Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51019.roa
File: AS51019.roa (raw, json)
Hash identifier: Dgsyzxwr9spCtC5w7wjihIwig2vcGlc7bEdCvQ2jO2Y=
Subject key identifier: 5A:44:24:F3:A0:E9:53:28:88:B8:E9:DB:3D:EA:71:58:A0:F2:23:4D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4C78510891051857DE211DB16E837C66BA569227
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51019.roa
Signing time: Fri 23 Dec 2022 20:14:12 +0000
ROA not before: Fri 23 Dec 2022 20:09:12 +0000
ROA not after: Fri 22 Dec 2023 20:14:12 +0000
asID: 51019
IP address blocks: 2a06:a005:437::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:78:51:08:91:05:18:57:de:21:1d:b1:6e:83:7c:66:ba:56:92:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 23 20:09:12 2022 GMT
Not After : Dec 22 20:14:12 2023 GMT
Subject: CN=5A4424F3A0E9532888B8E9DB3DEA7158A0F2234D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:d2:e2:5c:95:e2:51:05:a8:93:8a:0a:78:
6d:fa:aa:b4:51:61:57:43:dd:32:7c:72:9a:35:37:
de:5a:5a:9f:46:48:93:67:d9:ef:19:42:cd:ee:86:
bd:81:e6:88:a3:30:6c:ec:89:0c:2f:af:f6:e0:8d:
b6:33:5c:52:6e:17:aa:79:54:f3:5e:6a:8f:00:a4:
9e:1e:35:61:9d:5e:36:a3:13:60:6c:a7:ae:f4:ec:
4f:35:62:a6:c0:8d:93:ca:d8:80:15:4a:95:41:8c:
a1:1e:30:ef:e2:8b:03:32:cc:48:a6:97:f9:fc:d9:
77:fa:c8:07:cd:d0:77:76:ad:5f:65:0c:0f:2e:a8:
ec:6a:e6:27:f9:d3:68:04:f6:1c:46:d0:af:f4:e5:
f4:35:36:4f:13:d6:a7:b1:ca:0b:96:ec:64:ac:96:
b0:84:a5:ae:c8:4f:b3:86:ee:d1:b4:0c:b0:79:3e:
5a:d3:d1:75:66:70:ce:21:cf:c4:2c:b4:a3:6f:73:
e2:23:45:58:c2:92:9c:08:78:f2:57:a8:c1:f8:83:
f2:ce:6b:7d:de:47:4d:46:5d:41:23:3e:d3:f7:cc:
ca:7d:e8:e4:25:61:4d:3a:d0:a2:f8:e2:20:fe:62:
59:a2:55:f0:4f:0f:02:74:55:93:e4:41:34:3c:e7:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:44:24:F3:A0:E9:53:28:88:B8:E9:DB:3D:EA:71:58:A0:F2:23:4D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:437::/48
Signature Algorithm: sha256WithRSAEncryption
9e:11:e9:be:44:c8:c9:ac:d8:3d:95:98:cd:eb:34:38:97:2c:
77:54:a5:58:98:8d:54:32:40:c3:fa:a2:87:32:1a:77:61:f5:
f0:a8:f5:90:40:3d:e7:41:9c:26:41:1c:78:d4:fe:86:e7:2e:
2c:38:5d:fb:83:88:f7:d5:06:5e:f3:23:dc:b9:1e:c6:f8:97:
87:11:af:c7:3b:60:3f:d8:34:54:bb:e3:09:31:f6:c2:f6:8a:
9e:2c:da:4b:07:75:89:63:fe:32:e4:e4:87:be:f6:31:6d:7d:
2e:01:74:43:68:02:cd:e1:13:d9:53:35:33:b9:a2:83:b7:7e:
e1:8a:53:50:f9:d2:68:a1:0a:4a:e8:e9:b9:a9:ae:83:cd:1e:
3f:92:c6:1c:7e:d2:a8:79:51:69:ff:9f:27:27:34:c8:e1:28:
25:a8:4d:b6:78:56:16:85:ac:3e:96:5d:9a:d1:25:ac:30:97:
b6:e5:93:4c:29:00:ad:77:d6:5e:2c:8a:8a:81:c1:fd:3c:ce:
c8:78:00:1b:81:a2:1f:50:1a:e1:32:8f:22:62:88:77:a8:ed:
e5:d9:a1:27:87:19:1f:10:8e:40:7c:8f:e1:93:ec:db:98:d9:
cf:5d:cf:f3:23:a3:34:73:db:cf:cb:ad:d1:0d:85:a2:ae:80:
a0:b3:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:46 2025 by rpki-client