Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213239.roa
File: AS213239.roa (raw, json)
Hash identifier: WtU1ByoXmCNFQBqLRRIvXcdgqXM9VEVmFHMPJV+lPWU=
Subject key identifier: FD:44:FB:24:2C:CE:B9:FF:BC:5B:FA:B4:35:6C:31:D7:EC:CD:98:02
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6DAF46A7F19348C66D6D6C4C978D6BEA9A30EF71
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213239.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 213239
IP address blocks: 2a06:a005:d2f::/48 maxlen: 48
2a06:a005:1086::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:af:46:a7:f1:93:48:c6:6d:6d:6c:4c:97:8d:6b:ea:9a:30:ef:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=FD44FB242CCEB9FFBC5BFAB4356C31D7ECCD9802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:69:07:82:df:23:78:d9:b9:69:20:e3:60:
b2:d0:95:bc:69:9b:5c:25:e1:8f:71:37:88:e7:b1:
dc:b4:db:fd:16:49:f0:2d:79:9c:1b:80:c7:f5:31:
0e:4f:25:1d:18:c8:4f:8e:b2:e3:79:c4:6f:38:c7:
d0:29:c3:93:14:ce:0e:73:fc:0b:44:a6:a7:7d:77:
98:2c:5a:ca:d0:b6:dd:93:69:b8:ae:d9:58:05:08:
c4:27:8d:95:e1:d8:80:50:07:84:8b:8b:5c:ab:07:
e3:f4:00:30:98:70:ab:ad:43:56:f5:9b:b0:f3:48:
f6:30:0d:20:08:94:1f:e0:c7:23:85:27:d8:8b:72:
95:e6:91:28:aa:5e:42:d7:1a:79:26:22:e7:55:38:
a1:a4:20:68:bf:d3:81:7c:10:36:e6:04:72:a4:82:
6a:7a:5d:1a:98:5f:e2:2f:14:40:f7:6a:53:69:b3:
88:26:ea:2b:e1:74:17:99:fe:e3:84:90:a6:2e:c1:
34:8b:9a:dc:1c:e0:ea:aa:3e:00:b5:f5:82:05:52:
a5:d7:e1:cc:70:51:83:40:d5:b2:f4:25:7e:3d:4e:
5e:77:4c:be:99:01:6e:b8:9d:bd:4e:21:4e:f6:74:
30:00:93:e4:cb:82:dc:c6:00:f6:eb:05:5a:de:af:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:44:FB:24:2C:CE:B9:FF:BC:5B:FA:B4:35:6C:31:D7:EC:CD:98:02
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2f::/48
2a06:a005:1086::/48
Signature Algorithm: sha256WithRSAEncryption
d8:62:98:9c:d7:42:91:19:8b:29:f6:bb:f6:8b:b2:80:77:52:
d5:16:e5:1d:74:86:97:cd:b6:6a:56:12:19:24:eb:b8:31:d8:
3f:d2:b4:b0:8f:5a:5b:20:a3:fa:94:ef:b7:66:9c:ee:9e:a0:
6f:98:09:2b:4d:5e:ca:a0:24:82:65:60:0b:1f:92:4d:aa:e3:
ef:70:f4:62:a2:ae:f3:06:63:81:db:56:b3:44:dc:79:ba:77:
b2:0a:ce:0c:64:1f:2a:3d:9f:6a:7b:3a:58:1c:0e:0c:77:ed:
70:b0:c1:fd:ea:80:8a:e0:00:e5:e5:94:a7:bf:49:5c:8f:78:
54:be:a4:18:46:e0:4d:2e:9d:ad:12:3a:0a:5f:c2:a0:3f:b8:
8b:b3:c4:6f:c4:0d:59:cb:28:3c:ed:85:20:06:0d:57:c6:0d:
63:78:2f:c0:73:2f:56:21:85:70:9d:0f:cf:49:90:9c:61:d3:
15:0e:45:fc:12:31:87:a6:10:dd:35:6d:fa:45:0c:9c:3b:3d:
08:61:98:c5:51:83:7c:21:3d:51:1f:f1:f3:9f:ef:ef:07:e3:
31:d1:41:98:b8:1b:69:7e:4b:7d:97:57:17:d8:02:12:67:46:
d3:e3:c4:14:26:d5:4b:7a:8a:37:14:e0:8e:b8:cb:ce:99:74:
c7:b6:21:ae
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUba9Gp/GTSMZtbWxMl41r6pow73EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDBaFw0yMzEyMjAxNjU2NDBaMDMxMTAvBgNV
BAMTKEZENDRGQjI0MkNDRUI5RkZCQzVCRkFCNDM1NkMzMUQ3RUNDRDk4MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHGkHgt8jeNm5aSDjYLLQlbxp
m1wl4Y9xN4jnsdy02/0WSfAteZwbgMf1MQ5PJR0YyE+OsuN5xG84x9Apw5MUzg5z
/AtEpqd9d5gsWsrQtt2Tabiu2VgFCMQnjZXh2IBQB4SLi1yrB+P0ADCYcKutQ1b1
m7DzSPYwDSAIlB/gxyOFJ9iLcpXmkSiqXkLXGnkmIudVOKGkIGi/04F8EDbmBHKk
gmp6XRqYX+IvFED3alNps4gm6ivhdBeZ/uOEkKYuwTSLmtwc4OqqPgC19YIFUqXX
4cxwUYNA1bL0JX49Tl53TL6ZAW64nb1OIU72dDAAk+TLgtzGAPbrBVrer4StAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQU/UT7JCzOuf+8W/q0NWwx1+zNmAIwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEz
MjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcAKgagBQ0vAwcAKgagBRCGMA0GCSqGSIb3DQEBCwUAA4IB
AQDYYpic10KRGYsp9rv2i7KAd1LVFuUddIaXzbZqVhIZJOu4Mdg/0rSwj1pbIKP6
lO+3ZpzunqBvmAkrTV7KoCSCZWALH5JNquPvcPRioq7zBmOB21azRNx5uneyCs4M
ZB8qPZ9qezpYHA4Md+1wsMH96oCK4ADl5ZSnv0lcj3hUvqQYRuBNLp2tEjoKX8Kg
P7iLs8RvxA1Zyyg87YUgBg1Xxg1jeC/Acy9WIYVwnQ/PSZCcYdMVDkX8EjGHphDd
NW36RQycOz0IYZjFUYN8IT1RH/Hzn+/vB+Mx0UGYuBtpfkt9l1cX2AISZ0bT48QU
JtVLeoo3FOCOuMvOmXTHtiGu
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:14:42 2025 by rpki-client