Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213368.roa
File: AS213368.roa (raw, json)
Hash identifier: lDbBhk6i39tTvHPe8llQJPxKPaKIz+hteicmyzFx0iY=
Subject key identifier: B4:8D:07:A1:19:95:A2:03:BA:F9:01:52:2D:30:C0:3E:72:2A:A8:EC
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 435EAFCB649D91B07CEA4DC06BD1246AE200B8F6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213368.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 213368
IP address blocks: 2a06:a005:482::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5e:af:cb:64:9d:91:b0:7c:ea:4d:c0:6b:d1:24:6a:e2:00:b8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=B48D07A11995A203BAF901522D30C03E722AA8EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:89:8c:b3:83:1d:0b:ca:7c:d7:f7:95:83:
a5:55:f4:0a:9e:ab:8b:07:8a:27:3c:b2:84:36:3b:
11:ea:09:a8:5e:ad:8e:6f:c3:c7:e8:35:1e:77:24:
30:cf:6a:24:5f:c2:28:c3:4a:2c:42:33:33:a1:f7:
26:7e:86:6b:83:33:4c:83:83:65:ef:45:21:f8:02:
50:40:af:e1:48:6a:b8:e2:3f:92:5b:ba:a1:b2:72:
bc:7a:97:a9:2c:8d:78:67:15:5b:49:b9:06:47:cb:
93:1a:3e:f2:a3:a9:ae:d3:1b:33:a9:92:90:d9:2b:
31:2d:1a:6a:ad:a6:54:04:f5:df:6d:b0:44:6e:3f:
a1:f9:a8:c7:eb:c6:c3:e6:42:a5:7a:75:7c:c4:0e:
56:3f:ff:e0:f6:64:d5:7f:de:a7:18:ff:1b:9f:6d:
fb:ba:e5:a1:80:f4:90:c4:d2:57:69:05:13:38:85:
25:02:02:de:0c:5c:2d:22:9b:52:f7:83:dc:52:7a:
06:21:0a:85:b5:ff:2a:a5:a5:a1:71:1b:bf:d6:35:
7e:3a:aa:b6:8f:62:80:8d:d3:e3:f8:51:35:cc:05:
0c:ae:e5:b2:e2:dd:04:41:7b:42:01:d2:52:94:37:
b9:a9:c4:5d:71:3b:1d:31:85:62:42:cd:37:df:72:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:07:A1:19:95:A2:03:BA:F9:01:52:2D:30:C0:3E:72:2A:A8:EC
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:482::/48
Signature Algorithm: sha256WithRSAEncryption
48:1c:2a:a8:86:1b:44:94:6a:76:47:82:d2:f7:86:ae:a8:0d:
b5:00:93:dc:9d:50:55:b7:7d:ba:85:3d:5d:db:58:ed:25:e1:
bc:3f:18:ca:a0:18:36:81:8f:bd:c1:a9:c7:ce:9f:66:6a:fe:
0f:4d:d6:23:04:18:83:b2:dd:e2:fe:19:2d:a5:2a:ab:b6:dd:
12:58:d6:77:7f:d5:85:28:68:5f:c8:e5:ae:da:b3:d9:a9:a5:
3d:88:0e:35:65:6e:60:ab:f1:e4:b0:4c:59:97:40:63:82:4d:
49:37:98:2d:26:d6:8b:c2:7c:b5:04:28:17:73:75:ec:aa:30:
2f:48:d3:24:98:29:ce:77:2b:ac:4a:6a:6c:7d:77:76:9e:43:
0e:b1:da:90:33:57:f3:db:a2:11:b4:ef:17:89:28:e0:70:4f:
f9:fd:a1:fd:67:8d:61:09:f6:5c:5a:2c:0f:6d:57:3d:bc:52:
69:ea:0a:50:17:dc:57:23:47:8e:c4:62:04:d5:26:da:1d:55:
6a:ed:ba:e3:f1:49:cc:71:9e:64:95:ef:f4:13:08:b1:f3:4f:
16:17:d8:c6:64:b4:16:77:10:ad:58:27:68:3b:37:7a:a0:78:
28:b0:e5:3c:a5:a9:67:09:24:ec:12:40:69:fb:ae:e3:b4:16:
67:47:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:23 2025 by rpki-client