Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213105.roa
File: AS213105.roa (raw, json)
Hash identifier: 1WSjZDe4RenVFqlP2ex6r/Hafy08uQXP64NBy6D9ClQ=
Subject key identifier: 3A:96:31:0B:66:BB:FD:4C:AD:BC:DC:ED:B7:87:C6:B1:53:17:30:C9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5A407160C4A76D1A34E7AA3F6A4BD0389488AAB4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213105.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 213105
IP address blocks: 2a06:a005:1260::/44 maxlen: 48
2a06:a005:18e0::/44 maxlen: 48
2a06:a005:1d30::/44 maxlen: 48
2a06:a005:1f20::/44 maxlen: 48
2a06:a005:1f30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:40:71:60:c4:a7:6d:1a:34:e7:aa:3f:6a:4b:d0:38:94:88:aa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=3A96310B66BBFD4CADBCDCEDB787C6B1531730C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:be:5a:8a:07:fc:b0:85:9c:ff:fe:84:fe:
03:a6:3b:c9:9c:93:51:30:46:74:41:23:0a:98:6a:
5b:5c:31:05:b5:a9:b6:cb:d6:ce:7b:2a:f5:32:05:
98:c4:e9:ea:63:65:b2:06:c9:06:dc:20:df:64:46:
c8:7f:68:7b:83:2d:d8:fe:5c:69:e6:86:14:da:9c:
c2:ff:67:b8:20:2c:c7:7f:df:04:97:42:60:27:f7:
f3:36:2d:79:99:c2:50:ca:6a:c1:67:fb:d8:fe:5e:
1a:80:96:cd:0c:6b:1b:f1:79:59:74:f1:c2:93:49:
30:e9:1c:7d:77:b4:a8:15:3d:d3:df:33:e0:22:c1:
6a:d8:d5:d0:d5:39:34:aa:5d:52:b3:32:0c:3f:39:
2f:bb:b2:32:fa:2c:95:6a:ac:53:f7:13:00:39:a1:
17:c5:2b:14:e9:c2:24:67:21:92:28:f2:98:8b:10:
59:1f:c6:ff:a9:cb:b8:62:5f:00:d6:19:e2:ec:53:
13:29:86:19:46:0f:d4:3c:c1:fc:3b:30:ba:f0:22:
be:54:8c:5f:a3:c8:57:a8:00:80:d6:40:dd:84:e8:
a2:f4:8a:ad:38:3d:ed:62:65:51:ef:ee:40:14:9a:
ec:ba:f0:12:c0:09:32:b9:ac:ab:b1:a4:21:a3:7f:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:31:0B:66:BB:FD:4C:AD:BC:DC:ED:B7:87:C6:B1:53:17:30:C9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1260::/44
2a06:a005:18e0::/44
2a06:a005:1d30::/44
2a06:a005:1f20::/43
Signature Algorithm: sha256WithRSAEncryption
bb:3c:f0:ce:6a:9c:2f:81:ca:d1:68:68:3b:e9:77:f7:e7:6d:
db:9e:22:aa:bc:0f:2a:62:a1:b1:0b:52:5d:9c:8e:75:aa:8c:
71:a5:d7:a8:b6:4c:7f:54:d5:d8:e9:92:e0:2e:f3:cc:f0:e8:
96:c5:f5:dd:68:b4:06:e0:cc:e7:93:34:db:00:c0:7d:fe:69:
b9:1e:f2:21:d6:63:c6:0d:c0:72:19:bb:d8:40:26:83:fc:c8:
a6:dc:dc:3c:00:ca:30:12:07:33:a0:6e:69:77:4c:9e:6b:15:
b9:d5:33:09:a3:ba:7d:18:d5:05:f4:df:b2:f7:a8:87:7e:bf:
a4:e2:c8:ba:00:81:97:eb:be:a5:58:c4:0f:82:2a:61:b6:fb:
12:97:fb:26:a7:23:53:fe:51:f0:d1:d6:17:f9:1b:c3:f6:71:
41:e8:9a:d1:7b:e5:6f:f0:02:e6:41:28:90:16:8a:ff:c0:be:
3e:27:23:a7:55:17:18:1d:9d:af:de:af:c6:91:15:92:10:1c:
78:ac:c7:8e:fa:a5:d1:97:da:41:24:27:f6:2b:54:64:cb:0f:
07:23:b1:86:29:cc:47:30:6a:be:9b:32:d7:e7:95:97:75:c1:
3a:57:a2:38:f3:71:40:38:3b:19:78:57:dc:c9:92:65:3b:3b:
09:f6:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:04 2025 by rpki-client