Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212895.roa
File: AS212895.roa (raw, json)
Hash identifier: 4CO9MjWezw+W0kok8vyUyg1r05ZMq5f63jFN+xLv6WY=
Subject key identifier: 9E:D6:23:E2:00:DC:4B:0B:7D:22:A4:F3:52:50:24:3F:05:7B:D2:D4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5DB9344DB0460495EDE4DDF4E06614B1C88CB08D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212895.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 212895
IP address blocks: 2a06:a005:5d0::/44 maxlen: 48
2a06:a005:6d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b9:34:4d:b0:46:04:95:ed:e4:dd:f4:e0:66:14:b1:c8:8c:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=9ED623E200DC4B0B7D22A4F35250243F057BD2D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:1b:d1:9f:34:e0:8a:97:2e:57:ec:8f:4e:
35:d4:6e:a2:94:06:d8:c3:a9:62:4a:9e:3d:19:65:
3f:75:fb:5c:6f:5a:a3:44:f8:11:be:e9:d7:08:8c:
48:a1:ef:0f:df:99:98:6a:41:b9:2c:d1:b4:8f:5a:
61:af:67:ef:a3:59:23:be:01:80:22:9b:4d:12:0b:
41:3d:ca:65:b4:fe:42:bb:36:bc:ba:0c:c1:8a:aa:
be:78:10:4c:70:b0:66:16:a1:58:e7:fd:8c:67:d0:
47:62:8f:f4:b9:5c:a0:15:0d:49:e5:2d:45:71:4e:
46:52:6e:dd:ee:d8:28:04:0a:a6:23:8b:31:3c:a6:
1b:9b:fa:33:90:da:f1:42:5f:39:8e:e5:b7:b5:27:
e9:f3:fc:98:92:32:65:1d:a3:7f:ef:3e:cb:16:a8:
da:19:29:18:df:ad:73:cf:0b:da:17:47:9f:46:8a:
8b:90:87:66:ce:19:12:63:24:4d:f9:76:19:3f:f3:
51:a5:53:30:ca:cc:24:a4:50:21:f9:4a:78:49:30:
77:b5:af:66:fc:2d:da:30:8c:fc:66:42:99:cf:ce:
67:b9:f0:a0:65:25:89:bc:d1:aa:ed:a9:b6:d6:96:
fc:09:c7:ab:ca:fa:37:93:a7:f7:7f:5d:5b:e3:5d:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:23:E2:00:DC:4B:0B:7D:22:A4:F3:52:50:24:3F:05:7B:D2:D4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5d0::/44
2a06:a005:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
96:8e:34:43:fd:75:4e:e6:13:8b:0e:25:0b:66:65:45:57:a2:
1c:2a:61:b3:e0:41:5a:e6:c8:26:d7:5c:45:16:2c:2d:8b:17:
1e:3c:d7:21:b4:e1:0b:7a:fa:ed:5e:f6:2c:9f:b9:c3:96:7b:
3d:73:80:a9:97:15:30:7e:76:67:90:3b:3d:1e:99:d8:f5:d2:
a5:ef:48:26:12:2b:8b:47:ed:6b:98:f4:91:6c:32:68:7c:48:
58:d0:2c:d8:4e:0d:74:a9:79:6f:e8:95:73:80:32:52:b8:51:
57:0d:44:bd:88:74:60:17:34:d4:ab:07:30:b6:cd:44:55:7d:
84:4d:1c:07:d2:f2:56:a6:2a:50:38:eb:e6:82:92:fe:fe:1b:
58:a3:29:ae:9a:b7:f6:67:3e:42:1f:a2:6e:eb:38:a3:3b:d5:
52:74:4a:5e:bd:e2:2d:d9:d7:90:1f:f6:4c:b7:c6:f5:44:31:
c1:e5:08:50:cf:7a:90:d1:10:79:9b:2b:d4:6f:05:e8:53:75:
5e:58:c9:72:b9:b5:5c:df:e8:d1:6a:07:a4:f4:74:cf:a2:d1:
e2:67:93:26:80:a7:b7:69:88:8e:e4:58:9a:bb:d0:19:7a:15:
7e:1f:f7:ee:83:a9:94:c0:e8:f1:5b:c6:76:06:97:a3:09:8c:
9d:0d:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:50 2025 by rpki-client