Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS267776.roa
File: AS267776.roa (raw, json)
Hash identifier: w+J+ZWPaNxC0mqy6lVmIp0cq8JPfePEo0Nn1ZLQ4H4Y=
Subject key identifier: DE:BF:A5:6E:E6:F5:EB:F5:C4:6B:83:E4:52:A5:C4:B9:2A:36:75:19
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4B436EC74F83032E47B7F3D0BE417241ED79916F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS267776.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 267776
IP address blocks: 2a06:a005:bad::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:43:6e:c7:4f:83:03:2e:47:b7:f3:d0:be:41:72:41:ed:79:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=DEBFA56EE6F5EBF5C46B83E452A5C4B92A367519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:9f:3b:e3:f9:c1:db:36:38:27:1d:fa:93:
58:25:45:bc:9f:a2:52:d4:82:bb:24:24:23:42:8c:
ae:58:f0:1e:c7:6a:54:35:0f:79:66:29:85:4b:90:
a8:89:07:79:30:31:81:e0:eb:4b:83:22:6a:38:e7:
fb:a6:68:79:dd:88:96:0c:41:1c:ba:74:88:c6:c3:
ce:17:cc:2e:3e:9e:6b:91:f6:7e:df:a5:18:ca:6e:
ec:22:10:83:7c:ba:5d:ce:fd:3f:6c:84:2a:29:84:
8b:f7:91:f8:25:3a:aa:56:e1:77:bf:d2:4d:c6:9e:
e9:73:db:76:fd:f2:98:2b:98:a3:a9:58:2a:6f:ff:
f0:bd:9c:ec:38:45:8e:82:d3:e2:c7:ff:e3:42:b9:
e6:47:7c:bc:27:a1:49:32:47:f2:99:92:75:3a:e9:
80:42:06:5c:5a:96:fc:e7:37:ef:7f:10:a3:79:19:
55:dc:83:bd:47:41:56:a7:eb:64:3a:99:ea:9b:62:
c7:eb:e5:a0:3e:fd:03:16:3a:08:5f:16:75:17:ce:
f6:0b:35:91:22:0b:b7:1a:b6:87:21:de:d8:71:e6:
99:f0:3e:d8:f8:23:22:f0:46:34:04:4d:0e:dc:a7:
88:5e:23:3f:09:8c:b2:8b:ab:c5:23:07:a0:51:ee:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:A5:6E:E6:F5:EB:F5:C4:6B:83:E4:52:A5:C4:B9:2A:36:75:19
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS267776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:bad::/48
Signature Algorithm: sha256WithRSAEncryption
b2:cd:c5:de:db:94:cf:51:36:00:98:b9:fd:2b:66:c6:93:63:
38:d2:9a:a8:ba:ab:40:2f:0e:3c:d1:3f:84:a8:60:f2:2c:df:
82:cc:98:73:ff:57:eb:5c:6b:8c:3b:16:81:3f:46:be:82:78:
89:4e:f0:02:1d:e3:38:28:4b:15:d9:65:9c:96:a7:0d:60:6b:
fc:cc:7a:d6:e0:ba:9d:89:99:01:1c:ac:85:82:e6:00:59:73:
09:e7:6a:36:6f:94:6a:6f:5b:3c:a1:4b:b3:70:81:a1:f2:74:
20:a4:e3:f5:d5:73:f1:39:ee:fc:05:e3:28:06:9e:97:85:8f:
84:f1:7d:59:15:34:cb:f1:54:79:a1:60:c9:ea:8a:34:95:42:
8f:cb:d8:1a:b0:84:c5:1a:c6:9b:44:56:77:5c:12:d5:38:f7:
a5:21:82:70:59:b9:6d:a1:1c:16:15:51:f4:4b:4d:cb:38:bd:
0c:d1:5f:ba:d8:a2:5d:f2:ee:cd:08:b6:e0:af:14:d7:22:12:
94:54:6b:ce:d7:40:5a:da:26:75:2d:e5:83:c1:27:6b:f1:ee:
9e:42:cc:40:5c:6e:a9:dd:96:e8:6b:17:b6:c0:9a:fb:a0:b9:
25:95:6a:fe:70:8b:b2:29:38:e3:fd:c5:8c:bc:6d:4c:c8:5a:
37:f9:f7:8a
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUS0Nux0+DAy5Ht/PQvkFyQe15kW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDRaFw0yMzEyMjAxNjU2NDRaMDMxMTAvBgNV
BAMTKERFQkZBNTZFRTZGNUVCRjVDNDZCODNFNDUyQTVDNEI5MkEzNjc1MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/5874/nB2zY4Jx36k1glRbyf
olLUgrskJCNCjK5Y8B7HalQ1D3lmKYVLkKiJB3kwMYHg60uDImo45/umaHndiJYM
QRy6dIjGw84XzC4+nmuR9n7fpRjKbuwiEIN8ul3O/T9shCophIv3kfglOqpW4Xe/
0k3Gnulz23b98pgrmKOpWCpv//C9nOw4RY6C0+LH/+NCueZHfLwnoUkyR/KZknU6
6YBCBlxalvznN+9/EKN5GVXcg71HQVan62Q6meqbYsfr5aA+/QMWOghfFnUXzvYL
NZEiC7catoch3thx5pnwPtj4IyLwRjQETQ7cp4heIz8JjLKLq8UjB6BR7gxPAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQU3r+lbub16/XEa4PkUqXEuSo2dRkwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjY3
Nzc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQutMA0GCSqGSIb3DQEBCwUAA4IBAQCyzcXe25TP
UTYAmLn9K2bGk2M40pqouqtALw480T+EqGDyLN+CzJhz/1frXGuMOxaBP0a+gniJ
TvACHeM4KEsV2WWclqcNYGv8zHrW4LqdiZkBHKyFguYAWXMJ52o2b5Rqb1s8oUuz
cIGh8nQgpOP11XPxOe78BeMoBp6XhY+E8X1ZFTTL8VR5oWDJ6oo0lUKPy9gasITF
GsabRFZ3XBLVOPelIYJwWbltoRwWFVH0S03LOL0M0V+62KJd8u7NCLbgrxTXIhKU
VGvO10Ba2iZ1LeWDwSdr8e6eQsxAXG6p3Zboaxe2wJr7oLkllWr+cIuyKTjj/cWM
vG1MyFo3+feK
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:20 2025 by rpki-client