Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212983.roa
File: AS212983.roa (raw, json)
Hash identifier: H871mGeR+L7t67TDX7wbghoXCI2RZQXaDLg7RoYOG/U=
Subject key identifier: B9:0B:DD:1A:48:99:EC:DC:F9:8E:B3:58:DB:5B:0A:00:39:5A:55:92
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 45C91E7FB9B30938EB78CCECD9DDBBEA36D1F59A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212983.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 212983
IP address blocks: 2a06:a005:13::/48 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:480::/48 maxlen: 48
2a06:a005:483::/48 maxlen: 48
2a06:a005:a04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c9:1e:7f:b9:b3:09:38:eb:78:cc:ec:d9:dd:bb:ea:36:d1:f5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=B90BDD1A4899ECDCF98EB358DB5B0A00395A5592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:4b:4e:32:22:f2:43:9a:6a:15:4e:f1:21:
b3:fe:73:ac:00:11:3e:59:c8:af:92:33:f0:47:9e:
a2:b2:96:99:a2:8d:f6:3e:19:aa:70:47:0f:5f:e7:
66:bd:1c:bb:d7:07:3e:f8:6c:3f:55:76:cf:a3:84:
be:00:21:c9:13:ba:d5:0d:9d:f7:45:fe:77:5d:77:
3e:39:9d:f0:41:e0:91:bf:41:1f:a9:e5:36:90:28:
34:5b:9b:f0:c2:51:a8:1b:9a:c2:a1:f1:61:11:de:
f9:e5:89:f3:68:f9:db:c4:f6:05:e3:a5:6a:21:2d:
da:49:fc:9a:59:26:bc:98:77:d3:b3:5e:e9:38:55:
a6:a0:ae:0e:80:9b:b1:f6:ad:af:f6:8a:f6:16:9c:
1e:d7:dd:c1:bd:43:af:d7:84:fc:80:54:e9:96:d1:
11:51:30:5d:9a:af:b4:73:81:eb:b6:d1:52:30:96:
0a:d1:37:63:a7:71:2c:ef:2e:42:64:a0:9a:51:a4:
ba:08:28:95:c3:f1:7d:1f:d3:e1:a3:f1:84:23:b4:
d3:80:d0:77:ee:f3:ca:75:b5:95:73:38:a0:00:57:
68:ea:1d:1d:9f:32:20:e5:e6:b6:62:2f:fa:e7:85:
32:6d:18:24:5b:8c:52:e1:d2:93:67:d6:4b:ed:09:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:DD:1A:48:99:EC:DC:F9:8E:B3:58:DB:5B:0A:00:39:5A:55:92
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:43e::/48
2a06:a005:480::/48
2a06:a005:483::/48
2a06:a005:a04::/48
Signature Algorithm: sha256WithRSAEncryption
82:05:63:97:7f:2a:de:b0:7e:ad:19:fa:51:00:1b:e4:b5:75:
1d:c4:86:84:23:13:87:98:e0:74:8c:30:bf:be:5d:86:eb:25:
c4:78:94:db:39:7b:a6:35:56:ef:19:97:c4:49:b8:38:75:98:
4d:5d:2d:99:94:1a:cf:ae:b1:8d:e3:db:f9:c9:76:0a:3a:5b:
32:24:e5:16:a0:5d:08:a1:00:5f:0f:e3:7d:d7:e6:bc:b3:4c:
08:46:33:86:e7:8e:a4:0e:42:24:78:04:bd:8d:d6:19:88:5f:
40:b1:de:0f:3b:d7:0c:cd:38:84:60:48:aa:86:0d:06:b9:12:
ad:19:fa:36:f3:0c:db:db:3b:ac:d0:50:53:9a:11:63:d5:18:
32:55:3b:26:c4:85:d9:3d:44:84:04:ed:86:eb:1a:f4:02:55:
dd:d6:c4:ef:b7:22:e4:26:a1:68:34:16:7d:ce:c7:64:6e:e2:
bb:73:63:46:83:f7:58:68:e8:b0:3b:34:f3:02:8b:cb:54:0d:
0f:cf:ec:3f:1f:0a:b6:f9:40:fc:ed:f3:fa:6d:68:b8:6a:cf:
c0:21:93:7e:c5:c0:e3:13:18:02:f2:0e:e1:e5:9c:43:dd:01:
0d:f7:d9:53:2d:28:48:42:d0:e4:53:a7:4b:62:45:a4:bf:5f:
fd:03:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:20 2025 by rpki-client