Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50842.roa
File: AS50842.roa (raw, json)
Hash identifier: SAxzWmlOmKakN/tNRtoT0hhp34ikKUwk66121q8i2io=
Subject key identifier: 24:C9:14:F8:63:D1:9B:4A:4D:C2:07:FF:75:73:3A:4D:C6:DC:8F:DF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1C0D98EEB5D355871AEF3226AEB56CD3C7DB1103
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50842.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 50842
IP address blocks: 2a06:a005:1540::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0d:98:ee:b5:d3:55:87:1a:ef:32:26:ae:b5:6c:d3:c7:db:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=24C914F863D19B4A4DC207FF75733A4DC6DC8FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:00:54:7f:08:b7:33:b3:9d:e0:df:70:56:
f8:9b:18:5e:26:01:01:84:1f:ac:a7:08:3b:95:fd:
56:d3:60:21:87:b4:aa:4d:d6:a6:a7:1b:3f:61:e8:
a6:68:1b:6c:4e:48:d6:5d:97:5d:ee:ad:f3:89:d6:
07:cc:30:ad:fd:dc:e7:04:ef:a8:5d:2b:3d:fd:5e:
68:16:02:6a:60:2d:b3:a9:7e:d4:86:04:c1:aa:32:
63:fa:e8:69:e5:d3:cd:71:71:6b:96:b9:b7:e1:48:
70:aa:8e:1a:62:6f:7f:da:f7:76:5a:4b:bd:05:a7:
3a:b7:77:3d:84:d9:da:2f:ae:4f:f5:10:c6:89:6a:
bb:0f:70:61:ad:ed:c8:f5:fa:bf:b8:56:2e:cb:11:
9b:93:b7:61:0d:db:47:d1:a2:d9:e5:bd:df:e9:fc:
85:84:0a:6b:38:eb:fe:e4:c5:cc:d0:1b:a6:cb:32:
f3:23:d0:25:75:62:59:17:1e:f5:f5:d5:50:fd:39:
be:8a:23:b5:dd:a9:c2:9f:ce:73:e9:be:eb:94:cc:
b7:cf:73:58:7e:9e:1c:01:12:00:ba:48:64:23:90:
82:5c:83:f3:b8:00:85:99:e0:ce:87:94:cb:c3:9b:
1d:30:51:6b:c2:dd:e9:93:97:03:14:ca:4f:9a:74:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:14:F8:63:D1:9B:4A:4D:C2:07:FF:75:73:3A:4D:C6:DC:8F:DF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS50842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1540::/44
Signature Algorithm: sha256WithRSAEncryption
e1:f7:e3:0f:44:79:a7:6e:73:3f:03:83:b3:a2:b8:d3:9f:6d:
0b:71:74:28:37:10:7d:3e:f4:5f:c5:9f:df:90:75:7e:6b:6a:
f6:ae:2b:83:78:eb:4f:1f:7d:fb:21:0d:1f:8f:cf:0b:02:2f:
24:e0:46:18:94:fd:c2:95:7f:94:af:f4:3a:b3:46:cc:eb:0e:
46:ff:c5:42:3f:ab:59:d0:79:e0:d1:4b:a3:39:75:21:38:a0:
87:9d:c2:51:92:b4:78:cd:5b:9b:75:d3:d6:7b:66:fe:9f:1b:
3a:8d:06:40:71:8d:7a:94:66:f7:72:c3:64:d8:61:54:59:f4:
70:b6:ef:71:12:b4:fb:ec:fc:10:98:20:e6:c9:09:2d:e5:b7:
8f:52:9c:83:cb:b3:ba:e3:2a:b8:8a:b5:c9:a8:4f:a4:c3:51:
7f:10:ab:52:39:5b:12:12:dd:79:31:26:cd:6e:88:44:6b:a9:
63:b6:df:cc:b9:e6:4a:fa:08:d4:7a:a2:fb:f0:e6:6f:e4:d7:
37:4c:93:d4:e2:41:5a:df:24:60:94:d8:24:0b:14:ea:c5:70:
49:fa:6b:ca:dc:ec:1b:54:2e:bc:13:9b:52:f6:6e:ce:79:4d:
51:2a:9b:e6:1c:b5:74:b5:25:37:dd:9e:b0:aa:67:67:23:b3:
c6:0a:d5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:18 2025 by rpki-client