Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213036.roa
File: AS213036.roa (raw, json)
Hash identifier: lwJURXJlYnP2fRuC0GDzTSgcyLgHzTYB5p7Icqp6jYE=
Subject key identifier: FC:E4:F6:B2:0F:00:67:96:36:99:B9:F4:36:94:94:8B:AE:1F:1E:C8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1EC594506B0656B78E40DE8DCBD8074F2740C887
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213036.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 213036
IP address blocks: 2a06:a005:5a3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c5:94:50:6b:06:56:b7:8e:40:de:8d:cb:d8:07:4f:27:40:c8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=FCE4F6B20F0067963699B9F43694948BAE1F1EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:78:69:03:ba:da:85:35:a0:13:f3:09:59:
98:34:87:6e:57:31:00:10:79:0e:58:7f:28:5c:5e:
ae:15:a1:5a:0a:1e:55:5e:fc:87:2f:75:0d:c8:b3:
32:48:b4:dd:c2:a5:b9:88:2a:ac:48:c3:06:88:7b:
b7:c1:88:6d:11:fd:9a:0d:23:d6:25:81:07:70:25:
9a:28:b5:10:2c:05:46:7e:ca:c5:4d:8e:be:a0:24:
42:8a:d4:6f:76:c8:79:b8:11:11:dc:92:13:02:3c:
71:6e:4d:90:ce:be:be:02:ee:21:af:00:70:ac:ab:
db:a9:19:78:e9:63:52:d5:9f:8e:9d:de:00:aa:f2:
16:f7:ce:ae:b5:18:04:bd:55:06:6f:26:f5:59:c5:
a0:20:6e:b0:03:f2:c4:28:32:b1:ff:aa:32:a9:9b:
39:99:5c:3b:a7:76:5f:af:53:04:f0:d5:a8:91:bb:
53:8b:03:4d:69:3b:0a:d3:6a:8f:4f:42:ef:d9:13:
6d:71:58:a5:d6:d9:11:70:2e:30:d4:c3:d7:78:5b:
f4:12:a0:d7:93:54:00:ec:e3:f5:eb:0e:66:82:a9:
51:92:f2:87:b8:14:b0:87:b1:8b:34:9c:58:ff:6a:
aa:49:af:02:e8:2f:4d:97:2d:83:85:2e:b6:8b:2d:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:F6:B2:0F:00:67:96:36:99:B9:F4:36:94:94:8B:AE:1F:1E:C8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a3::/48
Signature Algorithm: sha256WithRSAEncryption
1a:28:e0:0d:20:d9:44:62:7f:59:8f:2f:64:34:dd:67:90:60:
21:da:52:72:33:45:48:d1:60:71:13:54:47:13:9a:37:8f:79:
07:a6:99:9c:0f:67:9e:f7:72:f4:1b:3a:84:39:99:2b:70:d0:
6c:af:d1:14:bb:e7:c6:53:39:14:ad:44:82:fd:5b:70:43:a3:
cd:b4:e0:e1:ac:45:ce:e2:04:31:02:e8:72:e5:ef:91:1a:e2:
98:e7:29:20:e3:d9:bc:5a:96:1a:48:4a:ba:2f:64:19:3f:b5:
5a:11:25:aa:9e:25:8b:10:21:23:7b:63:4c:ec:2e:72:6c:78:
46:11:69:b2:1e:eb:15:d4:2f:11:7e:dc:d2:b9:a1:b4:e4:cb:
0d:0a:93:7a:16:e3:df:48:86:79:ed:47:ef:b8:be:1b:52:3a:
f5:34:3c:b8:8a:ce:76:3b:e7:1e:b8:a1:1a:18:b7:a1:f9:4b:
ca:7a:9f:ff:2c:22:e0:94:36:9c:3b:79:74:e0:2b:be:77:49:
0b:31:51:5e:7f:7b:33:95:41:25:a3:17:06:e2:07:05:93:64:
0d:03:5c:2f:c3:c6:29:4b:c3:14:e0:59:f6:f5:79:8c:b2:db:
f8:75:6e:46:e6:73:29:50:df:b6:f3:f2:b3:c6:5e:2c:f9:54:
f4:17:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:03 2025 by rpki-client