Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS45772.roa
File: AS45772.roa (raw, json)
Hash identifier: V9hJRGrOQ5wLrzbzTD4rz97gqkdRfU4ynF2WM7kKYYk=
Subject key identifier: D7:AF:0F:87:E7:E1:D0:FB:29:2C:3F:1D:BA:6E:F4:49:6E:3B:38:EE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1DA251DF618A7A95CF8C8EFE69E65D78E71C8D82
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS45772.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 45772
IP address blocks: 2a06:a005:1ee0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a2:51:df:61:8a:7a:95:cf:8c:8e:fe:69:e6:5d:78:e7:1c:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=D7AF0F87E7E1D0FB292C3F1DBA6EF4496E3B38EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:a0:46:7e:f7:cd:b4:4a:fb:c4:bf:18:8f:
c3:44:06:37:17:cf:b1:cd:7b:bf:db:d1:e8:a8:8a:
65:8b:fa:e0:ec:9b:67:d2:32:c6:20:5a:56:e9:ce:
d9:c6:52:d9:e7:8f:5f:5d:29:20:94:36:2c:38:f9:
6c:b6:4c:f8:34:c6:43:3e:e2:b0:b2:be:68:a7:ef:
43:40:f4:ee:35:aa:39:eb:87:80:41:4b:fc:e2:3e:
cf:62:63:05:73:ac:53:b8:c2:4b:6d:37:f2:95:a8:
58:31:ec:1b:96:e5:79:31:f8:8e:9f:19:ba:e6:2c:
1c:ce:a1:b2:c1:e8:2e:a9:b1:ab:eb:4d:e3:01:14:
39:0f:21:62:15:c8:25:31:b8:6b:3c:e7:e2:e2:37:
d8:0a:71:2a:5e:32:46:58:bc:bf:4f:2c:44:6c:23:
df:6c:af:d5:d4:5a:15:d5:e6:56:ae:07:d5:7f:07:
c6:85:b2:28:79:40:d3:dd:9e:24:89:2b:2e:13:b4:
40:87:5c:27:1f:83:26:8f:47:ed:2e:8b:4b:67:75:
64:19:8b:03:a1:3a:f1:d2:6e:52:c0:3a:24:0a:75:
ca:35:45:ca:ec:2f:18:41:14:ee:f9:b1:06:82:67:
eb:38:20:5f:77:01:af:02:b8:51:9e:bc:29:e0:c7:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:0F:87:E7:E1:D0:FB:29:2C:3F:1D:BA:6E:F4:49:6E:3B:38:EE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS45772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ee0::/44
Signature Algorithm: sha256WithRSAEncryption
c5:fe:5a:b0:2b:86:be:7b:90:07:8d:40:30:a0:a6:60:5d:44:
96:18:97:e7:9d:8a:be:08:ef:7f:e5:89:07:fa:b5:77:c6:99:
81:23:f6:3f:e4:67:50:6d:2a:89:c5:42:f8:2f:03:e2:fb:22:
74:46:90:b8:10:0b:33:d4:dd:59:3c:38:a2:7c:3c:4a:91:1e:
93:c3:28:1f:ce:eb:10:91:0e:6b:95:b3:97:b0:63:b2:75:ba:
d2:8c:c2:d9:4e:00:25:5f:82:3b:47:00:50:7f:61:e8:0c:e1:
eb:aa:02:55:85:8e:a0:f6:ea:91:22:10:a9:3f:c9:b4:cf:fb:
d4:70:b8:50:ae:36:5c:bc:c0:a8:4b:94:3f:fd:d3:65:ee:3c:
09:df:08:37:a7:f3:e4:16:89:62:76:ed:45:b7:3d:c7:01:9b:
19:27:a0:b8:d3:51:e2:bf:2c:c9:67:41:ee:2c:a7:b4:41:0a:
a3:ca:26:af:bd:0e:92:c5:d8:ac:67:22:c3:34:05:e3:9f:4c:
cb:a6:b9:ea:af:c7:85:f1:a8:f4:9c:68:33:fb:99:d8:d1:e3:
61:b6:97:e5:25:89:ef:14:7d:52:0c:35:7f:9f:67:06:39:27:
f5:ab:12:d7:83:07:20:2c:4a:f8:d0:85:b2:21:96:d4:22:99:
86:7b:68:f7
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUHaJR32GKepXPjI7+aeZdeOccjYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTNaFw0yMzEyMjAxNjU2NTNaMDMxMTAvBgNV
BAMTKEQ3QUYwRjg3RTdFMUQwRkIyOTJDM0YxREJBNkVGNDQ5NkUzQjM4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNqBGfvfNtEr7xL8Yj8NEBjcX
z7HNe7/b0eioimWL+uDsm2fSMsYgWlbpztnGUtnnj19dKSCUNiw4+Wy2TPg0xkM+
4rCyvmin70NA9O41qjnrh4BBS/ziPs9iYwVzrFO4wkttN/KVqFgx7BuW5Xkx+I6f
GbrmLBzOobLB6C6psavrTeMBFDkPIWIVyCUxuGs85+LiN9gKcSpeMkZYvL9PLERs
I99sr9XUWhXV5lauB9V/B8aFsih5QNPdniSJKy4TtECHXCcfgyaPR+0ui0tndWQZ
iwOhOvHSblLAOiQKdco1RcrsLxhBFO75sQaCZ+s4IF93Aa8CuFGevCngx1LlAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQU168Ph+fh0PspLD8dum70SW47OO4wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTNDU3
NzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQqBqAFHuAwDQYJKoZIhvcNAQELBQADggEBAMX+WrArhr57
kAeNQDCgpmBdRJYYl+edir4I73/liQf6tXfGmYEj9j/kZ1BtKonFQvgvA+L7InRG
kLgQCzPU3Vk8OKJ8PEqRHpPDKB/O6xCRDmuVs5ewY7J1utKMwtlOACVfgjtHAFB/
YegM4euqAlWFjqD26pEiEKk/ybTP+9RwuFCuNly8wKhLlD/902XuPAnfCDen8+QW
iWJ27UW3PccBmxknoLjTUeK/LMlnQe4sp7RBCqPKJq+9DpLF2KxnIsM0BeOfTMum
ueqvx4XxqPScaDP7mdjR42G2l+Ulie8UfVIMNX+fZwY5J/WrEteDByAsSvjQhbIh
ltQimYZ7aPc=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:19 2025 by rpki-client