Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38254.roa
File: AS38254.roa (raw, json)
Hash identifier: 7AeKBavmI13xM/VO0ziVZRR56sN2q0Di9ok5TFBtP5U=
Subject key identifier: 8B:CB:05:C4:87:F9:31:92:49:3B:62:B1:53:93:0F:DB:AF:E5:E5:34
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 056BFC1FFCC9F8E8D22131EF50EFA08475A605CC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38254.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 38254
IP address blocks: 2a06:a005:160::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:6b:fc:1f:fc:c9:f8:e8:d2:21:31:ef:50:ef:a0:84:75:a6:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=8BCB05C487F93192493B62B153930FDBAFE5E534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:d8:75:83:0e:d4:69:21:fe:34:73:f1:7e:
21:a7:6b:e7:b6:0c:4b:5a:a6:1e:87:00:68:75:f8:
38:c3:e5:0d:8c:06:be:7e:0f:b0:16:cf:2a:10:8e:
b7:4c:12:2e:ad:2c:08:cc:c3:53:26:b9:31:cd:92:
72:cc:85:05:8a:52:8a:57:14:81:77:dd:61:15:f6:
60:9a:a9:0b:2f:54:05:ff:c7:05:53:e7:6f:15:28:
59:de:b4:fd:3a:64:c3:fc:75:82:2e:47:f1:4a:d5:
29:6a:62:6c:e7:ca:e3:70:48:1d:11:23:d3:1d:4e:
42:4e:a3:73:79:5f:1e:33:84:26:90:ae:23:10:ed:
a8:f2:04:18:25:a6:67:b9:cd:92:9d:b9:53:df:9c:
91:de:61:7e:12:0c:da:03:ec:9f:e2:2c:22:eb:b9:
fa:1f:93:4b:10:90:8d:13:45:99:b4:07:56:02:62:
e2:5b:43:98:be:61:c7:9a:33:b0:4b:e2:1e:68:ee:
c1:e7:99:80:05:a2:81:66:9d:48:7d:3d:b0:95:f0:
a4:d9:6c:85:ab:0a:8a:cd:be:a0:d7:00:e2:03:70:
fc:a9:57:b1:c8:94:0d:51:6f:a3:59:a9:19:d2:ec:
50:4b:22:0c:0e:be:d5:f2:c6:d6:ea:2e:fb:df:67:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:05:C4:87:F9:31:92:49:3B:62:B1:53:93:0F:DB:AF:E5:E5:34
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:160::/44
Signature Algorithm: sha256WithRSAEncryption
8d:81:80:6c:79:bc:d5:e3:9f:86:3a:50:13:a3:07:af:5b:ea:
e2:0d:2b:f3:35:c5:71:9b:91:1b:b8:aa:4a:8b:0e:41:93:52:
65:41:28:0f:1e:17:d0:62:2d:78:5a:93:53:fa:22:98:66:05:
9b:d6:03:94:cf:6e:af:87:18:0f:33:41:cc:25:a1:cb:67:1d:
d7:c9:95:74:e9:8e:c4:1f:e0:ad:fd:a7:98:19:0c:0f:02:54:
8b:0a:ee:fc:c7:ed:ac:79:a6:3f:1d:0d:cf:18:56:9d:e7:2a:
9f:d3:25:27:92:f5:dc:b0:b0:98:80:db:c9:4f:6c:84:aa:0c:
00:15:19:7f:58:57:9f:55:97:fe:ec:40:f4:05:d8:7a:3a:20:
99:b5:2c:f4:14:4a:38:e7:d3:dd:71:9e:83:7a:77:08:6c:56:
fc:b2:f1:dc:30:66:e9:fa:5f:be:32:4b:ec:ce:c0:f3:6b:c2:
9e:af:0b:44:19:63:b3:76:82:4b:91:fb:b8:f9:06:3a:31:85:
1d:d1:16:be:72:e5:8d:e9:01:a5:b2:d9:85:f3:ce:8f:b7:e2:
d4:9c:47:9a:62:3f:54:82:28:6a:94:77:3f:74:fb:ca:b1:a4:
e1:b1:9f:8d:92:8c:60:62:4a:d9:2d:7d:f0:6f:95:a1:76:81:
d7:91:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:33 2025 by rpki-client