Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399840.roa
File: AS399840.roa (raw, json)
Hash identifier: lvBKSeUR75jrM9emlAPojfFOh+uFkCUq5yaYbjRVT7s=
Subject key identifier: 86:E3:87:BC:0E:A8:DA:A0:4E:A5:EF:5A:25:05:8E:CF:6C:4A:4B:E5
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 462B9BF5523219B752ABC6E0338A56E17EC03D71
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399840.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 399840
IP address blocks: 2a06:a005:14e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2b:9b:f5:52:32:19:b7:52:ab:c6:e0:33:8a:56:e1:7e:c0:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=86E387BC0EA8DAA04EA5EF5A25058ECF6C4A4BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:d0:7a:c8:6c:79:51:63:fc:cb:f2:3e:44:
4e:27:08:f1:07:25:4d:bf:7b:f5:19:ca:9a:f7:e8:
3a:f1:6e:c1:1e:f6:57:fd:82:52:43:ff:63:37:53:
41:60:13:1d:ee:86:e7:1c:f2:97:e5:7e:23:b0:54:
a9:74:89:08:7b:38:a8:d2:bf:94:74:82:c1:91:22:
f8:76:af:d2:c3:35:a5:59:30:81:c2:fd:81:c0:e1:
ec:ec:b8:f2:b3:ab:93:f3:37:07:7c:c3:a0:3b:b8:
05:57:c5:54:08:93:9f:72:f7:88:e9:56:68:fb:36:
63:93:b4:84:89:3c:fd:fa:14:90:6c:39:30:b6:fa:
f6:0b:39:a3:9d:ec:74:7b:99:8f:48:76:65:ca:d9:
ad:75:11:67:19:d1:83:d0:ec:58:b7:92:de:a9:12:
ee:41:60:a9:40:13:2e:9a:c5:16:1d:4f:26:af:04:
45:30:61:09:c4:69:b3:2c:72:9c:68:26:6d:c4:1a:
4d:63:96:1a:a3:2a:5d:97:25:fe:91:cd:ed:c4:19:
59:a9:9e:c1:fa:1e:a8:84:82:1f:8d:a7:7e:ed:1a:
ad:cc:48:de:25:3a:a7:0c:c7:c2:ef:64:9f:e2:a1:
17:0f:d1:81:de:df:aa:5e:fe:0f:df:e7:b7:cc:85:
57:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:87:BC:0E:A8:DA:A0:4E:A5:EF:5A:25:05:8E:CF:6C:4A:4B:E5
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14e0::/44
Signature Algorithm: sha256WithRSAEncryption
cd:47:bf:d2:e5:6e:4b:91:73:78:32:7b:00:18:bd:18:d8:88:
92:f9:83:a4:cd:12:1c:79:25:38:ec:dd:8a:73:8c:cf:d3:76:
ea:77:f6:75:a5:75:29:a5:52:04:87:9d:61:d7:cf:d8:6e:47:
5d:68:f5:87:e7:f3:5b:6e:3a:9f:73:c0:0d:4e:12:8a:fa:b5:
76:43:6a:cd:e2:76:2b:b5:2e:a1:08:d0:60:4f:71:4d:78:e9:
cb:0e:5b:cc:00:d0:4a:79:19:9d:c1:14:a1:18:d5:c4:a5:fe:
6f:86:93:35:e7:67:5b:03:75:f5:ff:9a:57:ef:a5:df:08:eb:
e1:e4:03:11:03:f5:d9:98:6f:c8:b6:5e:d2:cc:a6:48:87:f9:
be:8b:4b:9c:62:82:f9:a1:af:15:d5:a7:4b:fa:d0:77:ca:75:
6e:0c:88:8b:7d:e8:f2:8e:08:bc:c8:c0:b1:81:55:38:a6:b8:
67:de:5a:a7:3e:18:70:d4:b4:71:7e:1c:f5:b0:0d:cc:af:b6:
4b:2c:05:2c:fb:42:5c:e6:8c:56:cc:49:4d:ce:26:8d:2b:df:
9d:18:35:42:ce:06:42:d1:ff:44:db:45:d3:a7:01:fb:0e:53:
da:87:e4:55:63:af:6d:47:29:1c:fd:4f:c8:bd:cc:22:73:45:
0e:db:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:29 2025 by rpki-client