Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212360.roa
File: AS212360.roa (raw, json)
Hash identifier: Nyig2/cFR3/a2o/SzTtjpL5henIv7P2i1MJXjG9R6o0=
Subject key identifier: F7:96:74:35:00:77:90:B6:3E:98:69:22:84:2F:13:D6:6F:1B:2E:E4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 721A29134CB771B43C2DCC992F4CBA04CD89798A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212360.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 212360
IP address blocks: 2a06:a005:180::/44 maxlen: 48
2a06:a005:1e0::/44 maxlen: 48
2a06:a005:1f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1a:29:13:4c:b7:71:b4:3c:2d:cc:99:2f:4c:ba:04:cd:89:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=F7967435007790B63E986922842F13D66F1B2EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:35:c9:71:0e:99:7e:fa:93:47:d4:fe:c8:
7a:9f:52:a3:74:80:4e:d8:69:a9:03:ed:93:1d:5e:
97:a2:08:e0:9d:ae:75:a0:a3:d5:b5:e4:3f:91:b1:
51:af:86:15:44:7b:6f:b4:b1:e9:19:50:d7:7c:85:
c1:a4:74:11:c2:a6:0f:1a:ce:a2:2e:b2:ba:08:ae:
3f:ec:43:9c:06:c1:4c:88:45:4a:c8:d1:25:84:88:
ab:0a:4a:2f:c4:46:ef:6f:60:5c:4d:79:2e:84:8b:
fe:e5:2a:e2:62:03:38:65:11:c2:2a:f1:62:b7:b6:
6a:dd:ac:7d:9c:6b:d7:00:32:91:a1:b4:37:e2:36:
aa:ff:e0:c4:33:90:3c:ee:45:04:82:f2:64:64:e6:
bc:db:bc:de:d2:d0:b1:24:0e:36:19:07:07:6b:b9:
26:88:77:e0:bb:51:56:fd:93:4b:d8:13:64:7c:53:
1e:0f:9a:d4:86:d7:84:89:be:6f:e4:f0:5e:5e:50:
c5:ec:a1:68:21:c9:03:06:bb:31:76:96:78:00:46:
35:ff:76:e2:3e:6a:83:f1:09:69:fc:3d:69:f9:4a:
2d:bc:b8:ad:ab:b7:46:9c:a1:1a:34:df:85:9e:82:
b8:29:d8:c5:19:dc:e2:41:bc:89:3a:76:1a:89:74:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:74:35:00:77:90:B6:3E:98:69:22:84:2F:13:D6:6F:1B:2E:E4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180::/44
2a06:a005:1e0::/43
Signature Algorithm: sha256WithRSAEncryption
a7:ab:09:0f:31:2d:01:22:d4:4e:8d:da:e1:42:27:3f:7f:7f:
5a:56:3e:48:f8:6e:42:be:10:28:55:4d:03:87:df:e0:dd:26:
61:4b:49:ed:4d:96:ca:14:a3:9b:42:7c:97:13:5b:76:b9:50:
90:f3:14:82:8c:28:a4:d3:41:31:44:31:56:fc:a8:53:de:71:
d8:2a:59:4e:6f:9b:de:78:dc:2c:9b:72:9f:61:36:58:d1:84:
f0:32:49:3e:f9:05:70:bd:9d:40:e4:7f:8c:8b:4c:32:0d:44:
1b:a3:8a:98:12:10:89:75:78:4c:f2:2e:26:a4:0a:a3:61:40:
f2:e3:55:5a:5e:28:98:ef:7e:2c:8b:61:be:ab:da:c9:8e:55:
41:e6:ee:7f:f6:5b:15:70:53:78:dd:7c:8a:85:7b:44:35:38:
97:44:26:bb:8a:84:92:50:94:70:56:15:3a:e2:08:bf:23:51:
53:2b:55:ce:80:85:2e:71:3a:b2:04:0e:fb:5b:b6:72:aa:16:
3e:61:5d:7e:e9:3e:62:6d:d1:ca:32:98:eb:fb:9a:7f:24:cc:
c6:66:28:7a:8d:ab:15:8d:ea:0f:71:e0:c9:07:9d:13:3a:f2:
28:d2:81:a5:6c:54:fe:e0:ba:24:46:d4:93:a0:af:31:21:88:
5c:12:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:20 2025 by rpki-client