Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS394414.roa
File: AS394414.roa (raw, json)
Hash identifier: naZ+O2BoLLxu/jlXVWJ3CZdwKiJzuZt8XKYJXb2OL6Y=
Subject key identifier: 6C:7F:01:E3:0A:D3:F9:B4:85:8D:97:CA:92:08:F0:79:07:22:00:39
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 19077B09270B1B2C114865393C8E05A80CC3423E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS394414.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 394414
IP address blocks: 2a06:a005:2d8::/48 maxlen: 48
2a06:a005:ae0::/44 maxlen: 48
2a06:a005:19a0::/44 maxlen: 48
2a06:a005:19f0::/44 maxlen: 48
2a06:a005:1a00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:07:7b:09:27:0b:1b:2c:11:48:65:39:3c:8e:05:a8:0c:c3:42:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=6C7F01E30AD3F9B4858D97CA9208F07907220039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:73:b7:a4:e4:f4:51:c1:52:b4:f6:95:09:
bc:92:f4:f6:3c:88:b2:3d:62:46:72:39:42:cc:f4:
cc:e3:41:c9:b8:ba:eb:dc:a6:b5:01:43:d0:d5:6d:
54:c8:50:6e:de:1c:ca:fa:fe:ff:09:06:1d:f0:ff:
f9:84:ec:d0:d8:31:b8:aa:2b:66:21:6e:05:e8:6e:
52:f7:38:a3:7d:b5:bf:47:63:26:56:f5:04:c9:39:
c6:bd:c6:f1:43:d5:6a:ca:4b:c1:e6:49:20:ae:6b:
c1:47:54:13:8b:3d:04:3c:1e:44:9f:0d:12:09:12:
b7:0d:93:9b:35:e8:5c:f2:4e:81:84:02:9b:16:92:
e6:7c:20:7f:5b:95:de:b1:c6:79:f2:c6:14:be:e1:
3a:3c:c0:67:1b:5d:26:c2:c6:01:6a:c4:02:28:f4:
53:fa:91:93:e3:a3:fd:88:cb:95:c4:69:c7:b8:91:
8a:8b:2c:ca:da:4a:62:d1:50:cf:74:2b:67:47:02:
5d:c9:50:83:3f:4d:1b:fc:fa:ad:6d:11:13:aa:83:
b7:d7:fd:a7:96:22:59:6e:94:13:aa:05:2a:80:27:
2b:e8:29:10:ee:50:f5:17:d2:87:ba:0d:fa:20:52:
ea:f3:56:ae:b9:b6:0e:6f:01:e8:b6:f3:47:60:bf:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7F:01:E3:0A:D3:F9:B4:85:8D:97:CA:92:08:F0:79:07:22:00:39
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS394414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d8::/48
2a06:a005:ae0::/44
2a06:a005:19a0::/44
2a06:a005:19f0::-2a06:a005:1a0f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c6:d0:db:0e:ba:e2:05:3e:6b:59:e9:33:0a:fe:d0:73:03:f9:
fb:94:ea:79:71:88:18:c2:4c:f8:de:5a:04:5c:61:36:8b:3e:
da:71:98:58:ca:85:bd:75:b2:23:ee:4f:24:72:4f:86:ca:b8:
2a:23:10:99:bc:41:36:55:24:6c:53:46:f9:46:9b:e5:ab:69:
b3:7c:7c:dc:d7:d1:bc:8f:c2:a9:c4:d2:d0:19:ea:38:9a:0c:
29:e9:87:1e:94:1e:e6:a2:a1:57:ea:c4:01:e7:e6:55:ff:35:
8f:4f:65:86:d8:20:c0:ea:bc:83:8a:df:d5:35:70:35:b7:a4:
d6:12:bf:67:3b:ea:f7:4a:54:4e:2b:dc:f4:a5:c9:44:24:ce:
e9:ae:9c:35:fc:13:82:d4:95:e3:6e:6e:1e:bf:bd:cc:74:96:
34:8b:47:e4:f2:5e:ff:1c:6f:df:df:5a:b4:b9:f5:e4:4d:1f:
7c:01:10:39:1f:e9:33:39:f4:9b:cd:33:72:d1:01:4d:d5:30:
d4:a2:26:ed:9a:1d:88:9e:6d:da:3a:12:17:ac:78:75:e5:b2:
d1:b0:5b:ae:10:83:2c:ca:70:06:0d:67:e5:57:cd:23:89:e7:
7b:be:17:e2:dd:46:c3:d3:30:76:c5:1c:2f:62:2b:f5:cb:7e:
ed:0d:47:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:26 2025 by rpki-client