Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212715.roa
File: AS212715.roa (raw, json)
Hash identifier: 4lYESUM9dcN+8cvMqcfRrejTAEnCuAki8yV596nIO3E=
Subject key identifier: F6:A8:8C:37:2C:93:6F:66:AB:AD:2C:02:8E:EB:DC:1C:39:7B:42:0B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0C0F5197911537082CCA6784462A9EAD0EFD4875
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212715.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 212715
IP address blocks: 2a06:a005:1087::/48 maxlen: 48
2a06:a005:1088::/48 maxlen: 48
2a06:a005:1089::/48 maxlen: 48
2a06:a005:108a::/48 maxlen: 48
2a06:a005:108b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0f:51:97:91:15:37:08:2c:ca:67:84:46:2a:9e:ad:0e:fd:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=F6A88C372C936F66ABAD2C028EEBDC1C397B420B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:28:6d:09:e8:a5:8e:57:c1:3a:c5:ae:a1:
4f:02:3d:64:b3:4c:cb:08:4e:1f:aa:ae:f5:b4:f6:
9b:22:6d:f2:8d:7f:7c:7f:e6:5c:57:e2:ba:e7:77:
3d:39:e5:55:5a:30:2c:81:3d:62:27:02:3f:d0:ce:
16:80:17:19:cb:db:be:c4:6b:ec:3c:65:a2:b8:16:
81:15:3f:95:10:c0:7f:1e:cd:be:fb:84:64:37:af:
5a:33:cf:be:21:85:2c:aa:f8:d4:14:26:bf:fa:38:
e2:e3:ad:a1:1d:b0:ae:c7:d5:44:e7:94:1e:6a:99:
5b:6b:07:c1:a5:1e:ba:62:c0:98:7c:c3:e1:fc:98:
fd:d3:88:e7:c9:39:c7:93:79:2e:6d:26:18:b4:bb:
1d:09:7a:18:f8:a3:64:da:26:88:f9:7a:7f:2b:22:
d6:04:a2:7d:7a:46:d8:8f:77:46:46:db:84:7c:25:
44:63:ee:0b:cd:ea:a4:79:ac:ef:6d:cb:27:03:d2:
5c:1b:c6:e2:c4:8d:ca:54:27:cf:e7:bd:0b:ef:5e:
9a:7d:ef:6e:d8:f1:3b:64:b8:b5:68:b1:c0:04:4c:
e4:6e:a4:70:c0:1c:4d:4a:57:50:1d:ed:6b:ba:88:
92:a8:fc:8e:70:a4:f2:40:72:f3:84:0a:98:aa:21:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:8C:37:2C:93:6F:66:AB:AD:2C:02:8E:EB:DC:1C:39:7B:42:0B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1087::-2a06:a005:108b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:a4:29:0a:c6:a9:f0:b2:1b:57:7d:77:99:7d:03:b9:2d:fb:
c3:9b:31:fc:d3:cf:72:d1:9f:34:b8:ac:98:d6:2f:23:6b:f1:
07:87:03:a0:b6:f3:09:79:45:31:dc:03:65:e0:58:75:14:42:
a6:fb:2d:30:0b:7d:c3:2f:21:0e:da:1d:3d:87:77:2b:79:23:
c3:81:aa:24:d7:7e:70:27:8c:71:a4:d0:a1:64:24:8f:1c:ec:
6e:f2:93:02:54:b8:73:e5:ea:7c:aa:c9:0e:44:8e:2d:46:6f:
4e:fd:d7:d2:23:fa:12:ad:fc:aa:13:a8:22:f3:44:b2:18:c0:
c1:1f:f7:38:93:52:a9:0c:b4:52:e8:74:c6:6c:81:63:46:ad:
27:72:e4:68:77:51:e4:c4:be:ba:86:57:76:b1:bd:bc:55:f0:
71:08:8b:6d:66:63:97:61:35:57:be:48:34:01:27:8e:56:17:
f7:27:16:fe:f8:af:67:fd:a0:31:17:b5:22:56:d2:97:f6:3f:
ed:ba:c0:04:cd:8a:6a:a6:c0:b7:d6:37:5b:13:51:4e:7c:e3:
cc:af:e2:68:f8:c6:14:39:33:fc:89:be:75:47:46:ec:c9:f9:
df:22:8e:d2:2a:c9:79:f4:7b:c3:b7:37:28:ac:2e:82:f8:f2:
30:41:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:45 2025 by rpki-client