Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS47689.roa
File: AS47689.roa (raw, json)
Hash identifier: 6B/lZO86JBr7lLWxXx9x6zjfWVdduCIpsGinpP4+oxU=
Subject key identifier: 3D:25:EA:52:07:B8:61:B4:73:42:86:76:16:58:74:08:C9:38:93:7D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4EA9868AB92808FB49AC3EB8339A77DDC5ABF753
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS47689.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 47689
IP address blocks: 2a06:a005:a18::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a9:86:8a:b9:28:08:fb:49:ac:3e:b8:33:9a:77:dd:c5:ab:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=3D25EA5207B861B47342867616587408C938937D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:a6:76:31:9f:0d:a1:1a:fe:ce:54:6c:c2:
28:d4:4d:1a:be:34:6d:ae:80:1e:cb:59:1b:cf:22:
74:e8:0e:4f:d9:0b:f8:44:c3:7a:46:93:63:a7:77:
74:bb:30:82:6b:e4:ab:4c:82:71:38:26:53:33:da:
93:27:dc:3a:7c:2c:7a:67:d0:d2:03:a8:54:37:b1:
64:a6:d6:06:27:9c:f1:e2:f7:1d:42:83:0a:c1:6e:
a3:4a:0a:55:4b:66:64:7a:8a:e8:d2:64:3c:e0:8b:
77:da:56:de:8d:d5:1e:ac:91:1c:bf:da:2b:a7:35:
c2:09:e1:8b:6a:87:22:74:9b:db:85:f2:9b:97:ca:
7b:6a:bf:09:8f:15:67:e6:23:12:f8:89:84:7f:e9:
55:2a:c1:80:b6:0f:53:9c:44:bf:1a:53:80:83:46:
7c:5b:a0:e7:c6:b9:c7:4e:e5:4e:ac:82:ec:45:d0:
49:f7:0f:0d:ee:ca:d3:b7:da:6d:d6:83:43:30:8d:
87:98:bd:38:d6:0b:a1:e1:58:2c:08:3b:62:7b:b2:
20:2e:13:0a:de:08:52:e3:84:8c:72:aa:62:cb:3f:
90:27:53:fa:13:c7:18:28:11:dd:97:dd:7e:6f:6b:
27:b6:5d:3f:65:76:14:62:58:63:b5:83:ec:7d:ca:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:25:EA:52:07:B8:61:B4:73:42:86:76:16:58:74:08:C9:38:93:7D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS47689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a18::/45
Signature Algorithm: sha256WithRSAEncryption
78:d5:c1:58:f6:11:b3:7c:eb:f4:3a:57:a8:51:97:1e:5b:f2:
bc:10:a2:aa:d4:a2:c0:13:c0:f4:58:b2:23:75:70:af:64:7e:
4f:53:ab:49:e6:e8:09:98:ab:f7:ff:01:77:35:de:ef:70:aa:
4c:34:a6:a8:57:d2:ae:4f:48:18:d3:e0:7d:cb:4e:fd:4e:79:
bc:24:ff:46:70:b3:e7:e4:d0:46:8d:3f:78:2f:ec:1a:76:a3:
20:22:8d:35:bd:1b:d6:1e:19:d5:2a:3c:2f:4d:bf:1f:37:f9:
fb:64:de:de:0b:c5:e2:c1:c0:35:4c:55:d0:f6:cc:48:de:78:
8a:fa:17:cc:08:ce:b5:d4:53:92:ee:06:3a:ca:03:f5:9c:51:
79:e8:8c:28:d0:5a:44:20:1f:b9:40:72:81:cf:bf:64:98:a4:
18:37:c8:85:b1:aa:4e:28:c4:a9:92:b0:5f:de:2f:29:ed:69:
69:21:a2:8d:5c:8a:5e:a4:3a:4d:75:7a:ea:1c:43:e0:60:d3:
a2:6d:28:cd:c1:62:ca:31:70:fe:fa:04:f7:39:e1:d4:3e:12:
2c:84:b7:a3:a6:88:96:67:d6:1d:b4:8e:61:20:35:c7:0d:bd:
77:df:33:2c:7d:af:9b:1c:ee:30:4d:75:58:bb:7d:8a:f8:e1:
17:37:d9:88
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUTqmGirkoCPtJrD64M5p33cWr91MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDdaFw0yMzEyMjAxNjU2NDdaMDMxMTAvBgNV
BAMTKDNEMjVFQTUyMDdCODYxQjQ3MzQyODY3NjE2NTg3NDA4QzkzODkzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3M6Z2MZ8NoRr+zlRswijUTRq+
NG2ugB7LWRvPInToDk/ZC/hEw3pGk2Ond3S7MIJr5KtMgnE4JlMz2pMn3Dp8LHpn
0NIDqFQ3sWSm1gYnnPHi9x1CgwrBbqNKClVLZmR6iujSZDzgi3faVt6N1R6skRy/
2iunNcIJ4YtqhyJ0m9uF8puXyntqvwmPFWfmIxL4iYR/6VUqwYC2D1OcRL8aU4CD
RnxboOfGucdO5U6sguxF0En3Dw3uytO32m3Wg0MwjYeYvTjWC6HhWCwIO2J7siAu
EwreCFLjhIxyqmLLP5AnU/oTxxgoEd2X3X5vaye2XT9ldhRiWGO1g+x9ykhZAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQUPSXqUge4YbRzQoZ2Flh0CMk4k30wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTNDc2
ODkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwMqBqAFChgwDQYJKoZIhvcNAQELBQADggEBAHjVwVj2EbN8
6/Q6V6hRlx5b8rwQoqrUosATwPRYsiN1cK9kfk9Tq0nm6AmYq/f/AXc13u9wqkw0
pqhX0q5PSBjT4H3LTv1Oebwk/0Zws+fk0EaNP3gv7Bp2oyAijTW9G9YeGdUqPC9N
vx83+ftk3t4LxeLBwDVMVdD2zEjeeIr6F8wIzrXUU5LuBjrKA/WcUXnojCjQWkQg
H7lAcoHPv2SYpBg3yIWxqk4oxKmSsF/eLyntaWkhoo1cil6kOk11euocQ+Bg06Jt
KM3BYsoxcP76BPc54dQ+EiyEt6OmiJZn1h20jmEgNccNvXffMyx9r5sc7jBNdVi7
fYr44Rc32Yg=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:13 2025 by rpki-client