Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213286.roa
File: AS213286.roa (raw, json)
Hash identifier: Bk21rBpBzvZ8fFi7HHmNrLM2Up3dvvN6rcpHBv7U9kI=
Subject key identifier: D2:BE:6F:89:F0:CB:62:60:8A:2A:88:F8:A0:27:66:BB:61:F2:23:B4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 25A046BC9F8478C46B38FCC4A806315EA9C801A7
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213286.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 213286
IP address blocks: 2a06:a005:17::/48 maxlen: 48
2a06:a005:1e::/48 maxlen: 48
2a06:a005:852::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a0:46:bc:9f:84:78:c4:6b:38:fc:c4:a8:06:31:5e:a9:c8:01:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=D2BE6F89F0CB62608A2A88F8A02766BB61F223B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:2b:4e:10:f3:e4:04:67:13:dd:f0:84:b2:
c2:00:5e:08:f3:90:7a:d2:00:f4:e4:3e:a1:b9:88:
4f:31:dc:0b:1a:ce:6f:f8:76:c1:bd:43:4d:f8:d8:
bc:ac:c5:36:8e:12:aa:a7:a1:7e:07:51:70:a6:ab:
22:1a:e1:b7:c6:b2:cc:68:e4:a5:59:a1:63:70:40:
f9:20:39:1f:5a:6a:0e:a3:d1:cc:ed:bb:94:44:32:
e3:39:eb:af:19:44:0b:16:b8:07:1b:fd:17:bb:98:
ca:af:17:5f:a2:9f:d1:01:24:e0:4c:27:30:30:fb:
a2:58:ed:33:4c:2c:2d:ea:32:b9:76:a1:57:d7:4d:
88:d9:01:40:68:d2:d4:10:40:44:d1:e0:2b:cd:d0:
f7:ac:7e:62:71:10:03:3f:df:df:ff:b1:cc:26:c2:
3b:0e:be:e8:02:6d:33:06:3b:68:2a:88:92:5f:cb:
d8:9a:b4:d4:87:7d:45:e4:7b:f4:2a:83:64:86:d2:
b6:17:86:92:2f:b3:ea:65:d0:07:a9:bd:c8:e0:4b:
7c:11:14:57:b4:81:e4:0d:86:5e:04:83:d5:6f:5e:
16:54:2f:df:86:a5:df:ac:ab:53:45:53:64:98:09:
83:12:4b:6d:6b:7e:4a:ea:11:3c:6e:2c:46:7b:f2:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:6F:89:F0:CB:62:60:8A:2A:88:F8:A0:27:66:BB:61:F2:23:B4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:17::/48
2a06:a005:1e::/48
2a06:a005:852::/48
Signature Algorithm: sha256WithRSAEncryption
9d:40:6f:6f:dd:bf:e6:8a:cb:11:de:7f:ed:f1:fa:4c:3f:0e:
bd:14:0f:2d:3f:46:b9:ad:0c:69:9d:d7:c9:4a:d5:e2:be:fa:
1f:45:9b:f0:0d:4c:28:15:2a:34:c2:43:93:b5:fe:7b:9b:f1:
b5:1a:fe:e7:0d:57:7c:30:07:da:6e:6c:83:ca:ca:19:51:55:
d9:2b:2e:51:cc:16:3c:ad:cb:6f:08:2a:14:e0:41:95:fc:43:
79:f7:13:4b:ac:8b:d3:72:37:65:6a:f8:28:85:2f:2b:63:52:
5d:ca:f8:c3:08:92:6b:77:07:b8:2e:3c:8e:05:12:e2:ea:18:
3c:79:2b:98:00:67:d0:0d:94:f1:df:dd:f9:01:bd:c6:e7:58:
e5:5d:a6:4c:27:86:25:d4:65:90:a2:10:95:f2:c5:fe:af:c3:
4c:97:b1:4d:77:22:26:c8:fc:94:69:c0:09:6d:1f:ac:41:93:
a6:6a:15:f1:74:34:86:4c:d1:91:14:28:ea:b9:6c:8e:a9:f7:
83:32:40:18:8b:a5:49:eb:af:6d:7d:3c:cb:22:f6:46:40:db:
bd:30:27:5b:c7:84:c7:a3:26:23:35:d7:9a:c7:a5:d6:60:9e:
a0:67:3e:d5:04:33:f3:2d:09:e3:57:03:52:79:48:3c:fc:4b:
f2:c5:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:46 2025 by rpki-client