Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212995.roa
File: AS212995.roa (raw, json)
Hash identifier: 5bfF5nglwWql4W7Q0FCpl5zH4A7VtVeyuWMmYsSruzg=
Subject key identifier: D9:2F:16:57:76:D9:5B:88:9B:32:D4:8B:85:E6:7D:B7:77:0A:99:49
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 437F5E6BD3931652200E252776B9E420232C0E7D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212995.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 212995
IP address blocks: 2a06:a005:4a0::/44 maxlen: 48
2a06:a005:cd0::/44 maxlen: 48
2a06:a005:d10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7f:5e:6b:d3:93:16:52:20:0e:25:27:76:b9:e4:20:23:2c:0e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=D92F165776D95B889B32D48B85E67DB7770A9949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:00:a0:00:b2:a5:b6:d0:9a:50:2a:06:3d:
2c:77:84:ce:65:52:bc:e6:d1:73:8b:38:b2:d0:2a:
6c:dc:73:4d:a3:17:82:1e:82:88:af:5d:89:bd:28:
99:5d:5a:fe:a8:12:6e:13:3f:cb:d8:cd:fb:5f:b1:
2c:d5:ea:70:e0:d3:38:e4:60:ed:d7:00:dd:72:69:
09:97:a9:e4:ae:40:06:50:a5:ce:04:b5:b1:7f:a5:
e9:6d:ed:60:45:f3:0a:6b:52:c8:71:c8:72:f3:ab:
eb:36:2c:ae:ae:ff:43:b4:ac:97:9b:a0:66:f2:d1:
84:6d:db:75:8f:fc:13:36:45:73:ea:15:5c:fa:54:
32:35:00:90:fa:ef:cb:6b:5c:0e:0a:2f:20:de:8c:
e4:93:2e:43:ce:2a:89:52:df:91:5f:3c:4b:6e:70:
49:e3:9b:c4:35:24:42:6b:23:e4:87:ca:64:7a:77:
66:f3:4d:23:4f:91:a7:ca:84:01:be:dd:a2:14:05:
94:bf:73:94:bf:f5:93:b6:8a:4b:11:34:1a:5b:5b:
02:51:54:4d:46:d6:ab:2f:48:bd:2b:1c:02:72:17:
ee:a7:06:5c:e5:d2:1b:d7:57:94:07:8a:fe:1a:ac:
b9:23:c5:0a:fa:ab:21:87:0d:15:c6:5f:48:49:ae:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:16:57:76:D9:5B:88:9B:32:D4:8B:85:E6:7D:B7:77:0A:99:49
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4a0::/44
2a06:a005:cd0::/44
2a06:a005:d10::/44
Signature Algorithm: sha256WithRSAEncryption
8e:1b:c5:d5:81:6d:93:7b:0a:39:1e:4a:47:82:ca:cc:12:64:
58:d0:b9:c1:af:f6:ad:3d:12:8c:41:63:32:40:c2:c7:bd:af:
32:4b:a1:be:2c:73:2d:cd:1d:3e:c5:df:9b:72:54:b5:e4:7b:
ab:a6:1c:34:0b:b0:f1:f9:25:66:9a:52:47:01:2e:54:f6:73:
a1:aa:c4:74:05:a1:94:0f:10:f6:3d:61:1f:b9:fb:79:29:12:
f4:30:85:af:e3:b8:0c:1a:c6:61:02:bc:05:83:96:41:bb:66:
5c:9a:c2:a0:e6:a4:f9:24:a6:0c:1c:ea:e2:ea:3d:06:e0:9e:
37:89:6f:8c:cb:77:6f:32:ee:a5:0b:50:b7:75:ce:f6:8f:d8:
45:3f:54:0e:76:5f:7a:f3:01:fc:20:17:d8:54:db:b0:52:13:
e9:1a:f5:50:f8:f4:6a:25:85:26:3d:53:7e:13:b0:d4:e5:36:
57:8b:b0:9f:a1:82:1d:90:cb:90:32:f8:71:d0:ff:d5:2f:76:
8d:56:80:d6:06:1a:2d:6f:ef:5b:54:4b:01:b4:63:6c:c8:5f:
6f:7e:00:ce:38:62:32:7b:98:3c:34:a7:4f:2e:8b:58:25:e4:
f7:13:59:b5:c2:b5:d7:c1:ec:46:42:9d:69:26:10:96:0d:7e:
ef:b9:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:13 2025 by rpki-client