Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS24322.roa
File: AS24322.roa (raw, json)
Hash identifier: AWLnya+XHLxJKXFfwKT8RsqhK6IkCXCXu8eLkzaOgqQ=
Subject key identifier: E4:B4:54:A7:2F:5F:5A:8B:D8:34:7A:A2:5A:E8:CE:ED:D0:C5:0F:7C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4367AF9D50C63E00130926B503E9928CBEE622CB
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS24322.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 24322
IP address blocks: 2a06:a005:430::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:67:af:9d:50:c6:3e:00:13:09:26:b5:03:e9:92:8c:be:e6:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=E4B454A72F5F5A8BD8347AA25AE8CEEDD0C50F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:21:3d:eb:34:98:1e:55:ce:5a:e9:65:7e:3b:
ec:11:14:c7:10:28:93:45:db:4f:fa:21:44:08:df:
2b:5d:5f:fb:54:e9:bc:c0:c0:82:2e:e0:d1:b5:2c:
44:b1:2b:62:cb:fb:e2:3a:d2:1d:83:55:2e:d4:fa:
9e:34:fd:7d:71:36:16:dc:58:b7:75:4e:b9:01:fd:
7a:f7:b4:2d:e5:b6:c6:b5:5f:14:bf:40:c8:61:aa:
c9:18:7b:1c:c4:a2:59:20:ef:0d:2b:e8:ca:82:57:
86:fc:43:73:9a:bd:7c:50:a6:af:fa:9e:7a:30:12:
41:de:0d:2a:24:eb:46:72:2f:3c:c1:95:9c:e3:9d:
19:d6:9e:1c:14:24:27:32:ad:1e:a9:7b:72:80:b8:
80:85:49:a3:c1:d1:dc:22:da:69:05:71:cb:a6:71:
01:87:62:90:6b:e5:f8:21:e5:24:fb:f5:80:96:a5:
94:97:c0:ec:65:ff:b1:e8:46:0a:60:0c:d1:e2:67:
80:6e:ed:01:11:57:fc:0a:47:8b:11:62:49:1d:a3:
47:61:dc:4b:29:6b:e7:04:45:45:4b:69:f7:66:23:
6a:de:ed:be:61:f8:82:77:96:97:8e:f5:d9:93:a2:
22:55:40:9c:db:39:5d:9c:18:d6:8d:65:7d:80:62:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B4:54:A7:2F:5F:5A:8B:D8:34:7A:A2:5A:E8:CE:ED:D0:C5:0F:7C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS24322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:430::/48
Signature Algorithm: sha256WithRSAEncryption
bb:96:a1:b8:04:b1:dc:a4:28:f8:7f:7b:e5:84:78:bd:96:bb:
be:72:11:95:23:41:40:ed:46:6f:e9:bb:05:34:f3:20:a7:18:
5e:66:3c:65:19:8f:2c:8d:3f:33:30:98:a0:19:dd:46:83:b9:
c9:72:0c:6b:58:2a:07:08:20:4d:33:49:45:1f:55:e7:bf:73:
dd:c7:3a:42:ba:48:56:50:dc:09:08:e6:0f:ab:8b:56:70:00:
4c:2c:d8:4f:53:4b:a6:3a:95:b2:37:d1:37:a2:95:62:14:6f:
7d:4f:9e:65:ec:0a:dd:1d:39:bc:8e:a5:36:78:f2:09:63:7e:
ee:7c:42:b5:ec:46:71:a6:7f:42:3e:4d:90:c2:3e:0d:71:80:
47:67:16:99:98:b6:50:24:6e:d2:79:36:22:e4:40:6a:9c:ff:
ac:f0:e8:30:13:fc:fa:95:cf:ac:89:70:e2:ee:95:29:36:7c:
93:df:73:18:93:c7:77:89:e3:14:d1:8d:f5:78:b1:1c:4f:bf:
d0:dc:79:af:49:b5:a3:01:ba:4b:7e:96:19:3e:e8:37:10:fb:
15:af:85:ed:f6:b4:cd:39:75:9e:3b:12:dd:ea:38:f1:54:fb:
22:f1:f2:d4:11:0c:db:f7:84:f8:9e:cc:7b:29:ed:42:38:0e:
2a:b5:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:50 2025 by rpki-client