Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212948.roa
File: AS212948.roa (raw, json)
Hash identifier: P7XpdDYCjXT2D9ohV46oT4ggzpLmSjHg6q4mgyViFRA=
Subject key identifier: 6D:A8:4E:68:2F:34:6F:8C:9D:DC:2D:70:7A:79:35:18:A7:DA:FE:EF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 59231E4A3BFDFE94E4200FBC6CB5C30BED391CED
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212948.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 212948
IP address blocks: 2a06:a005:1509::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:23:1e:4a:3b:fd:fe:94:e4:20:0f:bc:6c:b5:c3:0b:ed:39:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=6DA84E682F346F8C9DDC2D707A793518A7DAFEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:91:63:87:24:66:a4:87:4e:fd:21:b3:51:
a7:53:43:e4:44:bf:45:1a:4e:97:49:7e:88:f1:53:
2b:da:1e:15:1c:0b:de:cf:75:63:19:7b:d5:e8:e3:
0a:ba:cc:03:c5:00:91:13:0f:bc:6b:93:44:5a:cf:
cd:ab:90:23:c3:a8:19:3f:f7:4d:71:bb:f0:53:68:
bd:cd:65:0c:59:52:3a:f7:cf:56:6d:3d:65:cf:9e:
24:11:00:17:3d:1b:22:2b:dd:79:1b:68:ee:ee:72:
4b:75:f8:5e:90:61:b7:e8:c4:5c:63:6b:0c:3a:30:
a3:e9:62:b6:68:61:c3:be:99:60:8c:8b:9b:b1:52:
bf:b2:93:bc:38:c1:1a:0e:f6:89:a1:04:0e:2c:f3:
87:aa:2a:52:97:ff:47:44:04:96:dd:29:aa:02:41:
81:0a:2f:d9:20:db:48:ef:2f:d2:be:bd:4d:10:4a:
17:0d:62:e5:34:53:75:9b:8f:3d:b3:03:e3:22:28:
a5:d8:66:30:a1:28:73:39:98:36:d6:69:6f:df:c7:
6c:50:37:c9:4a:74:db:ee:9e:c8:e4:d6:bb:72:8b:
47:61:ff:e0:d9:96:41:ec:fb:ff:d2:63:d8:17:35:
2b:33:ea:20:71:e4:e9:30:e6:c8:2f:ba:5a:47:8d:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A8:4E:68:2F:34:6F:8C:9D:DC:2D:70:7A:79:35:18:A7:DA:FE:EF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1509::/48
Signature Algorithm: sha256WithRSAEncryption
b9:2c:34:68:6a:9d:87:b5:91:01:dd:df:a7:6f:1c:13:fc:93:
78:7c:01:b4:9c:e9:41:5a:23:55:68:06:3b:ce:5f:04:c6:7f:
e7:f0:ca:ea:59:b3:46:7c:a9:3c:57:22:21:d6:c5:5f:19:d6:
9d:c8:34:86:e7:1f:34:fa:40:5e:22:f1:1a:38:bc:67:2a:77:
fd:2b:e1:ce:3f:0d:8d:2e:c7:54:88:98:07:e3:8f:d9:bf:db:
97:2a:96:0d:5e:2f:9e:4c:20:6a:d5:b3:e4:48:00:c3:b9:42:
29:9d:df:45:ad:16:af:04:08:73:44:96:fd:76:af:fd:7a:16:
d5:c1:a6:7d:ee:ac:f0:36:0b:3a:8c:de:2b:83:b9:46:d9:a2:
70:4d:0f:5a:c8:41:c6:e0:dd:a8:2a:c0:20:b5:4f:95:2c:22:
48:63:3a:b1:f0:e3:cf:59:ef:f3:f8:70:24:15:3c:b5:86:f2:
a7:44:00:1c:dd:d0:00:22:83:ee:f6:06:59:2e:ee:27:46:e7:
b7:20:14:d8:fd:80:6e:92:8a:b1:a9:32:3e:aa:df:c9:da:a8:
8f:45:84:5b:65:ef:80:47:14:89:b4:9a:73:e2:bc:af:e8:a7:
ca:9d:89:1b:87:7b:3e:c7:b4:57:2d:a2:33:ad:5b:e1:9c:41:
9c:92:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:02 2025 by rpki-client