Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212354.roa
File: AS212354.roa (raw, json)
Hash identifier: ZB+7IK7WbZA01RxnXlMdnqDj6/NcQJ2hDdU9xly6OTk=
Subject key identifier: BF:F5:52:F0:45:A0:68:B6:F6:6A:D5:50:BE:BC:2D:3C:F0:91:C3:20
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 749EABB44FDEB2DA3C80B0B341A5BCE11F90774B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212354.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 212354
IP address blocks: 2a06:a005:a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9e:ab:b4:4f:de:b2:da:3c:80:b0:b3:41:a5:bc:e1:1f:90:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=BFF552F045A068B6F66AD550BEBC2D3CF091C320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:d7:54:f2:99:85:8e:e9:e3:39:f4:f4:b0:
32:26:d9:24:28:46:53:24:31:e6:6b:e9:54:5a:7c:
bc:99:ef:66:2c:dd:ab:21:4b:82:ef:1c:d1:d7:be:
0e:ac:6a:d0:be:38:16:33:67:54:59:b5:c1:65:6b:
47:dc:d5:e5:77:f8:b9:aa:14:bd:ff:03:ba:48:93:
55:3c:4e:d9:0e:0c:d3:48:49:74:6f:22:63:20:c5:
87:46:d8:bb:40:ae:2a:7f:ec:d2:15:46:db:a8:89:
27:11:a2:a6:41:29:64:46:71:6f:82:c5:b9:ce:d5:
a6:4a:46:cc:0e:ad:5f:fe:a4:d8:1f:cf:41:ac:c8:
47:63:10:7e:18:fd:a2:ca:e7:9c:9e:8f:f1:db:6f:
26:0f:8f:b3:da:dc:ef:38:4a:a2:dd:70:e7:aa:ad:
c1:e6:b4:36:a9:16:f8:10:a7:d5:97:2a:23:c1:ee:
49:cb:2e:7c:00:15:1d:78:1d:41:f2:6e:4d:bd:3d:
ee:4e:e2:41:b0:21:dc:33:b6:a0:64:32:f0:98:45:
dd:98:c0:be:55:0a:ee:a4:c2:42:e1:2f:5f:a8:2b:
fc:93:32:9f:2b:b9:f2:8f:ed:f2:6f:03:a2:96:fe:
46:92:b1:63:79:e1:88:83:ae:31:01:3a:56:ad:d6:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:52:F0:45:A0:68:B6:F6:6A:D5:50:BE:BC:2D:3C:F0:91:C3:20
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212354.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a00::/48
Signature Algorithm: sha256WithRSAEncryption
90:c9:59:f4:04:f9:3e:c7:b7:e1:5c:8c:46:0a:50:ac:a5:dd:
15:e6:d2:c7:08:37:6d:f5:b5:94:33:06:41:a8:3b:8c:28:8d:
d5:eb:88:95:ff:ec:b7:43:1b:5a:c0:d0:08:46:6b:27:95:d9:
c0:0f:77:4b:17:3a:63:bf:13:90:34:b6:d1:bd:18:51:46:34:
d1:06:57:f4:8b:99:2e:16:59:00:8a:a6:14:b1:82:56:5c:62:
fe:d6:b7:b2:ab:39:de:0e:80:19:b5:57:ef:18:76:0e:cb:3c:
f2:34:ce:3e:35:77:d7:4b:2e:8a:53:50:83:43:93:86:89:c6:
1f:95:e0:a5:87:a0:7d:d7:12:3a:a3:5b:8b:92:eb:68:4f:65:
7e:bc:54:c1:8d:66:0f:03:8c:b3:15:bf:fd:18:e6:1f:67:8d:
46:71:10:3e:f5:81:28:8b:2c:a9:df:b6:a0:dd:6c:5a:c0:5e:
6c:c3:f6:18:11:cc:ed:44:9b:4e:12:e8:be:4f:e8:18:3e:d6:
c0:ba:73:56:eb:99:5f:2b:4e:f4:ef:87:9d:ec:95:3d:85:75:
39:5d:ea:80:f7:e3:e7:0c:0f:e1:39:c7:57:50:0e:4c:e3:10:
2d:08:63:a1:03:e4:7c:78:06:d2:84:da:a7:e3:8c:54:5a:19:
6b:a0:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:04 2025 by rpki-client