Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50546.roa
File: AS50546.roa (raw, json)
Hash identifier: N/fkzIw4bCLjWSzhkGDoRs9InEJW1HHAvf8y2Ha26ZA=
Subject key identifier: 07:D5:F3:27:2D:5D:80:55:97:69:4F:2B:D5:22:12:93:8D:9D:2E:CD
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 41C49C93A4D83B3E9FDB90C76053DE2E8AB6FA9B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50546.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 50546
IP address blocks: 2a06:a005:e30::/44 maxlen: 48
2a06:a005:2560::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c4:9c:93:a4:d8:3b:3e:9f:db:90:c7:60:53:de:2e:8a:b6:fa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=07D5F3272D5D805597694F2BD52212938D9D2ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:9a:cf:f0:12:94:59:fd:92:46:24:6c:32:
ea:1f:cc:e6:7f:c7:03:90:03:f3:9a:e5:4d:a6:4c:
35:25:5b:61:63:c7:c1:7f:cb:29:dd:d5:0c:ed:8f:
aa:82:01:a9:f3:d2:10:d0:63:65:82:88:18:93:b8:
9d:25:97:0a:4c:05:1c:19:38:fd:2c:93:e2:ee:0a:
7c:53:0a:c2:52:e3:fb:b6:8f:2d:44:67:0b:24:58:
ba:f9:5c:42:75:25:66:6c:16:8c:2a:92:41:97:af:
bb:32:50:d9:ec:4f:19:53:e7:31:e6:60:76:52:7d:
26:2a:6f:70:62:a7:c5:90:88:c7:4e:fb:5d:2a:23:
e7:75:45:76:6f:7f:3f:a5:e0:7c:47:07:2f:7e:69:
8a:7e:d0:42:cc:4f:fa:61:7d:f9:69:3f:f8:be:65:
3d:9e:bf:48:e2:bd:78:ec:33:57:93:69:b6:82:fa:
89:03:e0:a3:d4:4f:0a:b4:34:47:f9:c8:56:84:ea:
09:71:79:c6:14:9e:db:38:1f:33:f8:e1:c7:ff:7d:
95:3c:5e:6a:67:c6:21:df:d9:02:d4:1b:36:37:35:
50:54:de:74:60:4c:70:92:62:0f:17:7f:2c:c4:73:
87:c1:04:04:e5:a0:42:45:d4:af:01:1b:58:28:59:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D5:F3:27:2D:5D:80:55:97:69:4F:2B:D5:22:12:93:8D:9D:2E:CD
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50546.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e30::/44
2a06:a005:2560::/44
Signature Algorithm: sha256WithRSAEncryption
8b:c4:39:11:80:57:71:08:43:8a:d2:0f:4a:87:84:3a:08:1b:
06:46:a9:f2:89:8e:1c:61:fc:e3:93:02:b4:39:00:25:88:31:
b7:2a:18:39:ca:b2:55:3a:3a:4c:74:2b:be:cf:d0:4e:9c:85:
7b:ba:41:26:69:e0:e2:1c:d3:be:6b:bc:87:9a:b9:5d:a7:70:
de:9d:a1:e2:7a:74:b7:7b:e7:47:86:54:0f:8c:2d:07:f5:cc:
2a:d3:ec:4d:a0:90:68:cf:5e:b2:b0:ec:a5:e2:45:cd:93:ee:
ff:57:b6:f8:27:aa:a3:c4:07:1b:18:ef:20:53:da:18:b5:d3:
ff:60:19:74:f7:18:cb:5e:e8:d5:01:fa:70:22:16:7f:db:f4:
60:5a:03:6a:e0:6e:f4:01:a2:c2:1e:05:58:23:68:5f:83:a7:
e3:e6:09:09:a6:96:e8:60:80:52:06:3d:36:de:c4:d9:e2:a0:
b5:04:7d:cc:50:21:a4:cb:85:f7:e0:98:b5:dd:6a:de:ac:82:
ac:8b:1f:3f:90:1b:c4:5d:06:4d:e2:62:33:a9:c4:c0:86:88:
5f:94:f0:a2:07:19:01:b0:fe:21:23:4d:68:5b:c5:30:b8:77:
e7:96:53:65:de:f3:47:9d:a1:44:77:52:d3:99:ef:23:4e:5d:
31:3e:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:09 2025 by rpki-client