Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38846.roa
File: AS38846.roa (raw, json)
Hash identifier: d8VN6b/ASJwNb5PlAMknMXH6OKZXSjr9w/YGF8zCkOk=
Subject key identifier: 56:F5:41:67:A0:DA:92:DD:E7:3B:3F:63:C4:C7:99:CE:35:0F:58:40
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7E8F7DC4A476294DBE627C73405E425DFA0A0AD5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38846.roa
Signing time: Fri 23 Dec 2022 18:30:16 +0000
ROA not before: Fri 23 Dec 2022 18:25:16 +0000
ROA not after: Fri 22 Dec 2023 18:30:16 +0000
asID: 38846
IP address blocks: 2a06:a005:1e00::/44 maxlen: 48
2a06:a005:1e10::/44 maxlen: 48
2a06:a005:21b0::/44 maxlen: 48
2a06:a005:21f0::/44 maxlen: 48
2a06:a005:2890::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8f:7d:c4:a4:76:29:4d:be:62:7c:73:40:5e:42:5d:fa:0a:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 23 18:25:16 2022 GMT
Not After : Dec 22 18:30:16 2023 GMT
Subject: CN=56F54167A0DA92DDE73B3F63C4C799CE350F5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:9e:b7:9d:15:b2:e1:d0:33:f8:b6:19:40:
3b:ca:21:39:fc:45:8c:15:a8:dc:46:4b:7f:af:fd:
30:58:1e:7e:67:38:ee:08:f8:fd:14:56:c0:4a:38:
bb:20:57:06:54:1a:fa:e9:4d:8b:c1:60:88:b9:3d:
7d:e6:09:c8:60:81:3a:a5:9d:60:72:43:c7:82:58:
81:de:03:d1:97:6c:5b:13:81:17:8f:10:d9:2a:81:
f9:e4:f3:ce:31:7a:d0:43:1f:88:35:13:30:8c:23:
f5:6e:a7:92:90:bf:cc:2b:d5:7d:47:b2:3c:1b:16:
ea:74:91:92:9d:3d:23:90:8e:dd:db:45:3c:7a:1b:
cb:2f:c2:6b:02:18:93:d2:33:cf:46:fb:31:94:77:
99:d9:cf:33:ec:8b:8f:0a:10:a2:be:d0:2c:a1:8e:
29:0c:90:0a:4e:04:ac:18:7b:e8:45:87:5b:c4:a8:
36:2e:0d:22:e3:5a:77:fc:d0:65:7e:18:31:15:5e:
2a:13:d5:88:8c:e5:4a:9a:6f:eb:d4:a3:55:35:fe:
7c:b5:64:52:ce:d0:ae:74:6e:15:21:31:5f:ab:0e:
84:c1:f5:81:6f:fa:1f:43:d0:4c:27:8e:2e:1c:e0:
b7:0e:88:4b:d2:7d:08:cd:72:96:43:e7:2e:dd:28:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:41:67:A0:DA:92:DD:E7:3B:3F:63:C4:C7:99:CE:35:0F:58:40
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS38846.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e00::/43
2a06:a005:21b0::/44
2a06:a005:21f0::/44
2a06:a005:2890::/44
Signature Algorithm: sha256WithRSAEncryption
cc:dc:28:27:a2:fc:96:29:0d:8f:19:15:b0:97:34:c5:3e:6a:
98:a1:65:e1:4f:53:42:58:59:77:34:93:2f:36:aa:e9:ed:88:
7a:f5:20:94:3c:fc:bd:7b:d2:ec:a1:a2:90:04:14:a7:f6:a4:
11:7d:c6:bd:8a:dd:0d:08:b6:da:e1:c3:4d:1b:30:cc:4a:d8:
3f:8d:f2:8f:54:b9:06:15:45:a6:4e:c0:41:30:0c:85:e9:40:
a3:97:dd:55:ec:5f:c6:28:86:59:10:82:0f:84:3c:41:a5:1b:
37:58:74:40:42:69:d9:a8:1c:13:18:66:26:ca:29:8d:85:67:
f2:a9:35:ca:31:89:7f:51:e7:b5:15:8f:10:3a:ab:0e:cc:91:
79:af:ca:38:c1:92:4f:e1:73:d7:a0:84:a2:bf:3c:12:37:bc:
12:74:7d:f2:f1:bd:c7:98:c0:38:84:e9:8c:27:34:85:91:b4:
7a:69:b1:0e:ad:77:90:85:ad:c8:d7:54:1a:0f:ea:e1:85:90:
ca:ef:db:e7:04:36:33:90:e6:2d:2e:a6:9b:eb:9b:d5:29:e7:
d8:ee:fe:5f:b5:ac:12:2a:92:fb:79:f9:a8:f9:ce:cc:56:38:
0b:14:18:d2:40:16:0d:ae:64:3b:99:fb:28:f5:8e:2c:b2:c0:
5a:55:49:75
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIUfo99xKR2KU2+YnxzQF5CXfoKCtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjMxODI1MTZaFw0yMzEyMjIxODMwMTZaMDMxMTAvBgNV
BAMTKDU2RjU0MTY3QTBEQTkyRERFNzNCM0Y2M0M0Qzc5OUNFMzUwRjU4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVWp63nRWy4dAz+LYZQDvKITn8
RYwVqNxGS3+v/TBYHn5nOO4I+P0UVsBKOLsgVwZUGvrpTYvBYIi5PX3mCchggTql
nWByQ8eCWIHeA9GXbFsTgRePENkqgfnk884xetBDH4g1EzCMI/Vup5KQv8wr1X1H
sjwbFup0kZKdPSOQjt3bRTx6G8svwmsCGJPSM89G+zGUd5nZzzPsi48KEKK+0Cyh
jikMkApOBKwYe+hFh1vEqDYuDSLjWnf80GV+GDEVXioT1YiM5Uqab+vUo1U1/ny1
ZFLO0K50bhUhMV+rDoTB9YFv+h9D0Ewnji4c4LcOiEvSfQjNcpZD5y7dKBvtAgMB
AAGjggHZMIIB1TAdBgNVHQ4EFgQUVvVBZ6Dakt3nOz9jxMeZzjUPWEAwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMzg4
NDYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgACMCQDBwUqBqAFHgADBwQqBqAFIbADBwQqBqAFIfADBwQqBqAFKJAw
DQYJKoZIhvcNAQELBQADggEBAMzcKCei/JYpDY8ZFbCXNMU+apihZeFPU0JYWXc0
ky82quntiHr1IJQ8/L170uyhopAEFKf2pBF9xr2K3Q0Ittrhw00bMMxK2D+N8o9U
uQYVRaZOwEEwDIXpQKOX3VXsX8YohlkQgg+EPEGlGzdYdEBCadmoHBMYZibKKY2F
Z/KpNcoxiX9R57UVjxA6qw7MkXmvyjjBkk/hc9eghKK/PBI3vBJ0ffLxvceYwDiE
6YwnNIWRtHppsQ6td5CFrcjXVBoP6uGFkMrv2+cENjOQ5i0uppvrm9Up59ju/l+1
rBIqkvt5+aj5zsxWOAsUGNJAFg2uZDuZ+yj1jiyywFpVSXU=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:51 2025 by rpki-client