Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212242.roa
File: AS212242.roa (raw, json)
Hash identifier: 8X7Tdvg7HK2jSDZeGt/Dv/9LzxzL8JWYnZPIwkGuvKI=
Subject key identifier: C4:CF:23:72:02:CD:C4:66:F7:84:D4:9C:18:28:0C:0D:AA:0D:9B:3D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 215089EC7AF90BE1E50FD483D37AB2C0F0BC265B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212242.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 212242
IP address blocks: 2a06:a005:2450::/44 maxlen: 48
2a06:a005:24c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:50:89:ec:7a:f9:0b:e1:e5:0f:d4:83:d3:7a:b2:c0:f0:bc:26:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=C4CF237202CDC466F784D49C18280C0DAA0D9B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:46:7a:55:8e:e1:28:c6:9b:49:67:49:a3:
79:84:6c:79:5b:30:51:7f:ce:68:87:78:fb:7d:60:
60:39:20:2f:63:9a:3d:27:95:b0:12:83:2c:8b:a5:
6e:48:bc:f2:08:89:0e:e0:75:38:41:00:70:ff:b1:
dd:e4:c2:51:a8:bb:69:b5:b6:a9:b7:4d:75:e8:2d:
46:e7:6d:ab:0d:39:74:47:6c:a2:45:6b:b2:8c:aa:
e0:23:6d:fa:5b:fe:e7:e5:b9:d4:44:33:7a:f8:68:
48:f5:7a:b8:8e:a7:2d:1e:b4:08:ea:29:0a:02:75:
11:03:09:0c:bf:28:c2:c5:93:03:f6:d0:ee:3e:99:
af:9e:8a:67:91:9c:30:a8:fa:e5:7a:4f:72:d8:be:
6f:05:f5:50:f7:ff:26:3f:83:74:9d:a4:44:76:85:
01:ac:c1:cf:6f:4b:70:34:66:e6:9d:b2:7a:f6:4b:
e0:0d:7a:87:0f:cf:fc:ae:2e:ec:83:19:d5:a0:fd:
d4:ed:a9:59:c8:c8:b9:72:a4:a0:33:61:3c:bf:81:
1f:eb:29:a1:a0:95:a5:e3:b9:94:02:1a:63:9c:93:
cb:5c:f2:95:52:43:dc:9e:f3:9e:63:e9:c9:d1:ba:
0d:ee:85:14:8a:95:0a:70:3f:26:11:c4:18:9f:6e:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:23:72:02:CD:C4:66:F7:84:D4:9C:18:28:0C:0D:AA:0D:9B:3D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2450::/44
2a06:a005:24c0::/44
Signature Algorithm: sha256WithRSAEncryption
c2:2f:a2:8b:e3:c2:14:d1:9e:53:a7:46:f9:04:2c:62:ec:4e:
a4:df:11:2e:28:02:06:ec:36:9b:c3:1d:5c:2c:f2:77:a4:26:
e3:99:51:d3:0c:d2:7a:69:ce:6a:c3:c6:26:27:2b:57:61:9f:
57:41:02:01:a4:b2:1f:eb:f5:66:1e:1f:14:f4:f8:93:25:f4:
0f:5f:eb:9a:c3:ec:ac:35:4f:7c:5e:1e:42:c1:8b:d0:d1:13:
1b:ae:cd:2b:55:03:41:02:a3:10:03:00:72:1a:a8:a0:19:ec:
b3:56:3c:eb:0c:7b:39:cc:ad:65:84:42:7d:d5:04:58:e3:d5:
b5:8b:b0:55:de:be:5c:f7:14:8c:41:6b:b5:ca:13:a6:43:dc:
51:0a:c7:4e:fb:cf:45:f5:3e:f5:fc:35:af:9f:73:0d:66:d5:
91:05:26:60:e9:3a:40:e1:4f:63:38:3a:bb:d7:83:a2:01:97:
91:78:cb:78:34:a8:c2:3d:68:f4:a8:bc:c2:71:19:e3:ef:9f:
43:e7:4e:d5:2b:08:de:14:01:d3:9f:d3:3b:70:af:a8:d8:3f:
9a:ef:83:a7:cb:4a:73:17:dc:ef:b7:75:a3:03:39:a5:a3:3d:
2d:8b:1d:68:e4:fd:4c:84:95:88:91:b1:39:05:f0:05:bf:0d:
38:c6:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:43 2025 by rpki-client