Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212387.roa
File: AS212387.roa (raw, json)
Hash identifier: FUlrgfRkqDcVLlB2PZ9Hx968s3WZUacvHyC8LE8jQRg=
Subject key identifier: 9B:8B:60:5C:66:6C:00:B6:FA:01:EE:70:74:2B:66:43:DE:DD:AC:A4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 12D2BA09C820DC8FD5F6DEBAC4E053FC2032A209
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212387.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 212387
IP address blocks: 2a06:a005:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d2:ba:09:c8:20:dc:8f:d5:f6:de:ba:c4:e0:53:fc:20:32:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=9B8B605C666C00B6FA01EE70742B6643DEDDACA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8e:29:44:7f:a4:7d:bb:45:8e:3a:49:db:c9:
4a:c8:5f:41:11:86:e2:a7:2f:dc:87:0b:cb:a5:4f:
9c:1a:8e:35:70:ba:22:53:c4:28:db:54:3d:25:cb:
c0:ac:24:eb:5b:cf:5e:40:67:cd:e2:4f:e0:0f:21:
51:72:34:04:c3:ce:f2:59:ac:c9:0f:7c:5b:14:bb:
2f:27:1e:86:3a:22:4b:1f:41:b0:a6:04:b4:cb:31:
d1:21:7f:09:84:52:4c:89:df:89:34:05:66:f7:0a:
ff:21:16:05:c5:36:a2:7d:cd:7d:71:97:c4:cb:8f:
b5:e0:5a:25:e0:d9:ef:f8:09:30:77:5b:5b:a8:e7:
de:6c:59:8f:88:57:62:9c:23:40:37:20:8e:ca:84:
cc:4b:8f:97:22:1d:61:0d:f7:4c:e7:65:22:2b:bd:
b2:9c:06:19:1d:b6:73:2c:4d:03:10:94:2d:1e:d6:
f1:17:22:5e:90:23:e4:28:ed:3e:89:ce:83:93:75:
02:4f:94:54:62:18:41:31:2e:2f:1d:ba:7a:a9:b1:
3e:b5:98:d5:f5:17:c8:16:b4:fc:78:c8:9e:6e:bd:
05:e0:e9:1d:b3:4c:68:51:50:98:1c:8e:5a:83:45:
d2:d3:60:8b:bd:f6:71:6b:e5:4c:24:f6:6c:a2:4f:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:60:5C:66:6C:00:B6:FA:01:EE:70:74:2B:66:43:DE:DD:AC:A4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:9::/48
Signature Algorithm: sha256WithRSAEncryption
79:da:49:88:66:c0:f4:31:0a:29:aa:b1:89:10:d0:14:d7:d3:
e5:18:f7:8c:b6:59:45:e2:e6:23:45:2b:59:7d:5a:d1:28:f7:
57:3e:20:dc:64:6a:93:aa:9a:24:9e:2a:46:75:e8:bf:c0:4e:
90:f3:f5:89:9f:c0:f6:17:23:d9:f3:bb:1b:82:97:dd:e9:77:
af:49:d1:a0:69:74:8b:30:90:4c:eb:0e:af:a2:d3:7f:8a:f3:
b6:7c:96:b9:f3:45:a0:e6:fb:9e:01:84:fc:f1:55:25:4c:61:
fb:48:91:d5:3a:75:ef:f2:ae:4c:c3:7f:b1:88:a7:0b:7d:d8:
5e:fc:8e:12:b6:cf:c5:57:44:08:f0:4e:c3:a6:e7:85:91:d5:
ac:f3:6c:71:b5:e7:96:b2:d6:80:b1:52:29:a0:f8:50:1e:45:
35:00:c9:5e:d4:6d:f6:61:99:8b:fb:15:12:92:f1:7a:68:47:
ad:05:dd:6f:48:b4:e9:cc:b0:82:26:b9:31:7d:ce:4d:8d:91:
f4:4d:ba:70:89:18:0f:81:ec:89:69:df:50:16:a9:f7:da:1e:
ab:69:bd:01:34:9d:66:4a:b9:81:4d:12:5d:92:fc:da:35:d1:
b1:90:7f:c4:3d:ac:58:ab:bc:ea:83:45:dc:ac:2c:22:13:61:
5e:15:0e:48
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUEtK6Ccgg3I/V9t66xOBT/CAyogkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDVaFw0yMzEyMjAxNjU2NDVaMDMxMTAvBgNV
BAMTKDlCOEI2MDVDNjY2QzAwQjZGQTAxRUU3MDc0MkI2NjQzREVEREFDQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0jilEf6R9u0WOOknbyUrIX0ER
huKnL9yHC8ulT5wajjVwuiJTxCjbVD0ly8CsJOtbz15AZ83iT+APIVFyNATDzvJZ
rMkPfFsUuy8nHoY6IksfQbCmBLTLMdEhfwmEUkyJ34k0BWb3Cv8hFgXFNqJ9zX1x
l8TLj7XgWiXg2e/4CTB3W1uo595sWY+IV2KcI0A3II7KhMxLj5ciHWEN90znZSIr
vbKcBhkdtnMsTQMQlC0e1vEXIl6QI+Qo7T6JzoOTdQJPlFRiGEExLi8dunqpsT61
mNX1F8gWtPx4yJ5uvQXg6R2zTGhRUJgcjlqDRdLTYIu99nFr5Uwk9myiT1pXAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUm4tgXGZsALb6Ae5wdCtmQ97drKQwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEy
Mzg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQAJMA0GCSqGSIb3DQEBCwUAA4IBAQB52kmIZsD0
MQopqrGJENAU19PlGPeMtllF4uYjRStZfVrRKPdXPiDcZGqTqpoknipGdei/wE6Q
8/WJn8D2FyPZ87sbgpfd6XevSdGgaXSLMJBM6w6votN/ivO2fJa580Wg5vueAYT8
8VUlTGH7SJHVOnXv8q5Mw3+xiKcLfdhe/I4Sts/FV0QI8E7DpueFkdWs82xxteeW
staAsVIpoPhQHkU1AMle1G32YZmL+xUSkvF6aEetBd1vSLTpzLCCJrkxfc5NjZH0
TbpwiRgPgeyJad9QFqn32h6rab0BNJ1mSrmBTRJdkvzaNdGxkH/EPaxYq7zqg0Xc
rCwiE2FeFQ5I
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:08 2025 by rpki-client