Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212359.roa
File: AS212359.roa (raw, json)
Hash identifier: rDfuNuRYy7xKtAcQsda/6qggkj88tjRVCd18W/3TM2Q=
Subject key identifier: FC:73:80:51:75:07:F6:C5:11:16:1F:9A:51:DB:C4:B2:D0:42:57:20
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1BFE79E4F0D721F9BD55ED78E8E5F59D52C0CD72
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212359.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 212359
IP address blocks: 2a06:a005:1c0::/44 maxlen: 48
2a06:a005:1d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fe:79:e4:f0:d7:21:f9:bd:55:ed:78:e8:e5:f5:9d:52:c0:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=FC7380517507F6C511161F9A51DBC4B2D0425720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:ab:a2:89:5e:11:81:d4:2c:b5:99:fc:a0:
11:4b:c0:20:1c:1c:fa:65:69:8d:cf:ac:54:de:65:
1f:11:6e:f6:87:5b:ed:91:a1:1c:5b:92:88:35:ed:
1b:73:b3:9e:b4:b2:fd:05:bc:54:79:4f:90:d0:5e:
c4:1a:44:35:8f:4f:c1:b9:87:7f:bc:69:28:c6:f7:
27:b6:bc:c1:68:14:6a:f7:25:7a:05:93:1a:c7:4b:
23:38:0f:f8:99:4e:05:9c:46:e7:a6:cb:63:f8:f2:
d7:9e:02:0d:cf:dc:bf:ba:63:3d:1b:12:8a:b3:1a:
24:80:5f:04:3f:ab:a8:e0:8c:30:3b:e1:9a:3a:0e:
3d:f5:13:17:b9:2c:8c:b6:82:49:99:cf:f1:cd:13:
41:82:c2:cb:a6:cd:e3:9d:2a:c6:86:4b:01:6a:3d:
96:9f:e8:4e:08:11:90:64:58:b9:52:29:c0:7f:ec:
2a:95:57:1b:2b:eb:7b:d7:bf:05:15:ae:74:11:b7:
db:6d:86:0d:07:1d:bc:3e:c8:57:b8:20:44:a4:1c:
9f:be:39:5f:58:bb:08:7d:6f:a9:8c:53:af:f5:95:
c7:1a:6e:df:85:3c:dc:3c:77:f6:ef:90:27:2f:8a:
d6:c6:f1:b8:b1:bb:bc:48:27:cc:68:97:a1:41:43:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:73:80:51:75:07:F6:C5:11:16:1F:9A:51:DB:C4:B2:D0:42:57:20
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c0::/43
Signature Algorithm: sha256WithRSAEncryption
85:47:f0:af:60:75:ca:d8:a3:b9:ec:ea:e3:2b:5f:d8:03:79:
4c:2f:00:61:e8:62:40:ac:c5:b1:8c:ce:b4:0c:df:bb:03:8b:
cc:87:33:36:6e:ef:76:ff:17:01:b0:67:31:05:0c:d5:03:74:
94:c5:bb:2f:63:54:f8:d4:a7:0d:a7:7c:6e:5d:02:ef:59:7d:
fd:72:d3:92:15:80:e1:37:f4:97:2c:d0:65:11:5e:f6:f8:c4:
1c:54:21:27:ce:62:0c:8d:65:6d:1f:6d:38:0b:b2:11:c4:7e:
7c:c8:c1:5c:a9:e0:65:b8:24:8f:23:06:e2:e4:90:66:53:ac:
0c:c7:55:38:88:8a:e0:67:4e:df:b3:07:7f:39:02:ba:e5:09:
a8:47:50:cc:07:7a:61:a8:4f:ce:3d:f7:31:59:65:98:0c:f6:
a1:86:f6:ec:99:d3:e0:c4:68:0a:73:73:a3:1a:f6:7a:2e:1d:
54:54:66:ec:04:39:2a:4a:46:26:22:95:b8:88:07:d0:cf:b5:
5e:01:c6:2f:a6:6e:e3:5c:79:27:91:cf:b5:bc:9e:26:9c:f6:
53:18:66:dc:95:68:a6:4c:1c:ce:63:0b:29:11:b7:75:4e:0c:
49:0e:17:9c:e6:f4:64:90:ec:97:76:a0:21:9a:2a:af:a7:68:
33:1f:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:34 2025 by rpki-client