Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS400536.roa
File: AS400536.roa (raw, json)
Hash identifier: 25QgOLlU7tixLCwHDMM9TZFPgyn3RBBEqJgp/jcJx1Q=
Subject key identifier: 1F:6E:44:25:B7:DB:40:7E:D8:2B:1B:48:AB:6F:73:1F:B5:B2:85:B8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7E1F77804F1B6C493C8D4415EE60073D524020DC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS400536.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 400536
IP address blocks: 2a06:a005:5f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1f:77:80:4f:1b:6c:49:3c:8d:44:15:ee:60:07:3d:52:40:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=1F6E4425B7DB407ED82B1B48AB6F731FB5B285B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:7f:1b:2e:7a:cc:c3:6e:4d:d4:a2:4e:a8:
f4:9d:8b:d4:42:0e:0b:34:73:b4:dc:cb:31:ec:b2:
0a:e8:fd:ba:3a:61:5d:1d:75:c8:2c:42:61:dc:6e:
d6:49:ca:71:55:24:71:46:23:00:38:15:7b:ed:fc:
e4:fd:57:53:64:d1:4b:a7:9d:b5:5f:e6:ed:6e:ca:
28:b6:2c:de:24:bf:f8:5d:ca:1f:7e:af:0d:4f:f8:
93:ca:cf:47:aa:1b:69:9e:8f:4a:12:72:31:f3:a7:
94:ab:68:96:e0:fd:59:65:60:20:fb:45:5c:7a:2b:
de:a6:c8:8e:57:ee:2a:94:9b:e7:f2:90:fd:c5:aa:
7b:96:cf:9f:da:2e:92:67:81:0d:06:28:e9:a3:6d:
6f:43:0a:5c:02:91:82:26:75:6b:42:ff:b0:7d:ad:
d4:30:3e:e4:bc:92:39:60:9e:c3:b6:a2:d9:3e:60:
e1:3e:b4:24:a1:73:87:9c:3f:d3:28:69:97:d9:6d:
1a:5d:80:e8:d3:9b:e5:fb:7d:fe:88:15:e7:86:32:
38:df:ae:21:62:cc:34:ce:a1:b3:6e:5c:c9:5d:8a:
80:01:5e:be:46:45:88:27:0d:b2:53:6b:05:5c:51:
4b:e5:14:b3:d2:95:60:d0:d4:ce:8d:60:94:fd:76:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6E:44:25:B7:DB:40:7E:D8:2B:1B:48:AB:6F:73:1F:B5:B2:85:B8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS400536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f7::/48
Signature Algorithm: sha256WithRSAEncryption
41:35:55:d9:98:02:3d:0f:5d:ab:d7:f1:8d:01:2c:a6:bd:86:
af:3c:2b:0c:24:99:fc:23:d2:55:d0:07:56:c8:fc:a2:76:92:
de:b4:ff:eb:4f:d5:03:26:fb:53:43:05:34:96:2b:f8:2b:33:
8c:87:87:c2:cd:c5:e3:8a:67:4b:f4:db:64:aa:44:a6:7d:26:
27:60:36:e1:5f:e2:7d:e0:0f:ed:82:c8:aa:24:1d:75:0b:ef:
9b:87:9f:f1:f2:fd:af:1d:e6:02:23:05:4c:12:ba:51:7e:c7:
ea:16:6c:0c:b6:f4:df:12:14:a4:3e:f8:a3:53:32:b2:66:d9:
98:9a:28:a5:2a:e5:65:c9:b7:d1:9d:67:02:f1:da:21:a5:f9:
1b:0d:b8:f9:c7:35:a1:1a:cb:ec:18:c1:a4:98:27:0e:a9:46:
c8:7a:4d:b5:6f:fa:19:d1:b1:2f:06:04:6b:7c:f9:c1:f7:28:
ee:8c:1f:17:fe:a4:03:7c:29:3b:4e:e3:cd:0b:f5:f7:42:85:
3b:32:99:21:f3:c1:74:76:0a:3c:19:eb:0b:fa:00:02:d7:6b:
3c:3e:f4:93:ed:02:28:82:8e:d8:1a:df:82:af:30:84:df:21:
1f:52:67:47:b5:e2:56:95:40:bf:76:ed:c4:90:ea:2e:cb:ac:
0e:a1:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:46 2025 by rpki-client