Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212336.roa
File: AS212336.roa (raw, json)
Hash identifier: Bm9K/PqB/RIcjhHKqQcQ3JPopccC5pTKIwL7+I4XNDg=
Subject key identifier: 08:D4:00:8C:67:8E:E8:33:29:31:CD:81:58:F0:5F:7D:9B:D8:EC:E1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 71F779F609767E72A06A90B7947A9A2DEA9A5538
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212336.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 212336
IP address blocks: 2a06:a005:5f6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f7:79:f6:09:76:7e:72:a0:6a:90:b7:94:7a:9a:2d:ea:9a:55:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=08D4008C678EE8332931CD8158F05F7D9BD8ECE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:06:44:b7:ea:1e:b4:89:69:e6:23:42:43:
35:d7:98:9c:79:07:13:0e:a3:17:86:4f:9e:36:39:
65:fc:fc:37:47:dc:db:cf:9c:80:52:b4:53:b7:cf:
e0:8d:8f:dc:eb:69:98:95:b9:1a:ba:eb:04:78:a2:
b2:8f:50:60:32:ce:c1:a1:f3:cb:b8:7b:e1:81:dd:
41:52:04:c6:15:96:fc:16:c0:95:4a:68:3f:5d:71:
c7:3e:30:61:36:ed:8b:0d:0f:61:2b:32:3a:41:2e:
b0:05:1d:d4:f3:8c:ba:d5:3b:fe:ce:84:9c:e3:7d:
95:13:88:35:b4:17:08:df:c8:7d:0d:46:8f:a6:e1:
b1:97:f5:69:c9:b9:f6:2f:09:d4:0d:47:09:d3:48:
1a:fa:cc:27:f4:46:d3:be:b3:19:65:5c:f7:d4:d9:
f8:ff:e9:f4:76:6c:38:f2:f5:d6:22:c1:a9:72:02:
a5:11:97:52:f3:35:90:a7:64:8e:a4:83:e6:fd:44:
9c:c4:04:ac:f6:f4:8b:da:7d:8f:1b:63:cc:e1:07:
ec:92:f7:d2:ba:12:3f:cb:74:10:f5:a3:3b:9c:b7:
2f:c4:e3:60:4a:95:2f:90:7f:6a:e2:cd:81:c7:ea:
e5:2a:e9:52:dc:6c:87:70:98:65:3f:7b:fd:83:40:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:00:8C:67:8E:E8:33:29:31:CD:81:58:F0:5F:7D:9B:D8:EC:E1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f6::/48
Signature Algorithm: sha256WithRSAEncryption
74:30:1a:12:7d:5a:ad:81:b1:ce:8f:41:8d:eb:fa:f3:e3:71:
d3:9f:ac:c1:2d:83:a4:1c:61:cf:fb:6e:ca:66:6c:6e:88:eb:
f1:d4:94:7f:33:24:65:c8:16:a8:07:ef:80:13:fb:03:42:42:
dc:c3:7c:7e:38:26:b5:91:c3:db:f0:f6:dc:bd:82:ae:9b:fd:
80:d2:01:e3:d6:a0:fc:ba:9a:eb:a7:fe:9b:e1:53:85:da:6a:
68:fc:64:ea:ce:e0:15:2a:4e:fb:38:7b:29:e8:b0:bb:56:21:
b8:29:2a:f4:a3:5b:ce:44:79:01:69:14:16:d2:6c:88:b9:33:
c8:a5:ad:23:87:87:30:52:db:1c:b0:b4:5b:c8:d2:df:2c:7c:
20:ae:c6:71:02:1a:8e:4d:b4:5c:1f:8b:33:23:1b:d5:cb:2b:
3f:e6:9c:2c:a3:f9:de:de:b5:a2:b8:17:2f:cd:0d:e7:1c:b3:
cc:79:0d:2f:dc:13:67:40:e4:f0:08:c2:a2:b7:f4:b0:33:2f:
51:da:2d:d1:4d:c2:4a:8b:77:00:c0:3e:53:c4:c6:f3:63:41:
8a:56:26:1d:30:00:f5:ca:ce:25:32:ab:0c:22:bf:c2:86:33:
73:59:df:2c:54:fb:f8:22:27:3a:56:c6:c8:85:5e:e9:81:94:
79:e7:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:42 2025 by rpki-client