Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS44001.roa
File: AS44001.roa (raw, json)
Hash identifier: Na2WaFr/1Bnn8E9pWsDzTJ1VVhCbeLOt81PKdCtFhgY=
Subject key identifier: BC:88:11:A2:EA:D1:F8:D4:96:0F:69:BC:D1:6A:F9:60:14:47:AD:5C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3E1123F07C2185F3C3A844C15C28C3B6D89F4B85
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS44001.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 44001
IP address blocks: 2a06:a005:13a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:11:23:f0:7c:21:85:f3:c3:a8:44:c1:5c:28:c3:b6:d8:9f:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=BC8811A2EAD1F8D4960F69BCD16AF9601447AD5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:cc:5c:a0:5a:b3:2a:b1:a9:64:63:d7:35:
49:c0:d6:12:ac:b0:e9:b1:6b:d6:a4:c0:2a:1b:69:
a3:a9:ae:d9:dc:55:5a:a3:e8:a0:fe:9b:88:75:53:
82:f4:79:d6:fb:7b:1e:bb:30:3c:63:9e:48:bd:dc:
28:45:6d:45:1b:5b:db:0c:31:ef:44:34:c1:f5:ed:
f3:49:6b:37:26:83:de:33:7b:8d:3b:93:93:9b:f5:
8c:3d:53:11:b6:ed:52:0d:d6:e4:bb:b8:b6:94:29:
85:e7:bf:67:17:20:eb:76:dc:5b:a5:d2:2c:4a:e2:
b9:4a:37:65:cb:57:e4:5c:02:0a:fd:e5:e7:ff:44:
fa:1f:04:1f:80:67:56:bb:31:83:7a:ca:63:98:c4:
49:ab:47:96:5d:02:77:b8:35:fb:ec:80:87:2e:31:
2f:65:75:dd:85:13:55:48:93:2d:a1:ab:1c:89:c1:
c7:c4:e0:c4:cc:91:f6:cb:73:48:58:29:16:f1:e2:
6d:c7:e6:86:f6:1b:77:df:76:d0:93:a1:7c:e0:ff:
0b:cc:fa:b6:0c:d5:e7:4d:34:70:3d:65:34:7b:24:
54:cf:f0:9d:dc:d7:ad:3e:61:c7:ef:3a:c5:fa:b6:
0e:cc:6c:ab:c4:8f:09:2b:18:ff:02:ff:de:5f:0c:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:11:A2:EA:D1:F8:D4:96:0F:69:BC:D1:6A:F9:60:14:47:AD:5C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS44001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13a0::/44
Signature Algorithm: sha256WithRSAEncryption
78:cc:91:b7:28:e6:98:55:ae:1e:39:cd:27:fc:1a:34:55:5e:
f5:6e:90:d8:31:a0:3e:18:e4:be:e9:9e:fa:ae:e0:bd:51:8c:
aa:fd:82:46:ac:40:f2:7f:19:63:c8:a8:53:bc:65:41:2c:11:
49:8f:45:5c:90:c6:0b:b2:d3:92:ac:18:17:47:48:6b:f3:b0:
a0:7d:76:f2:bf:51:45:5a:e3:84:2a:88:0f:bc:f7:a2:cc:5b:
a3:2e:86:94:e1:85:0e:37:e8:b9:14:b2:1e:e6:a5:dd:bb:6e:
8c:89:47:22:87:c0:93:10:32:9d:50:aa:34:78:38:40:40:e3:
03:7f:24:49:05:61:33:89:ed:f1:ed:9a:01:d3:24:60:66:25:
bb:f7:a8:f1:55:31:08:f2:f3:0c:40:9d:d2:63:d9:87:04:49:
f2:b7:1f:b1:19:71:50:f3:47:13:7a:e0:03:c5:6d:f4:08:21:
96:74:55:84:98:7d:02:ca:28:11:f2:74:4d:83:cf:4c:87:e9:
87:5e:91:d6:f6:2a:97:b8:ba:6f:8b:96:1e:38:a6:65:fa:87:
c4:6e:10:84:4c:27:6e:c8:c4:fc:2f:fb:8e:09:01:c4:c6:8a:
2b:f5:33:9b:d1:65:3f:7e:ae:69:01:9a:ee:19:cf:3c:20:d2:
8f:e3:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:54 2025 by rpki-client