Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212746.roa
File: AS212746.roa (raw, json)
Hash identifier: tebB/HaWxDAUCYIZPYSMYuoZujc8UiLrPIxW6xd0WXQ=
Subject key identifier: 08:A5:0B:F8:B5:AF:28:A9:52:F2:43:D8:FE:77:9F:F0:EB:31:7C:6A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 35D43CE1909445034AB6EB5955E20760D8DA5999
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212746.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 212746
IP address blocks: 2a06:a005:1020::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d4:3c:e1:90:94:45:03:4a:b6:eb:59:55:e2:07:60:d8:da:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=08A50BF8B5AF28A952F243D8FE779FF0EB317C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:81:ee:72:de:77:68:37:c9:26:82:94:b8:
07:6d:a0:fc:6e:08:17:03:a0:fa:92:45:fe:b3:bf:
21:66:6f:29:16:78:3d:80:ec:03:5c:e2:a8:be:21:
08:eb:58:87:45:3c:d3:74:87:78:ce:ee:b4:0c:68:
83:b1:31:0b:9a:b3:fb:42:9e:bc:27:ad:99:b7:73:
ca:98:0c:a1:9a:1a:b4:27:4b:01:c5:6d:e5:ac:1a:
60:24:b2:1b:93:05:a8:6a:60:53:26:6d:b3:c1:02:
0f:c5:c5:cc:32:34:fb:12:76:fe:08:ac:87:94:1b:
99:4b:8e:f6:c0:7f:17:fd:3b:d9:8c:dd:b9:2d:47:
29:3e:6d:1e:ce:03:bd:2a:e4:b6:1c:d5:ab:e5:a7:
92:b2:34:f7:54:09:f1:e7:cc:19:c1:e1:a8:4e:1c:
4e:95:28:11:91:a9:25:9d:5a:9a:f7:b8:7b:6a:b4:
41:58:15:d3:ad:57:a4:7b:28:4c:b1:7b:3a:f4:31:
43:7f:4c:af:05:eb:87:ff:e3:a3:9d:c5:dc:92:3a:
7e:82:15:27:79:53:ab:c5:fa:be:2b:0c:cf:8f:05:
21:b3:b3:74:cb:99:ff:66:22:05:20:2f:78:26:c3:
40:a9:a9:e8:4b:0e:cd:b6:ea:75:b7:fe:98:01:16:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:0B:F8:B5:AF:28:A9:52:F2:43:D8:FE:77:9F:F0:EB:31:7C:6A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1020::/44
Signature Algorithm: sha256WithRSAEncryption
71:b0:7a:b0:c3:2e:c8:87:e4:24:69:d7:57:88:a6:fc:cf:dc:
6b:33:32:a6:3d:fb:d9:5f:cc:fa:58:b3:4b:cf:db:48:a7:41:
30:40:47:d8:5f:1b:db:ce:d3:02:e2:0b:84:d5:03:c8:5a:f8:
00:c4:c2:45:a7:02:0b:d5:e2:26:30:31:06:98:af:23:1e:06:
30:48:dc:80:3b:45:a7:4a:e6:a3:c1:04:ca:69:ae:2b:12:bf:
c1:b4:45:8e:74:5a:9f:d9:60:be:68:30:71:2d:66:46:e3:e3:
19:2d:73:66:46:03:0d:6e:ca:86:4e:f1:fa:a7:a9:5a:14:ff:
f1:38:10:c8:b4:3e:4c:82:6f:8d:13:d3:32:30:b9:6e:1c:b5:
6b:44:03:a6:d6:3f:d9:aa:e1:58:19:f1:be:5f:28:82:f8:22:
06:76:37:ca:eb:4b:26:f0:e4:7e:13:25:a0:5e:89:64:30:bd:
32:17:3a:cc:a0:d9:af:fd:3f:19:e9:dd:c8:9a:dc:7c:bd:e2:
7d:6f:9b:45:7f:29:5c:ae:85:d6:15:b5:60:f8:34:8e:e1:bf:
d2:47:23:97:a8:55:f7:3b:d8:b0:4b:50:bf:97:01:8f:d7:15:
e7:4f:28:15:45:2f:86:17:ff:ad:1f:77:8e:f0:80:e7:69:ec:
96:36:90:6a
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUNdQ84ZCURQNKtutZVeIHYNjaWZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTVaFw0yMzEyMjAxNjU2NTVaMDMxMTAvBgNV
BAMTKDA4QTUwQkY4QjVBRjI4QTk1MkYyNDNEOEZFNzc5RkYwRUIzMTdDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cIHuct53aDfJJoKUuAdtoPxu
CBcDoPqSRf6zvyFmbykWeD2A7ANc4qi+IQjrWIdFPNN0h3jO7rQMaIOxMQuas/tC
nrwnrZm3c8qYDKGaGrQnSwHFbeWsGmAkshuTBahqYFMmbbPBAg/FxcwyNPsSdv4I
rIeUG5lLjvbAfxf9O9mM3bktRyk+bR7OA70q5LYc1avlp5KyNPdUCfHnzBnB4ahO
HE6VKBGRqSWdWpr3uHtqtEFYFdOtV6R7KEyxezr0MUN/TK8F64f/46OdxdySOn6C
FSd5U6vF+r4rDM+PBSGzs3TLmf9mIgUgL3gmw0CpqehLDs226nW3/pgBFgfXAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUCKUL+LWvKKlS8kPY/nef8OsxfGowHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEy
NzQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBRAgMA0GCSqGSIb3DQEBCwUAA4IBAQBxsHqwwy7I
h+QkaddXiKb8z9xrMzKmPfvZX8z6WLNLz9tIp0EwQEfYXxvbztMC4guE1QPIWvgA
xMJFpwIL1eImMDEGmK8jHgYwSNyAO0WnSuajwQTKaa4rEr/BtEWOdFqf2WC+aDBx
LWZG4+MZLXNmRgMNbsqGTvH6p6laFP/xOBDItD5Mgm+NE9MyMLluHLVrRAOm1j/Z
quFYGfG+XyiC+CIGdjfK60sm8OR+EyWgXolkML0yFzrMoNmv/T8Z6d3Imtx8veJ9
b5tFfylcroXWFbVg+DSO4b/SRyOXqFX3O9iwS1C/lwGP1xXnTygVRS+GF/+tH3eO
8IDnaeyWNpBq
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:04 2025 by rpki-client