Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213327.roa
File: AS213327.roa (raw, json)
Hash identifier: NPVuQSxApRiQXfs0rVR6D90Xk0AkDyD6ToKKHJYJk1o=
Subject key identifier: 08:21:C4:C4:08:55:55:E7:AA:9E:E2:CB:7C:4D:52:A5:93:D0:D1:2F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 47E1EB75457247CCF60E9E8B80B0C40E1CC1458F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213327.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 213327
IP address blocks: 2a06:a005:1272::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e1:eb:75:45:72:47:cc:f6:0e:9e:8b:80:b0:c4:0e:1c:c1:45:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=0821C4C4085555E7AA9EE2CB7C4D52A593D0D12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:5c:b1:d2:97:aa:45:bf:ca:0e:05:8b:cf:
ae:bc:d5:67:e1:ae:bd:0c:18:58:63:ae:70:6c:86:
94:1a:2e:ca:da:c7:e1:af:57:37:b5:a6:dc:cd:51:
2d:fd:b2:f0:0e:e7:54:0c:34:13:e3:62:47:44:ec:
56:82:ad:50:f3:78:7b:72:09:51:3c:f6:3b:bb:e7:
90:29:99:d9:cd:0d:b2:96:66:f7:7e:ec:a8:43:5c:
62:b8:39:6d:8c:88:68:0a:ae:0c:31:c1:2a:88:7f:
8e:cb:5a:1a:55:56:e6:fd:06:d9:cd:3d:6a:5b:48:
3d:49:55:cb:b9:2f:7b:8c:6d:f1:3a:a7:7c:36:fb:
39:5f:73:d6:19:4f:4b:83:d0:bc:0f:02:d6:82:ea:
b9:73:e7:d4:68:97:cf:ea:fe:ab:1d:35:33:de:25:
ed:ed:4a:80:c9:ef:e7:62:32:14:34:e4:78:ef:13:
75:e9:41:57:9d:11:69:a2:a0:2b:3c:82:ab:22:2a:
19:ef:28:0b:d5:66:84:0d:47:21:28:e3:04:a0:1f:
a3:17:23:90:35:b8:92:88:ae:a7:22:22:cd:81:9d:
8a:ae:22:8c:2c:76:45:c7:c3:8d:b4:76:8e:79:0c:
58:0e:70:8a:7c:0f:9f:b3:f9:41:bc:dd:e0:c6:1b:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:C4:C4:08:55:55:E7:AA:9E:E2:CB:7C:4D:52:A5:93:D0:D1:2F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213327.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1272::/48
Signature Algorithm: sha256WithRSAEncryption
43:d8:3e:4a:4c:68:0c:c2:2e:2d:43:c6:23:48:57:11:6c:a1:
29:87:c8:1c:29:07:07:b0:2f:a1:ee:46:19:0a:52:f3:20:bd:
8a:dd:74:9a:81:d0:b7:21:46:2e:f8:15:03:46:7f:44:50:ec:
ab:6c:79:99:12:07:67:e6:47:14:15:c0:a9:f3:c9:d4:86:36:
8a:af:10:88:a7:aa:a1:75:6b:c0:f6:f7:de:d2:2a:0d:ac:57:
96:95:2b:c9:6a:3d:2f:07:06:d1:5a:2e:52:70:8f:f1:51:f4:
8b:2a:52:5b:37:0b:41:b6:81:6b:f8:f3:c8:66:18:5b:f9:4f:
d7:d7:62:fa:e3:dd:f8:d7:c0:d0:13:45:3d:26:a2:88:8d:af:
d7:77:3d:7d:55:d4:27:af:0f:5a:ad:1c:c2:4c:a1:3c:a9:b5:
6b:d4:b5:87:87:a7:0b:bf:19:c8:77:fd:86:52:d8:3c:05:07:
69:a3:2e:50:b1:14:c4:d1:cc:7e:54:b9:06:60:85:88:39:83:
9e:5a:db:31:24:8d:78:c7:22:d4:89:a8:34:dc:9e:8b:a5:ae:
9d:81:e5:34:c1:0f:13:d0:32:64:13:8f:c1:01:e0:9b:f9:39:
84:25:a2:f6:a4:5c:b8:37:2b:b1:81:db:24:de:c8:a9:ce:ec:
07:9b:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:58 2025 by rpki-client