Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS27040.roa
File: AS27040.roa (raw, json)
Hash identifier: JYLe/h72XF4TmbXCV7KNl5XurF8xBK01wcFjsBcWKS4=
Subject key identifier: CC:EF:5F:1A:F9:5B:A0:A4:9E:B2:CE:98:68:FA:19:38:FB:64:EB:09
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3CECB0FBAF34591358096590E9F7DE624413454B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS27040.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 27040
IP address blocks: 2a06:a005:1c7a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ec:b0:fb:af:34:59:13:58:09:65:90:e9:f7:de:62:44:13:45:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=CCEF5F1AF95BA0A49EB2CE9868FA1938FB64EB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:b3:07:97:0d:68:e5:bc:f6:c7:36:7b:7a:
3b:e6:dd:21:0d:17:64:9f:3f:c8:d9:b8:67:cb:2b:
e1:9d:01:e7:9d:c5:e3:60:4c:13:53:b4:c1:5a:74:
6f:1a:a4:57:6d:b3:e5:92:67:42:e9:51:7c:84:7f:
35:bb:8b:72:2f:02:4f:50:a9:98:f7:27:1b:4f:49:
35:1e:9d:36:c8:d9:67:24:78:28:9b:39:73:08:3c:
bd:48:a6:81:bd:a2:f0:17:39:99:52:1f:53:75:c1:
c2:55:98:86:8d:b0:e4:f2:f7:15:91:ea:22:98:91:
16:59:97:41:ce:5a:14:fa:8f:c4:a7:f1:4d:2c:b1:
7f:08:f8:8f:b3:da:77:ff:25:a4:2e:22:77:ea:dd:
7e:bc:46:3c:80:b4:71:b3:fc:07:7a:2e:08:d6:77:
56:4f:84:f8:55:cf:92:1f:6a:33:de:87:20:14:ce:
5a:e1:be:af:a8:aa:d9:37:c5:48:dc:ff:42:a9:9d:
14:62:ff:41:9f:2b:61:40:7b:fb:2d:d5:c6:d5:97:
49:4f:dc:8f:6a:e9:b0:fc:89:8c:90:bb:cf:b3:93:
29:0d:68:28:df:f4:c0:04:95:ed:2a:c7:37:ee:25:
c8:da:56:8d:49:f2:8d:f4:12:d7:8b:5b:ef:f8:be:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:5F:1A:F9:5B:A0:A4:9E:B2:CE:98:68:FA:19:38:FB:64:EB:09
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS27040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7a::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d3:aa:a9:93:f9:d4:c8:2a:24:84:99:ea:a4:28:83:d2:af:
53:39:7f:8f:12:5c:e6:ea:da:cf:ce:72:c2:13:d4:de:ed:08:
ad:92:42:0f:9f:a3:92:0e:47:10:31:86:01:23:2c:f7:25:7f:
92:34:59:13:0c:67:fe:bb:82:ca:99:8b:b9:c4:48:a9:2c:30:
35:a6:09:48:54:17:e4:74:d6:f1:bf:87:e4:0b:b8:16:61:51:
e3:58:f3:d0:7f:db:44:e4:07:cf:3a:8d:01:bb:6d:19:c1:b1:
7a:de:e0:06:30:e3:55:ae:94:76:a8:1a:56:8c:29:b3:f9:6b:
d8:0c:67:fc:b3:22:76:32:28:10:2d:91:dd:29:76:9b:c0:e9:
6d:c2:df:7a:5a:fb:39:47:ba:3f:d6:52:77:20:87:b8:3c:ac:
0b:64:43:e7:6c:aa:a5:6e:8e:cd:57:66:55:ba:db:fb:b1:2a:
11:22:94:c8:b9:55:be:2d:29:94:01:f4:6b:6f:b2:4a:8e:1d:
19:ec:4c:35:d7:c1:26:55:09:74:23:12:16:c0:6c:39:10:53:
77:ee:88:d9:c4:b4:17:0b:2c:34:a5:7f:92:eb:49:5a:97:19:
d7:e8:54:20:04:16:7c:d3:ff:e0:8b:89:a3:ac:15:33:e8:9d:
bf:d5:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:17 2025 by rpki-client