Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212173.roa
File: AS212173.roa (raw, json)
Hash identifier: yj0NiOZ9WKrsQQez9pjB/YBB6bUxPBWXDnhxIZyrZIo=
Subject key identifier: 0D:6A:CD:19:0A:A5:2F:15:E0:68:29:C0:D9:EA:20:AD:97:A0:61:78
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 72AD25161D28437A3B9771AA68731889E2173361
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212173.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 212173
IP address blocks: 2a06:a005:24d0::/44 maxlen: 48
2a06:a005:2540::/44 maxlen: 48
2a06:a005:2550::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ad:25:16:1d:28:43:7a:3b:97:71:aa:68:73:18:89:e2:17:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=0D6ACD190AA52F15E06829C0D9EA20AD97A06178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:26:f9:4f:ee:f6:61:f7:52:26:3f:9a:a4:
9b:fd:cf:54:c7:c4:28:8e:61:46:9f:47:85:fc:6b:
2b:49:27:e6:f9:9d:53:cf:a1:86:43:11:5a:e8:9b:
49:b0:b9:97:61:a6:b5:73:66:e8:4a:6f:e7:26:a6:
07:05:81:2e:47:75:6f:16:e6:aa:94:43:50:43:fd:
5d:71:14:85:32:e2:a1:98:c9:fe:d9:1a:f6:f2:60:
7c:af:e6:09:b8:8c:e7:b1:14:fd:ac:15:be:2b:2d:
c7:2c:76:1f:4f:cd:08:dc:3d:59:34:55:83:93:af:
1c:e4:ec:ed:be:7b:e6:ab:52:da:43:47:15:09:81:
9b:cc:0a:bf:cc:ef:db:2b:ae:30:8b:a4:5a:7f:db:
ec:81:23:b2:70:26:02:7e:07:52:27:4a:a2:db:7e:
1c:3d:34:57:ff:3e:50:3c:b5:91:99:7b:83:5a:28:
9c:f8:52:41:77:dd:f4:ba:cf:b3:76:0d:ae:f6:fb:
c5:d2:d4:a9:34:78:3f:d9:f7:a2:4a:72:61:52:63:
76:c3:80:81:d8:91:f8:3f:7b:bd:aa:cc:65:e3:73:
36:b0:fd:5f:75:ed:c8:95:38:90:8e:eb:a8:78:30:
f6:62:56:ec:00:0d:e9:21:a6:de:52:fd:b1:ea:4a:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:CD:19:0A:A5:2F:15:E0:68:29:C0:D9:EA:20:AD:97:A0:61:78
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24d0::/44
2a06:a005:2540::/43
Signature Algorithm: sha256WithRSAEncryption
18:b2:70:a4:04:a0:8b:89:d1:bb:fc:05:b4:bf:7b:0c:1e:cf:
ba:99:44:70:3b:d4:a7:c4:68:e5:6a:c6:2b:27:69:ba:40:cc:
35:11:74:82:b2:9f:97:f6:d0:df:2e:61:21:25:24:db:e8:9e:
48:a9:ce:4a:d4:30:7c:4b:de:1d:0e:77:49:fb:42:7d:3a:b9:
eb:99:32:4c:a3:69:a2:46:22:f4:5d:9b:3e:21:68:23:ca:c3:
c1:d0:a6:f2:50:1a:fb:3c:19:77:ef:fe:7f:61:c2:11:c8:78:
3a:2f:52:20:7b:fd:56:f5:57:83:8b:53:90:5a:44:c8:0c:fe:
f8:4e:ac:16:91:81:e1:e4:90:03:d0:15:2c:6e:df:76:d8:2a:
b3:e5:d4:2f:b4:31:1e:df:3a:f8:26:1b:8d:8f:60:1f:de:9e:
62:a2:2f:c0:e0:b1:1c:9d:2a:12:fe:f3:04:03:ac:43:7c:5f:
fc:ec:17:77:f2:9d:2b:9c:79:03:a2:bb:80:2d:dc:c5:af:3a:
b5:63:c8:a2:34:33:88:8a:ce:53:e5:b6:77:26:7d:de:05:ef:
ee:69:55:ec:ed:ec:7d:f3:de:21:d7:7f:88:b1:ac:5f:25:09:
ac:54:bd:2a:be:58:6a:7a:f7:9c:ef:d9:62:16:eb:8e:6f:fa:
65:05:e9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:01 2025 by rpki-client