Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS44406.roa
File: AS44406.roa (raw, json)
Hash identifier: LNzHUfTPG85fU8xNUO+EYutmQ80lmXu2hW2YPjq6hjw=
Subject key identifier: 6A:F7:27:90:04:C5:DC:3F:3F:53:4C:B5:16:4B:35:09:E8:58:FA:47
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 53D35C3F060470C8720CB8E2A168410868406D72
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS44406.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 44406
IP address blocks: 2a06:a005:670::/44 maxlen: 48
2a06:a005:740::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:1e70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d3:5c:3f:06:04:70:c8:72:0c:b8:e2:a1:68:41:08:68:40:6d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=6AF7279004C5DC3F3F534CB5164B3509E858FA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:c8:5c:b6:f4:04:99:32:f4:d9:e0:17:cc:
71:e0:5d:11:96:8a:1c:89:78:31:e6:70:a5:10:54:
60:8f:64:01:2c:33:76:76:7b:81:87:57:68:69:9a:
d3:fd:11:5f:f1:26:d8:28:a7:ce:34:56:0d:93:5c:
cc:0d:a3:1d:7d:de:c9:09:c5:25:25:a1:f5:c4:c3:
76:57:72:28:ea:52:6e:5a:af:41:86:e9:a1:6c:8d:
e4:2f:a0:05:2e:81:77:34:7d:9d:6d:d5:64:b7:07:
87:f0:67:87:44:f8:d4:35:8a:e5:c9:8a:c6:c7:cd:
f0:ab:b1:5b:45:03:35:18:b1:9b:c7:d5:5d:c0:09:
b3:41:51:22:74:14:54:ad:f5:3c:b5:d2:67:77:1c:
14:7c:d9:1d:7c:e4:fb:07:87:25:8b:53:7b:63:5d:
2e:83:e1:38:eb:c0:ef:c0:0d:a9:16:2d:46:f5:08:
27:10:bc:ef:4d:59:b2:3f:7a:f3:c8:91:67:46:17:
fa:3a:29:91:fd:92:9c:0d:21:2c:09:d2:9e:b9:35:
a6:fc:a1:72:64:e5:1b:eb:68:4d:84:28:7d:a7:6f:
cf:78:7f:a0:78:82:aa:1c:8d:19:50:7a:02:d1:d3:
b7:e3:c5:c4:c2:b2:eb:b7:4f:ad:c4:66:db:d9:72:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:27:90:04:C5:DC:3F:3F:53:4C:B5:16:4B:35:09:E8:58:FA:47
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS44406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:1e70::/44
Signature Algorithm: sha256WithRSAEncryption
af:2b:bc:cc:3f:7d:03:d3:42:b1:b2:ad:8b:b3:c1:83:8a:90:
4b:d9:ed:f9:33:3a:ee:4e:a1:50:65:f8:ab:0f:e7:9b:b9:2e:
bc:32:02:90:58:ee:52:50:e7:75:ee:40:6d:8c:30:97:5f:f6:
61:6c:bf:79:53:41:b2:71:29:44:89:99:b1:3c:ed:6e:52:a7:
cb:3e:27:53:a1:52:29:3e:93:04:8e:a2:ad:10:09:cd:b5:17:
0a:83:32:a9:b6:88:ed:e4:6e:c4:f3:c5:37:8d:80:a7:d9:2e:
3d:e8:f9:14:54:e3:c3:21:24:eb:39:9f:72:45:1b:52:fa:18:
d9:ba:de:dd:21:cd:4b:37:71:87:cf:06:7b:31:3b:0d:c9:b7:
c2:56:0a:ab:1a:bd:03:66:d6:b6:f9:3f:4e:58:fd:73:d4:0c:
c3:53:2a:9b:65:a4:a0:b6:54:9a:e0:3a:77:91:c8:9a:e6:5e:
ef:80:f9:f8:d6:b6:25:e9:61:c6:4c:9a:c0:b0:24:4c:8b:8b:
ab:ec:6e:f1:c6:55:d6:96:20:dc:62:0c:6e:2e:b3:ac:95:10:
c4:dd:34:b9:0b:ab:47:c4:f0:d6:d5:42:15:e9:54:00:da:a8:
63:20:2c:0b:68:84:d2:fa:d7:5b:c8:2f:71:33:dd:4f:78:d9:
a9:c9:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:46 2025 by rpki-client