Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS39753.roa
File: AS39753.roa (raw, json)
Hash identifier: spGVlKnLabs0KcA+6qnxnW9TTbz0FCSqWHMBmd961xE=
Subject key identifier: 12:4F:9A:92:53:10:1D:34:DA:93:8B:46:74:1B:83:3F:71:22:36:01
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2121E9152FEA0E4ABCF4AE9C88DAF63023CD8725
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS39753.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 39753
IP address blocks: 2a06:a005:22a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:21:e9:15:2f:ea:0e:4a:bc:f4:ae:9c:88:da:f6:30:23:cd:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=124F9A9253101D34DA938B46741B833F71223601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:d0:2a:84:a6:0a:64:d5:91:23:76:25:de:
4d:42:b0:57:f2:82:ca:51:fe:4f:c5:42:9a:8e:8b:
dd:1c:bc:cb:ef:b9:67:1f:f2:2f:32:3c:01:d9:ad:
8c:4d:6c:a5:5d:25:01:27:ef:9b:2f:4e:aa:fe:7c:
3d:b9:e8:c3:23:0a:6e:a1:4e:b1:e1:a8:96:6e:72:
c1:0c:59:66:bd:4d:76:06:10:3c:f7:a0:bc:e3:1f:
cb:03:e6:e3:aa:1c:98:a6:1e:b9:20:1f:a0:4e:45:
31:a4:38:40:af:fd:3e:34:d4:f2:7a:df:21:72:3c:
a0:da:f7:78:93:40:9d:d6:56:7c:2a:d2:22:73:e5:
63:cf:bf:5d:bb:15:ee:4c:60:cd:97:70:f7:9b:31:
34:cb:aa:70:ce:6c:f6:eb:26:66:87:af:ef:d8:af:
53:59:5c:5b:39:1c:24:2d:57:60:2a:1a:fd:38:73:
7e:a8:ef:51:2e:9c:3b:2c:9d:84:dd:6b:b1:8e:27:
82:3d:3f:63:da:4b:d2:0c:0c:f0:96:6d:cf:66:c3:
29:68:11:c5:04:47:76:5a:b8:63:84:64:6a:23:3e:
6b:a0:c0:53:17:aa:b5:df:07:48:21:f0:be:55:fb:
12:a2:57:07:0e:b1:35:f1:b5:14:a4:f5:25:95:d2:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:9A:92:53:10:1D:34:DA:93:8B:46:74:1B:83:3F:71:22:36:01
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS39753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:22a0::/44
Signature Algorithm: sha256WithRSAEncryption
95:e3:73:fe:78:50:7d:bf:71:e1:38:b7:2e:cc:56:20:5c:98:
f0:dc:85:90:88:3f:6e:7f:22:ca:5d:9b:20:a2:3f:da:58:0d:
2b:ac:a1:76:bb:2c:23:35:5c:21:38:28:82:95:02:ca:1e:70:
8e:84:4b:18:b7:b5:cd:68:b1:7b:59:14:fa:a9:0a:c5:49:56:
d6:b4:c2:ea:4b:f8:bc:10:8a:52:95:14:d9:ad:b2:b6:2c:32:
47:0f:c3:1f:89:93:53:3a:6a:69:02:f1:4d:b1:ea:e5:5d:80:
71:d2:af:65:fd:f6:dd:59:77:36:25:55:a9:83:97:fd:e4:ec:
e0:fb:da:5f:2f:a2:f4:a7:e6:7a:13:d5:4f:ab:35:88:ab:aa:
92:fc:fa:fe:07:dc:19:04:30:82:31:b5:fe:2f:fd:e3:0d:47:
16:d3:a8:fe:8f:61:49:da:05:32:2a:0a:85:1a:80:c5:5d:1d:
69:01:49:2a:ef:4d:36:0c:89:61:be:d8:a5:37:36:0b:95:46:
50:05:93:71:f6:5c:f2:4a:ab:60:11:ba:6b:78:57:a3:01:73:
7e:4f:2e:99:50:1f:4e:ef:1f:35:50:d9:3e:3a:a9:9e:c8:76:
49:0f:0a:1a:74:f6:01:ca:17:e6:26:71:38:ae:6c:c4:16:e5:
73:47:01:32
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUISHpFS/qDkq89K6ciNr2MCPNhyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDdaFw0yMzEyMjAxNjU2NDdaMDMxMTAvBgNV
BAMTKDEyNEY5QTkyNTMxMDFEMzREQTkzOEI0Njc0MUI4MzNGNzEyMjM2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoNAqhKYKZNWRI3Yl3k1CsFfy
gspR/k/FQpqOi90cvMvvuWcf8i8yPAHZrYxNbKVdJQEn75svTqr+fD256MMjCm6h
TrHhqJZucsEMWWa9TXYGEDz3oLzjH8sD5uOqHJimHrkgH6BORTGkOECv/T401PJ6
3yFyPKDa93iTQJ3WVnwq0iJz5WPPv127Fe5MYM2XcPebMTTLqnDObPbrJmaHr+/Y
r1NZXFs5HCQtV2AqGv04c36o71EunDssnYTda7GOJ4I9P2PaS9IMDPCWbc9mwylo
EcUER3ZauGOEZGojPmugwFMXqrXfB0gh8L5V+xKiVwcOsTXxtRSk9SWV0lJhAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQUEk+aklMQHTTak4tGdBuDP3EiNgEwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMzk3
NTMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQqBqAFIqAwDQYJKoZIhvcNAQELBQADggEBAJXjc/54UH2/
ceE4ty7MViBcmPDchZCIP25/IspdmyCiP9pYDSusoXa7LCM1XCE4KIKVAsoecI6E
Sxi3tc1osXtZFPqpCsVJVta0wupL+LwQilKVFNmtsrYsMkcPwx+Jk1M6amkC8U2x
6uVdgHHSr2X99t1ZdzYlVamDl/3k7OD72l8vovSn5noT1U+rNYirqpL8+v4H3BkE
MIIxtf4v/eMNRxbTqP6PYUnaBTIqCoUagMVdHWkBSSrvTTYMiWG+2KU3NguVRlAF
k3H2XPJKq2ARumt4V6MBc35PLplQH07vHzVQ2T46qZ7IdkkPChp09gHKF+YmcTiu
bMQW5XNHATI=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:26 2025 by rpki-client