Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS23428.roa
File: AS23428.roa (raw, json)
Hash identifier: Ujx7zDxHt/AQCLzaAbiPVdYj5yayc7yE145aH2c806o=
Subject key identifier: EE:35:66:4C:8E:0E:48:B0:85:49:57:E5:3B:DC:CE:23:5D:60:58:AE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 75A3B8A1A37ECC9FA88D248C22259E5BC4CA1257
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS23428.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 23428
IP address blocks: 2a06:a005:a17::/48 maxlen: 48
2a06:a005:d20::/48 maxlen: 48
2a06:a005:1180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a3:b8:a1:a3:7e:cc:9f:a8:8d:24:8c:22:25:9e:5b:c4:ca:12:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=EE35664C8E0E48B0854957E53BDCCE235D6058AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:5c:3f:be:c1:9c:8b:a9:68:52:45:88:4e:
c9:36:82:82:5a:83:2d:62:12:d1:2f:6f:f7:ca:b6:
6b:b9:3c:05:51:31:13:63:5b:3a:f7:09:08:31:b5:
9a:b8:6e:00:20:66:e3:dc:4a:86:94:19:ee:8a:f2:
04:be:1a:58:b5:9f:5e:24:8e:e1:76:a5:17:99:7a:
fb:37:70:a7:13:e6:d2:05:aa:c3:28:f1:b8:d2:6b:
8d:98:e3:7c:88:3d:61:d2:1d:32:1c:c7:9d:4a:06:
93:67:ac:be:49:77:3c:ca:01:ba:c7:ab:62:4d:f6:
d9:95:c3:cc:83:79:a0:98:0d:4b:09:e1:d0:14:e3:
2d:52:16:97:15:f6:08:63:95:a3:9f:07:c5:08:3b:
2c:de:12:e1:a3:d7:cc:9b:05:7c:49:1f:aa:1d:b8:
62:bb:d2:bc:28:6c:d2:15:b8:a3:0e:31:d1:79:5b:
a3:29:8c:74:1d:87:8d:82:21:7a:37:b9:e8:10:43:
79:59:cf:d4:b9:1c:a1:6a:ed:f9:d6:9f:24:38:8c:
34:89:28:4d:2b:11:ea:d6:44:5a:72:4d:6e:e3:65:
e0:94:01:29:be:5f:dd:ba:58:de:57:2b:ae:ab:e4:
7b:3a:b1:23:c9:99:45:77:4e:58:6a:6d:ef:e7:4b:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:66:4C:8E:0E:48:B0:85:49:57:E5:3B:DC:CE:23:5D:60:58:AE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS23428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a17::/48
2a06:a005:d20::/48
2a06:a005:1180::/44
Signature Algorithm: sha256WithRSAEncryption
2e:da:da:c2:e8:33:41:a1:1c:7c:98:64:9e:12:89:45:17:fa:
c6:bb:79:af:3e:3e:1e:c7:91:78:24:41:29:a5:64:72:ba:ba:
30:7b:b0:2d:f6:4e:2d:42:ad:39:e5:c1:c7:c8:74:ba:73:53:
11:51:a6:3e:27:c4:f5:c8:79:e6:3e:3d:31:56:49:e7:35:55:
d8:c7:f3:4c:59:37:02:81:84:42:63:e0:0c:04:ed:09:1f:20:
1a:1f:38:c0:ac:0e:45:73:01:e1:0c:ac:00:f1:18:23:54:81:
a4:97:57:b7:86:3f:5f:67:bb:4f:07:de:70:22:b1:7e:69:f1:
c7:11:83:cb:8b:f1:a4:64:08:f6:fc:21:f0:e7:71:00:90:8c:
1a:3f:69:d8:43:ce:25:c0:20:59:52:b5:a3:29:db:9a:48:10:
f4:53:f4:4d:98:a7:98:b2:ce:5b:89:98:b1:79:11:db:37:c1:
19:4e:12:f7:1e:d5:98:65:38:3a:10:ed:d1:85:c7:4f:3f:13:
47:55:bc:11:7c:ae:11:2c:51:22:a1:38:ae:da:09:51:84:03:
00:e4:c3:f9:61:1e:84:9e:4e:8f:d0:d5:75:6d:30:92:b9:a4:
3b:c4:91:ad:2e:92:54:d3:ec:11:23:a6:6a:e3:1a:ad:31:c4:
33:3c:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:03 2025 by rpki-client