Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS24676.roa
File: AS24676.roa (raw, json)
Hash identifier: Gcx270RBt7cYi1zHEtPD/AA33RgFKx+KB8KiWKcLnt4=
Subject key identifier: 7A:99:23:79:5A:C4:64:F3:E4:58:1F:53:8B:E3:D3:06:F5:B6:1A:B9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 60935CC28848D53495FC2B3E241FD1672CA49666
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS24676.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 24676
IP address blocks: 2a06:a005:19c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:93:5c:c2:88:48:d5:34:95:fc:2b:3e:24:1f:d1:67:2c:a4:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=7A9923795AC464F3E4581F538BE3D306F5B61AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:f0:13:20:cf:65:24:94:10:11:f4:30:af:
8e:1e:fa:b6:c7:65:12:c8:21:19:d8:b4:bd:6b:6f:
5f:01:ba:a8:87:34:12:d5:f8:14:c9:97:db:58:59:
d9:24:5a:c3:02:95:d0:48:81:17:c2:e5:4a:d5:72:
f3:78:39:e1:2b:d0:c7:bb:64:ad:90:68:e0:f5:1e:
a7:2f:c8:57:fc:dc:51:3a:c7:58:5c:f3:dc:87:d1:
e0:40:b6:df:b8:6c:6b:77:96:86:51:13:af:b7:c5:
87:12:36:b7:80:2a:41:4b:da:63:7a:09:3a:fc:68:
67:09:7b:e1:d6:9d:5c:83:0f:28:a6:0b:6e:c2:7f:
03:ed:a7:41:b7:82:6f:34:82:37:28:3d:09:20:c7:
42:b4:4e:28:07:44:c7:40:31:7a:03:0c:db:37:f1:
c8:f7:7a:f2:a0:f7:b9:dd:66:e5:6a:d9:ed:2b:6f:
2a:06:08:11:8b:6d:a8:4a:6f:c7:56:35:a3:5d:44:
af:af:a9:27:bc:c3:9f:f4:e1:22:77:9c:d7:7d:87:
e2:d8:64:80:d1:0f:92:bf:d4:6d:83:90:04:48:22:
82:60:61:6c:f4:d2:bf:f1:1f:10:e9:7f:64:93:86:
8e:7a:b8:2a:cf:c9:be:6a:58:79:a6:91:95:84:4c:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:99:23:79:5A:C4:64:F3:E4:58:1F:53:8B:E3:D3:06:F5:B6:1A:B9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS24676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19c0::/44
Signature Algorithm: sha256WithRSAEncryption
42:a6:4f:13:c5:43:d1:20:6c:d8:74:f0:64:da:71:2c:4b:91:
a9:ce:cf:dc:4e:73:72:1c:17:b8:9b:7e:d1:19:1f:f5:99:0f:
7b:49:27:38:22:6b:a1:57:b8:71:5c:4d:29:68:0b:07:cc:19:
98:39:51:ad:25:e7:dd:3e:18:3e:92:d1:6c:7b:53:3c:b3:d1:
5f:d8:68:bf:a1:6a:1f:ea:25:f9:21:ae:3f:bc:9b:55:d3:cc:
77:1d:a4:cd:48:42:d0:0b:3a:28:4a:72:de:74:ec:d1:c2:f1:
36:b5:3c:8b:65:65:61:92:d0:aa:34:0d:b7:aa:1e:d7:84:d2:
60:47:ae:0b:97:10:22:f0:84:20:c2:88:3f:44:8a:0a:eb:a6:
ff:d4:c6:86:3d:56:a7:ea:99:d5:cf:fd:c3:d9:ba:43:65:a9:
e2:37:72:2c:c2:d9:63:6f:55:95:5a:de:58:f6:18:35:a2:cd:
b6:45:b3:36:02:cb:2d:f0:c4:06:4b:93:db:4b:74:cb:40:a9:
da:4d:ea:ca:4a:cc:0b:40:6d:35:e7:63:b1:96:2b:fd:e2:10:
04:ab:7f:f6:74:6d:1e:4c:b2:74:c4:51:b8:90:57:19:cc:e3:
d5:e5:18:8d:75:e1:1e:55:7c:8c:4c:53:5f:1b:03:09:09:c1:
50:7a:ff:74
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUYJNcwohI1TSV/Cs+JB/RZyyklmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDlaFw0yMzEyMjAxNjU2NDlaMDMxMTAvBgNV
BAMTKDdBOTkyMzc5NUFDNDY0RjNFNDU4MUY1MzhCRTNEMzA2RjVCNjFBQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2fATIM9lJJQQEfQwr44e+rbH
ZRLIIRnYtL1rb18BuqiHNBLV+BTJl9tYWdkkWsMCldBIgRfC5UrVcvN4OeEr0Me7
ZK2QaOD1HqcvyFf83FE6x1hc89yH0eBAtt+4bGt3loZRE6+3xYcSNreAKkFL2mN6
CTr8aGcJe+HWnVyDDyimC27CfwPtp0G3gm80gjcoPQkgx0K0TigHRMdAMXoDDNs3
8cj3evKg97ndZuVq2e0rbyoGCBGLbahKb8dWNaNdRK+vqSe8w5/04SJ3nNd9h+LY
ZIDRD5K/1G2DkARIIoJgYWz00r/xHxDpf2STho56uCrPyb5qWHmmkZWETDm3AgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQUepkjeVrEZPPkWB9Ti+PTBvW2GrkwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjQ2
NzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQqBqAFGcAwDQYJKoZIhvcNAQELBQADggEBAEKmTxPFQ9Eg
bNh08GTacSxLkanOz9xOc3IcF7ibftEZH/WZD3tJJzgia6FXuHFcTSloCwfMGZg5
Ua0l590+GD6S0Wx7Uzyz0V/YaL+hah/qJfkhrj+8m1XTzHcdpM1IQtALOihKct50
7NHC8Ta1PItlZWGS0Ko0DbeqHteE0mBHrguXECLwhCDCiD9Eigrrpv/UxoY9Vqfq
mdXP/cPZukNlqeI3cizC2WNvVZVa3lj2GDWizbZFszYCyy3wxAZLk9tLdMtAqdpN
6spKzAtAbTXnY7GWK/3iEASrf/Z0bR5MsnTEUbiQVxnM49XlGI114R5VfIxMU18b
AwkJwVB6/3Q=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:46 2025 by rpki-client