Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213045.roa
File: AS213045.roa (raw, json)
Hash identifier: y9FyZpqqXeM3i2P2M1/1IdWVuV5j0ALa1RrWup8to6E=
Subject key identifier: 23:2C:75:48:73:6E:36:97:7B:F7:DF:2A:86:70:7D:93:83:B5:93:64
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 79CA66CF365001A14FB9E499D3C0F3FF72D030A7
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213045.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 213045
IP address blocks: 2a06:a005:e20::/44 maxlen: 48
2a06:a005:1140::/44 maxlen: 48
2a06:a005:1ef0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ca:66:cf:36:50:01:a1:4f:b9:e4:99:d3:c0:f3:ff:72:d0:30:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=232C7548736E36977BF7DF2A86707D9383B59364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d0:e9:22:87:38:b9:de:24:49:90:ff:3a:be:
a0:7e:02:6f:89:a5:a9:a0:6d:b7:55:87:59:4f:59:
0d:55:db:51:c2:4c:63:5c:a4:66:00:e5:cd:7f:55:
b9:9c:92:d7:eb:ab:bd:12:27:a6:8c:82:9e:0a:a3:
8b:ba:9e:fc:1e:04:cd:12:b0:cb:63:a0:41:a1:ee:
d1:5c:ac:8b:c4:e2:88:66:9b:62:9d:92:09:34:28:
ef:75:45:b6:0e:5b:dc:44:59:f5:fd:82:7e:a5:05:
58:85:d1:e6:da:da:04:f7:db:0e:dd:06:22:e4:e9:
89:39:ab:45:30:4c:60:bc:8b:11:72:0c:4b:90:b9:
9f:1e:e1:53:65:00:06:ce:60:48:7a:d1:2b:2c:90:
9c:fc:7b:f8:bd:90:77:31:3a:f2:3c:4a:7b:ec:b0:
85:4d:42:71:e8:3e:d1:c5:a9:8d:d8:5d:40:2c:83:
2f:16:30:26:99:d8:7a:fb:ba:a5:f7:7f:36:fa:be:
19:fc:7a:af:b9:4c:e9:f7:0f:8e:87:42:fb:39:d3:
ad:d8:ee:37:b5:ac:14:79:49:63:3f:b0:6e:3e:1f:
3a:88:34:70:91:49:35:83:8d:06:f4:89:07:0d:05:
de:a9:29:8e:17:3d:f9:81:6a:6c:a5:a2:9e:45:fa:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:75:48:73:6E:36:97:7B:F7:DF:2A:86:70:7D:93:83:B5:93:64
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e20::/44
2a06:a005:1140::/44
2a06:a005:1ef0::/44
Signature Algorithm: sha256WithRSAEncryption
dc:51:94:fa:58:a4:2b:5c:d4:2c:5e:e7:e9:d1:5c:74:d9:9d:
26:e4:70:79:3d:c4:76:cb:c8:6e:28:26:04:c5:22:91:25:37:
8a:0a:2f:27:03:4c:9d:80:de:75:65:bf:a3:de:1e:2f:84:da:
a9:34:51:16:10:1d:59:61:29:56:90:bd:e8:22:4b:7c:be:61:
30:c4:be:64:ce:59:d2:48:da:bf:76:6f:ab:12:a6:9c:25:7e:
0e:56:c9:3c:02:fa:2c:91:f9:f1:4d:00:86:6e:7c:af:ec:6a:
bd:e4:89:35:f7:53:96:cb:36:5c:62:4b:4b:86:db:4b:fe:db:
0f:2a:12:e0:3c:eb:b7:18:11:85:7d:36:7f:f4:a0:d7:88:d0:
6d:43:a4:09:03:2d:4b:e6:f2:0d:be:87:3b:13:c8:9a:eb:cf:
ef:08:be:67:be:47:ec:e3:ec:76:d1:14:93:5c:df:36:f9:34:
54:de:9f:8c:a5:79:f5:3c:e4:98:00:9e:c4:89:b6:7e:8a:5e:
53:67:a0:b7:43:e0:c7:68:db:d8:a0:3b:b7:2b:82:2c:54:6a:
aa:38:45:5a:54:7d:14:02:f6:d7:a0:db:bb:8b:d4:81:b8:fb:
4d:89:2f:36:f1:72:f9:15:45:74:ff:f4:a6:db:bc:70:d9:42:
da:80:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:58 2025 by rpki-client