Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38041.roa
File: AS38041.roa (raw, json)
Hash identifier: LXaqV0/F2HZ5WG6JYpBbLOfQMdq3ebpac8TaX2OcK5A=
Subject key identifier: 68:DA:AC:9A:49:28:E8:CF:F3:CD:51:B3:E7:22:36:2B:D2:C5:85:64
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3FBA3215AC78F5AD4B497E6BEB899D8ED4CA6123
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38041.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 38041
IP address blocks: 2a06:a005:127c::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ba:32:15:ac:78:f5:ad:4b:49:7e:6b:eb:89:9d:8e:d4:ca:61:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=68DAAC9A4928E8CFF3CD51B3E722362BD2C58564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:cf:cc:ef:aa:0b:34:1a:80:75:36:fe:f9:
c3:18:9b:67:0f:77:a7:47:3a:ab:3c:fb:f6:9f:6d:
9a:7b:20:c3:c4:9f:68:f2:22:68:ef:30:24:29:07:
ff:42:bd:05:78:0c:f4:f2:c3:d5:ec:e6:ad:3d:0d:
9e:29:ab:91:81:e4:db:01:7a:90:68:32:b8:b5:08:
6e:f8:df:4f:9c:96:69:f5:b3:bd:85:5d:f6:f3:5d:
49:ba:bf:be:04:b9:e2:c1:c9:61:7a:78:d7:f5:01:
1b:66:69:ae:a8:45:88:91:c7:56:7d:e3:c9:b6:65:
7b:55:8c:1d:1b:54:c6:a1:ac:fc:dd:bd:62:c9:15:
a4:a4:7a:78:76:bd:04:31:a2:b8:5f:a9:d1:97:f1:
de:3b:6a:af:4f:6c:73:a2:12:f5:1e:a7:d1:ae:ca:
cf:49:d8:66:ae:57:0a:3a:88:5d:67:17:1a:54:df:
c1:c7:b0:3c:5b:5e:e9:75:37:4f:26:13:6d:63:05:
27:b0:5f:cc:b2:2a:e3:d1:cb:ee:75:28:6e:2c:ea:
73:b9:4e:fe:2b:30:c0:7e:8a:9d:ac:24:1c:e3:2d:
b3:80:8d:b4:05:8c:ae:e9:59:e8:d7:2d:ac:77:a1:
40:1c:de:aa:be:a3:fc:46:25:f2:a2:90:4c:26:28:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:AC:9A:49:28:E8:CF:F3:CD:51:B3:E7:22:36:2B:D2:C5:85:64
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:127c::/46
Signature Algorithm: sha256WithRSAEncryption
a0:30:95:0a:62:be:8f:db:a6:76:aa:77:a7:c9:d8:18:de:0d:
9f:6a:5a:53:78:24:ea:0d:6b:f8:cb:86:cd:5b:a3:2f:9e:a3:
18:1a:54:af:06:b9:23:3f:43:67:07:50:18:b2:5e:09:53:65:
64:b9:40:4f:f1:c9:6f:30:39:4e:16:fe:0e:cf:38:39:8e:7d:
15:69:e0:36:90:7b:f4:ce:bb:ab:8a:4b:4c:04:f8:84:4d:76:
5d:e2:98:44:13:00:79:2f:67:12:26:fa:97:84:64:96:7b:b0:
d4:72:17:24:e1:8a:fe:07:6d:e9:a0:be:14:8b:ee:fe:d2:8e:
5a:a9:cd:01:dd:86:33:dd:dc:57:fb:5a:07:54:ee:f2:38:27:
09:be:bd:57:34:f3:6f:ff:84:cc:ea:42:6d:da:c3:e5:49:52:
68:5f:a4:51:4a:82:ba:4d:b3:d8:25:11:57:6d:27:82:79:84:
2d:d8:e5:12:48:f4:41:71:e3:f2:98:e9:e8:28:f5:d0:08:ba:
90:a2:9f:d6:72:d4:37:1c:3d:e9:b7:15:88:a4:e6:13:7a:19:
d3:7a:fa:ae:c8:79:fc:2c:da:0d:f9:19:10:f5:ba:fe:05:24:
4d:dc:59:53:b6:4d:8e:73:c5:b1:a9:7c:94:db:c8:d5:c6:5e:
0c:aa:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:25 2025 by rpki-client