Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399866.roa
File: AS399866.roa (raw, json)
Hash identifier: 0P6y4TbxpLJISiMoW0sfH6c4a1tutBl+3MyRytQsZWk=
Subject key identifier: 18:5F:CA:D1:EE:10:0E:67:D9:2B:F2:5B:54:5B:E7:FC:8C:52:CE:00
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 49E954F5152A652B02AF08477CC25A2A6092D7CE
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399866.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 399866
IP address blocks: 2a06:a005:1170::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e9:54:f5:15:2a:65:2b:02:af:08:47:7c:c2:5a:2a:60:92:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=185FCAD1EE100E67D92BF25B545BE7FC8C52CE00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:7d:d4:55:b5:63:a9:34:4f:03:05:19:e2:
d0:d2:74:73:7b:d4:bf:3e:07:2f:a9:03:c7:01:65:
d4:a6:c0:d2:0d:50:61:33:ed:15:59:54:36:a5:04:
e0:cd:df:b2:47:27:d3:51:5d:52:15:e8:76:4d:be:
93:87:7e:d6:85:ec:88:d0:9d:bf:f7:69:bf:e7:d7:
37:c9:48:dc:4e:51:c5:eb:cf:5e:b3:8b:eb:18:cf:
5f:25:e7:3b:63:92:24:d5:70:24:13:86:8f:24:88:
d2:c5:79:e7:5b:ce:98:cc:ea:83:e1:f1:a1:0f:00:
43:01:be:c8:e2:66:c1:99:2e:da:76:9d:a5:f7:e8:
c1:d8:c0:51:82:0b:ca:35:7e:1a:30:fc:a1:ed:f9:
05:cf:13:98:83:ab:35:04:ba:a8:ab:27:db:0f:4c:
0c:41:dc:1c:c6:6f:d3:3b:51:1b:18:dd:60:ba:27:
d3:4b:a6:9c:a6:9c:42:21:41:8b:42:40:68:63:47:
72:45:b1:e6:ac:3c:b9:aa:4b:f9:e9:d0:f5:fb:1e:
da:b5:a9:f0:87:f3:e8:ab:24:8d:d8:b0:7e:a6:c1:
1a:01:cb:a8:bc:e4:6a:4f:ad:ae:8c:a6:19:5e:0a:
32:cc:df:c4:d8:a4:c6:9f:42:4b:c1:56:dc:c8:ab:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:CA:D1:EE:10:0E:67:D9:2B:F2:5B:54:5B:E7:FC:8C:52:CE:00
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1170::/44
Signature Algorithm: sha256WithRSAEncryption
2c:1a:3d:58:8b:3a:6c:c2:d2:c1:2b:fa:99:3a:13:22:59:b9:
81:cf:43:fb:92:42:48:e1:ec:d7:a3:ba:58:ce:b9:6b:21:9e:
4d:7a:a5:6f:9a:fa:39:15:af:97:91:ba:69:e2:bd:dd:4d:d7:
08:d3:e5:60:a8:0f:8e:a6:e0:75:d0:13:f7:b5:b6:88:06:86:
23:a2:6e:96:26:1c:84:3f:fc:5c:ae:1e:bb:22:3f:66:9f:24:
a6:e4:c2:31:20:c8:22:a1:cd:f7:9f:b7:cb:23:ad:14:de:e8:
c0:c2:e1:05:63:db:6e:1c:6d:48:b6:17:e6:e8:ee:42:cf:75:
5c:1a:58:5f:b3:90:84:a5:3f:72:1b:d8:be:1f:a3:da:5e:62:
1b:ec:ed:9d:f5:31:43:ac:bc:67:32:bf:1f:e2:2d:bf:8f:8b:
33:32:bd:da:e4:0b:92:cd:15:c3:e1:0f:9d:96:41:d9:c2:30:
8a:cd:ff:88:f1:64:96:f3:ac:81:64:76:1e:8f:30:b8:db:f1:
52:5a:2c:7a:84:80:9a:3c:31:7c:a9:34:2d:c7:8a:86:4a:bf:
96:1b:3f:34:32:ce:93:8b:d8:da:b2:5d:88:d0:ab:0b:d7:e7:
81:be:2b:20:68:0b:b7:df:d4:ac:f8:9c:51:ac:36:d4:b3:b4:
a8:73:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:05 2025 by rpki-client