Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: /OtkM/my+qZaRNoGWQMBw0glzW8T6fuFOn7VhPYjDYg=
Subject key identifier: 36:6C:2B:51:53:A6:AF:55:28:4D:61:B5:5E:D2:5F:1B:92:30:28:E0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 58BA87CE5EF44EB3EE4020637AD0CCCB13AFC8EB
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS48266.roa
Signing time: Tue 27 Dec 2022 03:00:27 +0000
ROA not before: Tue 27 Dec 2022 02:55:27 +0000
ROA not after: Tue 26 Dec 2023 03:00:27 +0000
asID: 48266
IP address blocks: 2a06:a005:90::/44 maxlen: 48
2a06:a005:a0::/44 maxlen: 48
2a06:a005:350::/44 maxlen: 48
2a06:a005:870::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ba:87:ce:5e:f4:4e:b3:ee:40:20:63:7a:d0:cc:cb:13:af:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 27 02:55:27 2022 GMT
Not After : Dec 26 03:00:27 2023 GMT
Subject: CN=366C2B5153A6AF55284D61B55ED25F1B923028E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:17:e9:ce:99:85:81:70:a4:98:b5:61:0d:da:
1d:11:06:82:91:ba:76:88:13:4c:09:c3:9c:ff:ea:
81:2b:19:54:a6:a3:69:7c:db:6b:f4:96:4f:4a:13:
7b:e6:b5:5a:e8:32:bf:3f:27:39:a7:e1:cd:a1:41:
25:6f:e1:2f:d0:31:11:a7:c4:91:5a:ed:13:89:ac:
9e:a8:6e:59:af:fc:2b:c0:57:9d:3b:30:40:05:9c:
24:1b:6e:00:73:0e:a4:2c:bf:73:37:57:e9:d7:64:
6f:91:7d:a2:ad:30:93:3f:7a:52:05:a9:75:88:6a:
5c:91:e5:88:a4:e8:59:5f:ed:9b:db:a3:79:5c:f0:
d8:af:9d:cd:da:9b:39:46:e2:d8:ca:91:7b:af:2e:
7a:ca:6f:a7:29:23:90:7a:14:97:09:38:eb:9e:bb:
fd:d8:e5:12:ee:15:7e:0f:13:d9:50:6e:3c:53:4c:
bd:83:81:50:ae:88:a0:d2:a9:b5:47:be:10:74:73:
a4:76:fa:d2:51:83:95:d1:09:14:6a:6e:77:54:a2:
62:18:d3:60:37:93:26:27:c3:f8:b2:25:7d:8a:44:
c8:41:f2:a0:af:ed:02:5b:ee:e4:4d:b2:2d:8c:b9:
39:de:a0:25:6f:c8:5d:5f:9f:60:56:06:3a:5a:97:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:2B:51:53:A6:AF:55:28:4D:61:B5:5E:D2:5F:1B:92:30:28:E0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
2a06:a005:350::/44
2a06:a005:870::/44
Signature Algorithm: sha256WithRSAEncryption
b5:fb:7a:95:2b:76:c1:40:83:a5:d2:0f:62:7a:1c:41:c1:7c:
d8:90:0b:f1:2d:bc:99:32:23:f2:3e:bc:58:32:b1:ae:db:3a:
21:d3:52:a8:f2:c0:31:2a:c6:77:93:d0:98:3d:07:eb:ae:52:
af:b1:90:be:61:fe:ab:b2:68:34:b3:d8:30:77:60:ee:87:16:
69:a9:8f:23:cf:9e:aa:b6:3e:20:0c:e4:ef:23:e0:dc:10:69:
cb:51:ae:41:93:0a:25:a4:ab:06:c3:37:37:8f:f4:49:35:77:
cf:22:22:3b:fe:25:6b:ea:fc:15:4c:76:f7:e6:0c:19:db:1f:
21:92:65:3f:f1:56:ed:e9:a1:35:4c:27:b4:a9:28:2b:80:ce:
fc:38:f1:a1:5f:a2:03:35:7d:04:c8:1f:1e:3c:58:0a:8d:62:
e9:cd:ee:02:ce:b3:f4:88:49:d3:ce:1d:59:d3:52:fb:a4:ad:
1b:47:a2:02:c8:9f:1f:6d:5d:2e:f1:1e:c9:2b:9f:6d:3b:d7:
75:d8:1d:21:9e:7c:42:19:f5:e8:9b:dc:03:b0:88:ef:b5:42:
ea:8e:18:7d:fb:b2:83:08:ad:53:9f:ee:0d:d8:0d:9e:21:10:
1f:32:65:9d:2e:55:c7:58:0a:c8:49:7b:b6:36:99:13:fb:e8:
b8:05:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:35 2025 by rpki-client