Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212252.roa
File: AS212252.roa (raw, json)
Hash identifier: EH9S6l1kBuTi29nUPlxvYL8sNM8IfcpNFsJxoDiyEU8=
Subject key identifier: 52:BC:08:50:44:E4:8E:B9:6E:C0:C5:F9:E7:71:8D:FD:BB:36:4D:90
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 69E879A2FF403C4BD79765D9DADD5114A993A16A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212252.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 212252
IP address blocks: 2a06:a005:2430::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e8:79:a2:ff:40:3c:4b:d7:97:65:d9:da:dd:51:14:a9:93:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=52BC085044E48EB96EC0C5F9E7718DFDBB364D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:5d:4c:24:d1:7a:db:1a:f0:28:4c:24:8f:
b4:2a:71:cd:ab:03:6d:02:7e:d1:97:8b:22:e9:20:
2b:15:eb:0c:6d:30:c7:94:c8:58:4e:f4:b7:93:bc:
f7:6e:5a:5a:96:ba:cb:87:58:a3:12:21:4c:42:74:
0c:79:ec:44:4d:cf:6c:5d:05:5b:0e:60:be:c8:09:
08:fa:ee:7b:ab:73:d3:b1:7a:e4:ac:80:20:4a:e5:
b5:73:58:0f:ca:71:52:78:a4:d5:03:14:01:01:c1:
be:b7:21:69:64:5b:e5:cb:85:15:7d:d6:1a:17:1c:
c6:f0:b0:fb:39:96:e6:05:02:92:64:0a:6e:c0:d8:
36:17:f5:b7:60:08:3a:a6:38:2f:c1:8f:ec:9b:15:
90:7f:27:9d:86:e6:f9:7a:b5:9b:85:26:e4:53:32:
39:2f:7e:9d:71:42:f7:bb:ab:1b:4c:1a:cb:85:a3:
46:f1:77:08:24:8f:ef:f8:1e:e7:28:5b:16:8a:ad:
a4:19:50:74:a8:08:8b:8d:0f:29:64:d7:a3:60:c6:
01:b7:e8:79:0b:1c:4a:32:4b:b7:36:05:53:4b:3f:
62:0b:b8:e6:ea:4c:03:f2:a1:85:74:20:3b:46:6b:
d0:5e:6e:0b:75:ee:6c:c9:a8:f1:2c:73:c7:bd:0b:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:08:50:44:E4:8E:B9:6E:C0:C5:F9:E7:71:8D:FD:BB:36:4D:90
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2430::/44
Signature Algorithm: sha256WithRSAEncryption
9e:44:0b:d1:66:15:52:b7:92:11:0a:49:6c:21:bc:30:a5:ab:
ef:b2:78:a3:be:bf:59:94:ff:1e:89:07:23:a7:d3:f4:d8:cc:
a2:d3:21:ba:35:87:05:ef:cd:57:f7:91:65:94:e0:60:40:f5:
59:4b:9a:4e:93:6e:d6:f0:c8:9b:5f:a2:5a:e8:4a:83:b1:d2:
f0:d2:68:17:bd:12:6a:04:4c:33:2a:0d:20:7e:c7:35:40:fe:
e8:f9:7c:38:bc:3c:f5:5e:c7:a7:a3:d4:39:76:35:ca:6d:0e:
ca:6f:3c:61:d4:15:1d:14:e1:10:f7:62:f0:f6:06:b3:4f:01:
60:88:c2:38:7e:84:9a:52:b2:95:ea:1b:c6:8a:e0:ac:13:bb:
76:f9:c8:41:5c:0d:5e:54:2c:a9:6d:51:6e:36:86:94:41:e9:
8a:6c:4f:2d:43:0a:fb:b5:67:e7:cc:30:c5:b8:d1:34:66:73:
f6:aa:fc:16:de:02:cc:35:28:81:4e:af:9f:51:89:13:56:56:
b7:0c:97:88:28:63:db:df:99:8d:ed:e8:b3:69:d1:39:70:9b:
5b:13:42:0a:7b:ac:d2:0e:53:f0:f3:ea:cd:69:e4:e2:13:b6:
db:15:4d:90:d6:24:e0:01:e2:45:eb:7a:b6:58:8a:3d:30:89:
09:c5:d3:af
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUaeh5ov9APEvXl2XZ2t1RFKmToWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDZaFw0yMzEyMjAxNjU2NDZaMDMxMTAvBgNV
BAMTKDUyQkMwODUwNDRFNDhFQjk2RUMwQzVGOUU3NzE4REZEQkIzNjREOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeqV1MJNF62xrwKEwkj7Qqcc2r
A20CftGXiyLpICsV6wxtMMeUyFhO9LeTvPduWlqWusuHWKMSIUxCdAx57ERNz2xd
BVsOYL7ICQj67nurc9OxeuSsgCBK5bVzWA/KcVJ4pNUDFAEBwb63IWlkW+XLhRV9
1hoXHMbwsPs5luYFApJkCm7A2DYX9bdgCDqmOC/Bj+ybFZB/J52G5vl6tZuFJuRT
Mjkvfp1xQve7qxtMGsuFo0bxdwgkj+/4HucoWxaKraQZUHSoCIuNDylk16NgxgG3
6HkLHEoyS7c2BVNLP2ILuObqTAPyoYV0IDtGa9Bebgt17mzJqPEsc8e9C+RlAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUUrwIUETkjrluwMX553GN/bs2TZAwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEy
MjUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBSQwMA0GCSqGSIb3DQEBCwUAA4IBAQCeRAvRZhVS
t5IRCklsIbwwpavvsnijvr9ZlP8eiQcjp9P02Myi0yG6NYcF781X95FllOBgQPVZ
S5pOk27W8MibX6Ja6EqDsdLw0mgXvRJqBEwzKg0gfsc1QP7o+Xw4vDz1Xseno9Q5
djXKbQ7Kbzxh1BUdFOEQ92Lw9gazTwFgiMI4foSaUrKV6hvGiuCsE7t2+chBXA1e
VCypbVFuNoaUQemKbE8tQwr7tWfnzDDFuNE0ZnP2qvwW3gLMNSiBTq+fUYkTVla3
DJeIKGPb35mN7eizadE5cJtbE0IKe6zSDlPw8+rNaeTiE7bbFU2Q1iTgAeJF63q2
WIo9MIkJxdOv
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:50 2025 by rpki-client