Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213312.roa
File: AS213312.roa (raw, json)
Hash identifier: NRYug7RgSuOLefZgVoNn+dEfAz/+lCM8Hw2mnIVOHa0=
Subject key identifier: A2:C4:B6:A2:8D:CD:3F:CC:59:12:62:28:93:E6:EF:BB:54:68:7E:86
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 67D7B21172F40005BA46E24904DF0278CD677EC1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213312.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 213312
IP address blocks: 2a06:a005:620::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d7:b2:11:72:f4:00:05:ba:46:e2:49:04:df:02:78:cd:67:7e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=A2C4B6A28DCD3FCC5912622893E6EFBB54687E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:75:8f:3c:31:6e:6c:01:85:38:0d:44:01:
3a:2d:b2:a2:9e:c0:f8:59:4e:b5:39:92:6a:49:87:
0d:65:3b:a3:3c:bd:b9:e1:09:99:33:83:4e:ee:41:
1f:89:31:31:b9:3b:17:50:3c:a9:a8:b2:13:e2:40:
2b:77:97:fe:26:b7:de:76:50:60:1b:48:02:d6:76:
4b:98:e9:20:ad:5b:4c:53:0e:07:17:6f:a6:72:0d:
9c:50:19:5c:34:e3:45:63:b5:64:c6:c0:e4:a7:0e:
d6:fe:49:18:6e:9d:67:1c:03:df:0b:5d:bd:d2:3a:
90:fe:00:cc:4c:21:95:7c:1b:27:ba:71:27:2b:10:
64:cc:dc:5a:03:cc:d4:3f:2f:21:78:2e:e7:1a:54:
6b:66:cc:31:9a:a8:27:3f:49:0c:9c:e1:dd:67:27:
f5:c5:40:01:96:05:f7:74:d7:6f:29:f0:a5:f8:54:
be:98:d2:20:4e:54:c8:c0:02:3d:1d:02:81:77:bf:
36:df:91:28:5a:6b:44:f3:c8:ea:06:09:c6:85:79:
cf:d8:66:f8:91:d8:e2:b2:cf:81:5b:42:2a:f8:3f:
ad:42:64:22:fb:01:49:49:2a:9f:cf:1f:67:7a:41:
68:83:8c:34:db:1e:f8:c5:78:0b:2e:c2:07:61:72:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:B6:A2:8D:CD:3F:CC:59:12:62:28:93:E6:EF:BB:54:68:7E:86
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:620::/44
Signature Algorithm: sha256WithRSAEncryption
31:63:de:67:cf:7b:49:48:f1:26:b7:aa:5c:5e:52:74:2f:98:
a7:ec:ba:30:66:f2:17:9b:0e:b5:07:f0:59:18:0b:2c:5a:d2:
cc:a3:75:34:ed:d2:a0:25:c5:f8:2a:2e:ec:2a:83:6c:30:17:
60:f1:bb:80:5f:51:06:77:4d:ce:e8:54:33:cc:a9:92:f0:5a:
70:e9:22:b2:ab:a0:f3:6d:c2:b0:2b:f8:21:94:b8:64:82:eb:
76:84:08:89:64:f8:a7:26:82:63:ab:73:23:93:ee:a5:60:0e:
2b:24:26:88:df:e9:bb:a5:c7:06:5b:a4:32:58:53:fd:6f:88:
39:26:60:8a:98:3f:64:e1:10:43:f4:54:a5:28:11:d3:2b:16:
55:f7:f2:46:44:53:ad:aa:3a:e2:9e:14:aa:2f:c9:60:63:6d:
ad:05:b5:c5:10:04:0e:ab:39:6e:6c:09:90:84:b8:bb:f6:b0:
c9:2b:91:75:80:4d:4b:4b:d1:a4:b3:da:ed:36:a8:86:13:4a:
de:e1:ba:22:34:93:da:f9:af:a0:ab:00:ee:de:47:51:39:83:
04:50:40:b8:e8:73:97:3d:a0:a0:a6:4b:56:b7:70:43:27:09:
ba:a4:93:bc:fd:9c:40:81:3e:ae:8d:e5:0b:5d:75:da:78:dc:
5a:bc:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:13 2025 by rpki-client