTf6zCKrNgw7d3UEvChwFonUFD7Wgf0kB60W
5V62zZdwZdU2MYYUcL3ElR+099V8jPYFQuZhJe0oAChNpBtmVmGHpbtmoEjVBMqH
Muq6IBrkWkU2990voZ8csyxZsDuxjjAwi7TosrMWmW0jHGbSLt14XKNy/H5ZAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUZQIs+7O+p/U5XhMKA7JJkX5RvlswHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEy
MTU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/
BCUwIzAhBAIAAjAbAwcAKgagBQWlAwcAKgagBQoDAwcEKgagBRbwMA0GCSqGSIb3
DQEBCwUAA4IBAQCKYgzLpB3zXwB1xp8M4vKtU06TcJx7y4dib0TIiCK8Rq1M1NHC
UWf4IGPpqzqIy3HfwVur/R7xEiQD406/Af+IfqcFZqTFycc/LqpJp7lFZO12Kl9e
3qeFIzCfzaZnOe4Ssul3GrOBQSaSklAN154ifiCB7eXqWLqJvA/03kKZTRFp+lu+
vDeWiYUXntS4lAFvfeFD51Nj7z1bObWjYaFCLk5FfxiQISudA1P/zEY0UGl9cljO
51Uw/YvTa0OgjaKEt9LtFzQtqkGL5IWMpnlN8dHrpwIphPSn6ZWpS/9RaAOPI1bW
jgFCPQIbo9t7D0OsrCm0gp0DoQoCvA10csXK
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:26 2025 by rpki-client