Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS398325.roa
File: AS398325.roa (raw, json)
Hash identifier: /fMI6CHbC0LSdO2X/qxqD4Vh38tTBxeqsSkxXGQUnpg=
Subject key identifier: E1:28:10:2F:E2:17:DC:E9:F7:C8:FE:7C:C5:7B:BB:A3:A6:1E:78:C6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 07D69733189EA9E7F6C81F1848CEB6093355D72C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS398325.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 398325
IP address blocks: 2a06:a005:5ba::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d6:97:33:18:9e:a9:e7:f6:c8:1f:18:48:ce:b6:09:33:55:d7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=E128102FE217DCE9F7C8FE7CC57BBBA3A61E78C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:4b:ef:92:ba:01:21:f3:ee:98:32:54:cb:
f8:c8:ab:20:06:5d:10:86:16:a4:15:14:64:84:23:
d5:1f:da:ca:c4:7f:08:98:27:fa:89:9c:06:63:ed:
0b:6d:8c:17:51:2f:79:da:41:e9:76:d8:07:1b:37:
d2:24:59:ee:3b:3c:44:f5:cd:5b:8f:f5:cf:81:ad:
4d:e0:98:11:fa:34:df:4a:fc:7e:7c:b2:90:43:1b:
23:72:07:3e:11:87:c1:a5:b1:7d:66:15:e2:21:eb:
ab:05:12:75:43:2d:27:b7:35:03:11:12:ae:17:61:
77:7f:54:30:0e:78:8d:3f:22:c7:81:1b:b8:86:c5:
c3:eb:24:6d:c7:44:67:70:85:fd:ac:5c:27:91:72:
26:69:1b:55:0c:55:f8:14:a0:25:ac:b6:fd:fe:c4:
1b:6a:6d:48:e9:9e:b8:83:44:fc:81:e4:c1:3e:61:
6f:ca:b5:24:ff:9e:45:73:48:a8:24:be:2d:24:5c:
6d:4d:5f:e2:f1:97:99:2c:c9:5f:5f:b1:42:31:43:
33:34:4e:33:a6:28:5b:4c:d6:1a:eb:f1:9f:ec:a0:
dc:1c:90:04:f2:58:5d:92:31:00:66:b6:bb:2e:d6:
d3:6c:a0:15:8e:51:a9:51:bd:c2:6c:bc:23:e2:28:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:10:2F:E2:17:DC:E9:F7:C8:FE:7C:C5:7B:BB:A3:A6:1E:78:C6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS398325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ba::/48
Signature Algorithm: sha256WithRSAEncryption
25:92:eb:bb:4f:42:76:d2:e3:eb:a7:df:6a:b4:51:53:58:df:
12:42:9d:2c:da:a2:22:33:5e:0f:9c:b6:d8:61:f1:1d:a2:a9:
08:7b:82:e1:ca:20:27:a2:a5:3a:fc:64:5c:3b:ca:36:ff:a2:
5d:5b:43:2e:4c:bd:ef:1d:d9:12:d9:96:9c:5c:dd:e0:31:9c:
81:6d:10:b4:c7:64:cb:cd:e0:09:ad:aa:9a:62:52:5d:5b:58:
78:80:d3:61:1d:ba:de:d4:8d:93:e3:70:9b:26:8a:a0:bd:a4:
a5:8f:1e:25:25:b2:8b:6e:89:25:f1:61:c7:75:3d:f5:12:7f:
39:56:a0:73:b7:23:96:ee:d4:79:98:47:aa:be:6f:53:0f:9a:
1e:ca:8f:47:ea:3e:10:fe:e2:7d:d7:21:d5:f8:34:3d:fa:59:
9a:30:42:f7:10:a3:fc:20:bd:55:22:d8:8b:80:54:7d:5d:55:
94:a3:64:f3:d7:a1:63:b9:25:12:99:7a:62:4d:56:05:09:e3:
38:6a:cd:35:7f:b5:81:52:43:b2:66:7e:66:b5:50:d5:37:fd:
30:aa:1d:80:7f:bc:cc:3e:4e:96:3d:2b:11:68:48:db:6e:0f:
a2:55:30:33:21:f2:5f:c9:f5:fa:f4:61:ca:35:28:ec:a1:18:
63:a3:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:53 2025 by rpki-client