Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50833.roa
File: AS50833.roa (raw, json)
Hash identifier: 9reZfQRVULhQHblRzQurDTF/LXhCzAFyl8Qa9xWA8kA=
Subject key identifier: CF:8F:12:BC:D4:F5:8B:1C:A0:4A:67:3C:E4:39:44:C8:22:33:4D:20
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5D3D46DD15DC5FE0690DCE8D4EBD8C1B246ABF31
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50833.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 50833
IP address blocks: 2a06:a005:2d2::/48 maxlen: 48
2a06:a005:a09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:3d:46:dd:15:dc:5f:e0:69:0d:ce:8d:4e:bd:8c:1b:24:6a:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=CF8F12BCD4F58B1CA04A673CE43944C822334D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1c:5b:45:49:43:5a:21:16:3f:ea:91:b9:ed:
67:1b:76:2d:53:51:89:8f:79:42:30:3b:ed:f1:59:
32:d8:74:f6:50:5b:20:94:09:ae:4c:09:07:49:4e:
02:84:85:67:da:12:88:c5:e3:22:35:e4:ac:59:46:
dc:8c:70:5f:f8:ee:d9:4f:6e:ed:76:e5:1c:c2:91:
39:e4:fb:58:e0:f0:85:a6:8d:47:5c:99:9a:1c:51:
07:5b:f5:41:b0:1e:a6:0e:62:9b:55:b9:8c:ab:ad:
9c:c5:1c:ae:ee:33:5b:af:33:8b:16:24:9f:50:58:
ae:17:b8:1a:db:53:b5:db:73:8f:5b:96:c4:dd:18:
72:16:56:8c:f1:77:2c:c7:5e:a6:83:ce:97:e3:24:
38:20:5b:62:0e:94:ad:88:57:da:74:ec:de:76:77:
07:af:03:a4:81:9e:2f:64:c9:5a:3c:6e:ca:5f:c3:
e8:a2:16:e7:3f:ac:11:e6:8a:e2:2b:3f:16:50:26:
3f:fe:ff:8e:c9:79:b6:f7:2e:4c:d0:75:25:9f:7c:
53:f6:ab:f4:12:f2:a2:69:1b:f9:d5:26:33:32:51:
a6:e5:48:f2:33:ca:5d:fc:69:6d:4e:aa:d7:3d:3b:
78:7a:0e:22:82:6c:2a:0d:fd:d4:69:ef:dc:63:bd:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:12:BC:D4:F5:8B:1C:A0:4A:67:3C:E4:39:44:C8:22:33:4D:20
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d2::/48
2a06:a005:a09::/48
Signature Algorithm: sha256WithRSAEncryption
ba:90:f0:c3:7e:e0:68:23:dc:f6:8f:5f:64:d2:22:fd:49:d7:
4c:ba:10:22:0d:5a:4f:d2:60:e8:ba:47:52:b6:b2:da:7f:76:
f0:f9:e6:a3:f1:05:ef:62:df:7f:a1:60:c8:9f:0c:3f:02:75:
48:e6:bc:a6:ce:63:32:23:59:eb:0c:4f:9e:61:4e:98:60:bf:
bb:73:18:c5:82:f1:60:fd:63:8c:a7:79:48:25:bd:e6:a3:2a:
5a:54:72:58:d1:04:1c:9f:f3:10:4a:8d:23:79:66:c0:45:6a:
00:74:34:95:cc:d4:bd:be:d0:b9:80:a5:b2:c5:82:57:f3:6e:
57:91:08:a0:b8:ef:bf:8c:97:91:0f:06:7c:d1:02:d4:70:7c:
25:8b:31:89:c8:3f:eb:c8:2f:60:84:04:21:70:a1:37:95:75:
a1:64:65:97:0d:49:1a:9b:22:dd:7f:4d:6c:7d:56:20:9b:8d:
35:9e:21:a3:6d:f3:d1:a0:7c:07:05:52:a1:05:97:e2:18:d6:
86:88:3d:22:0b:45:73:f7:0e:31:a0:ce:8b:78:09:7e:aa:88:
da:dc:12:04:c8:b1:35:46:8b:a9:c0:aa:78:3f:b1:93:6c:aa:
2d:61:47:89:b5:26:d2:1f:39:da:7a:37:77:67:fc:30:dd:03:
bb:8e:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:26 2025 by rpki-client