Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212294.roa
File: AS212294.roa (raw, json)
Hash identifier: o1wyXvpgEONLqY2xyvnfqdGsQV3uqcVYxZfXBv5inTk=
Subject key identifier: CA:31:91:74:06:4E:80:9D:E6:C6:66:2A:5C:B0:59:93:A0:51:40:85
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 769CE9348AFB93737B61106B3B89E1DAE9345F3B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212294.roa
Signing time: Mon 26 Dec 2022 19:59:55 +0000
ROA not before: Mon 26 Dec 2022 19:54:55 +0000
ROA not after: Mon 25 Dec 2023 19:59:55 +0000
asID: 212294
IP address blocks: 2a06:a005:e40::/44 maxlen: 48
2a06:a005:1610::/44 maxlen: 48
2a06:a005:1620::/44 maxlen: 48
2a06:a005:1630::/44 maxlen: 48
2a06:a005:1800::/44 maxlen: 48
2a06:a005:18d0::/44 maxlen: 48
2a06:a005:19e0::/44 maxlen: 48
2a06:a005:1c30::/44 maxlen: 48
2a06:a005:1c40::/44 maxlen: 48
2a06:a005:1f40::/44 maxlen: 48
2a06:a005:1f50::/44 maxlen: 48
2a06:a005:1f60::/44 maxlen: 48
2a06:a005:1f70::/44 maxlen: 48
2a06:a005:1f80::/44 maxlen: 48
2a06:a005:2200::/44 maxlen: 48
2a06:a005:2210::/44 maxlen: 48
2a06:a005:2220::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:9c:e9:34:8a:fb:93:73:7b:61:10:6b:3b:89:e1:da:e9:34:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 26 19:54:55 2022 GMT
Not After : Dec 25 19:59:55 2023 GMT
Subject: CN=CA319174064E809DE6C6662A5CB05993A0514085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:80:77:67:4f:b7:25:6a:0f:67:b2:8d:4d:
8d:17:dc:78:c2:25:93:96:de:9c:73:45:eb:dd:b5:
58:d8:08:4d:c8:93:2b:0d:f6:c7:fa:e7:04:da:70:
a2:4d:64:41:bc:d1:90:c6:dc:6d:89:68:93:e9:4a:
93:ed:df:39:3b:aa:c7:9a:3b:f6:d9:b6:fb:43:8a:
26:66:7c:9b:83:73:c7:d3:5b:9d:48:ce:9d:ca:fe:
fa:82:ff:15:27:61:f0:ca:91:da:26:e6:7f:49:52:
4f:2e:79:e5:c6:02:80:f4:c4:98:ad:91:39:bb:4e:
a9:61:ba:91:e6:f9:f2:1a:87:87:cf:8c:c9:0e:b8:
c3:63:fe:f2:9b:56:bf:54:79:35:66:70:35:72:8c:
bc:7f:8c:32:71:19:49:08:c0:7a:81:89:1f:e3:6c:
0c:93:3b:85:94:97:7b:af:44:ee:90:77:93:5b:72:
ba:52:b3:82:25:55:77:88:58:e2:03:ef:05:ae:12:
4f:89:bf:a8:d6:1d:e3:b8:d8:f4:d0:33:90:d0:2d:
bd:1b:d4:c4:ab:96:62:a8:e8:e1:84:0e:09:38:40:
58:55:b0:65:ab:23:e1:b5:0b:4e:a7:ec:f7:ba:c5:
b0:31:51:fe:88:a2:0d:b2:81:17:ed:3a:c8:f0:fe:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:91:74:06:4E:80:9D:E6:C6:66:2A:5C:B0:59:93:A0:51:40:85
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e40::/44
2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1800::/44
2a06:a005:18d0::/44
2a06:a005:19e0::/44
2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
2a06:a005:2200::-2a06:a005:222f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:55:18:6c:eb:fe:d7:54:a9:d1:41:26:2b:3f:2f:99:75:56:
bb:e0:d4:f3:ba:93:75:43:0f:20:ed:9a:8e:a4:a9:8b:94:2b:
72:d2:40:fb:e0:a5:56:86:25:fe:07:37:5a:15:26:45:2a:71:
42:a7:0d:b0:e2:91:29:78:6f:76:a0:91:94:98:bd:83:3c:43:
94:cc:38:e2:7a:56:32:a4:68:dd:cf:41:64:c9:ad:f1:93:11:
15:31:79:be:ad:af:60:80:02:d0:4c:ef:cf:fb:f7:a4:dc:8f:
82:0e:91:d7:62:ed:22:eb:51:80:2d:24:a8:fa:54:12:08:73:
1e:39:68:50:81:0f:88:76:a5:f5:27:81:e8:93:b4:20:24:d8:
9a:8f:ec:e8:c3:f5:39:4d:df:22:f0:31:fb:68:6d:16:ad:7d:
6d:dd:63:40:97:46:b1:43:73:a9:ac:74:88:76:1c:13:c3:3f:
91:bc:5f:39:74:b3:2e:f6:c2:b2:0e:ba:cd:68:57:7d:df:cb:
c3:80:55:f2:eb:7d:41:84:c1:f8:40:9c:df:ef:23:55:42:62:
29:ea:f0:20:61:67:5e:3a:4d:b6:ee:b7:2e:ba:53:de:9b:f5:
d1:ac:5e:60:af:61:11:76:62:10:c7:29:9a:11:68:d2:58:4a:
dd:c0:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:30 2025 by rpki-client