Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS395332.roa
File: AS395332.roa (raw, json)
Hash identifier: pyPY3V58SVIA15heE0U6CyTMYnpc9fwYuFEsAX/6gd0=
Subject key identifier: F9:36:7B:BA:CA:02:F7:5E:9F:84:78:31:06:90:83:D0:CD:9C:D5:1B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7DC81B321DA61585F5D76174D1E8794278534BAB
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS395332.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 395332
IP address blocks: 2a06:a005:5f9::/48 maxlen: 48
2a06:a005:c80::/44 maxlen: 48
2a06:a005:12b0::/44 maxlen: 48
2a06:a005:12c0::/44 maxlen: 48
2a06:a005:12d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c8:1b:32:1d:a6:15:85:f5:d7:61:74:d1:e8:79:42:78:53:4b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=F9367BBACA02F75E9F847831069083D0CD9CD51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:6f:08:ff:03:d4:6a:8b:bd:a3:32:03:62:
c7:bf:c4:13:d6:60:9f:ea:8c:5d:cc:7b:e7:e0:cb:
04:44:8c:8f:83:99:fd:79:46:a8:f4:1a:8f:c7:c3:
34:18:4c:dc:9e:bd:51:f4:5b:0f:94:bf:e8:ae:20:
b2:a9:bf:f6:06:53:8f:64:81:e0:84:8b:c4:b5:bd:
5c:b9:2b:13:b6:87:0a:64:a6:e8:82:7c:31:c6:4b:
ea:46:6c:2f:db:74:64:a4:d4:37:a3:be:d8:00:e0:
fc:7e:2c:27:9b:03:ba:f5:2f:de:c7:dc:d7:39:0a:
a4:38:58:39:07:c0:ae:16:53:00:9a:ed:18:b3:8e:
76:e6:1a:13:ac:11:41:b2:69:85:8b:e2:50:1e:ad:
a4:b4:25:63:90:fd:8d:88:a8:af:8d:3b:cf:c9:a8:
34:15:f3:da:87:2c:a4:40:8b:bc:63:f1:f7:1a:db:
31:17:24:03:48:2c:f2:40:19:6c:2d:62:36:77:2e:
62:a9:3a:e6:1d:5c:e3:68:26:e9:d6:a9:4c:7e:fe:
6e:0b:08:47:b6:37:6e:32:bf:cf:70:85:d6:66:ec:
f0:30:db:39:73:cd:51:ec:63:70:8a:a2:e2:6f:73:
2a:52:fc:e3:59:eb:2a:e3:96:75:87:65:46:9e:db:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:7B:BA:CA:02:F7:5E:9F:84:78:31:06:90:83:D0:CD:9C:D5:1B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS395332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f9::/48
2a06:a005:c80::/44
2a06:a005:12b0::-2a06:a005:12df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:f1:9c:f4:15:54:b6:36:08:aa:6e:c7:ca:b8:93:3e:ca:c8:
b7:a2:dd:01:33:f7:ed:ab:a1:cd:f6:40:07:20:c4:79:1d:b9:
39:8e:32:80:33:cd:2c:9d:26:3f:71:3b:c8:27:0f:b3:00:3a:
6e:01:1e:2f:d7:6e:c8:a8:88:a7:2a:44:78:47:76:f0:09:9a:
21:e5:3d:27:b0:65:ed:3d:59:22:4b:59:62:9d:9d:c5:60:d8:
7f:ba:75:16:07:8e:cb:a2:b1:bb:f4:48:94:38:a7:b6:dd:9c:
aa:1f:90:7f:db:34:c0:b0:b3:2d:a1:c9:33:52:37:e7:7f:ae:
89:a6:8e:6d:23:1a:1a:07:79:93:64:07:de:41:2d:07:46:6f:
ef:cf:0e:5c:87:49:52:50:38:12:aa:cd:97:d5:cc:e9:26:b0:
55:e1:0a:ef:af:d1:c9:68:41:ae:19:a6:5a:21:20:06:75:86:
5e:ec:02:40:fb:84:9f:4c:5c:8b:3c:5e:4e:7a:06:7f:e7:37:
ae:c7:c2:a6:31:fc:1a:c6:3b:fc:67:31:6c:61:72:84:7d:0f:
1d:7a:db:a9:17:db:e5:58:d0:0c:c5:17:ce:b2:c8:fd:66:e3:
c6:1a:b8:53:16:36:d4:66:13:e2:a7:67:97:d2:7a:c6:e6:33:
3b:1b:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:00 2025 by rpki-client