Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212888.roa
File: AS212888.roa (raw, json)
Hash identifier: tk26E0tNi+8dA0KaA44x+ILJLIeArtj8aoVPvrR8Evw=
Subject key identifier: D6:FD:F4:6F:F8:E5:99:D1:7E:BF:34:C7:B5:E7:AD:DC:D9:06:20:5B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2B3B29651F882D850A146B131783085183E9E662
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212888.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 212888
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:a::/47 maxlen: 48
2a06:a005:1990::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3b:29:65:1f:88:2d:85:0a:14:6b:13:17:83:08:51:83:e9:e6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=D6FDF46FF8E599D17EBF34C7B5E7ADDCD906205B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:b7:8d:85:5d:79:36:46:2c:1e:6f:2e:1d:
fe:ba:c5:ef:26:f3:29:cd:ee:de:42:67:42:95:69:
ef:fd:92:69:46:d8:7e:cb:01:22:23:cd:95:4f:f6:
64:d9:79:8b:5f:ba:a4:f7:26:82:44:de:33:28:2d:
bd:41:db:5c:cc:5e:10:11:75:d6:31:8a:7e:33:16:
90:55:95:37:11:b0:49:e6:7d:41:6d:68:79:ff:07:
39:31:c0:ba:ce:b9:7a:89:7e:0c:74:29:5b:4d:6b:
1d:c8:62:48:55:5e:1b:e3:88:f5:d0:8f:7e:dd:67:
14:06:d5:9c:e9:66:dd:84:e2:59:23:c4:93:7d:a3:
a2:82:cf:93:5d:fc:f9:ea:15:0e:ce:be:6c:06:eb:
19:63:d4:e1:3e:6f:18:99:da:66:2c:6e:f9:db:93:
52:00:36:85:65:7f:99:98:aa:a8:94:c9:e0:36:61:
62:5d:8d:71:d6:8d:c3:c5:47:11:54:b1:b5:a8:a3:
da:2b:22:a5:20:90:ce:98:6f:d7:a0:b7:29:1a:e3:
3d:e2:a4:1d:db:f6:d9:6f:5a:ff:01:83:d4:5a:d7:
17:eb:59:86:a5:d3:58:80:19:da:dd:80:98:c0:2e:
73:c8:3c:cd:ca:00:e6:e4:29:37:13:f4:08:aa:60:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:F4:6F:F8:E5:99:D1:7E:BF:34:C7:B5:E7:AD:DC:D9:06:20:5B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::/48
2a06:a005:a::/47
2a06:a005:1990::/44
Signature Algorithm: sha256WithRSAEncryption
84:86:53:2c:41:55:ba:dc:12:d5:d3:d5:76:75:42:b5:4a:66:
97:24:20:cf:7d:f6:60:e2:e0:49:91:66:2b:18:54:2a:44:b5:
49:45:b8:7d:d3:cc:8c:b2:c5:d9:fe:98:b0:eb:9d:8c:4b:f5:
99:53:61:7c:5e:e3:47:5a:1d:9b:dc:24:11:22:a1:df:03:01:
4a:39:93:2e:a5:1c:8e:64:cf:b9:c8:ee:b9:fb:a3:9b:58:b0:
85:70:1b:ef:5b:cf:5f:70:63:ab:2d:ab:b3:cb:f0:f9:bf:d7:
f9:b0:fa:c5:42:54:43:b9:40:0e:92:40:08:2e:4b:08:9f:1a:
e3:12:18:8f:fc:c5:71:ad:f5:c2:21:d1:60:b5:86:01:d2:79:
fb:ea:e0:42:8f:cb:79:37:f0:b5:ff:24:ca:9b:0c:de:ee:31:
87:1b:e7:6e:5d:2c:4f:75:34:1e:fb:bf:8d:76:12:53:22:59:
44:c5:b4:0a:82:68:54:8b:7c:25:ce:b7:5a:88:18:60:7e:9c:
46:cc:fd:ef:54:7d:6e:87:a7:6c:13:20:e2:ad:fb:fe:b0:5d:
2a:86:22:5b:d9:a6:13:58:c2:47:dc:26:90:fb:24:40:e0:e1:
06:a7:a1:d4:7c:8c:e9:5e:c3:a7:bf:e6:90:0e:4b:c5:e7:8a:
5d:7d:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:57 2025 by rpki-client