Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51312.roa
File: AS51312.roa (raw, json)
Hash identifier: 60hYJWgMO6ssUJE7efcM6LmKmvUivI8HKMYPWIZHyus=
Subject key identifier: F5:19:66:EF:3C:D0:9C:22:D5:2E:E9:3D:99:A0:EC:18:DE:0C:3D:78
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0F2C362B639B69EF5485B68992DAAA350AD2F86F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51312.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 51312
IP address blocks: 2a06:a005:2280::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2c:36:2b:63:9b:69:ef:54:85:b6:89:92:da:aa:35:0a:d2:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=F51966EF3CD09C22D52EE93D99A0EC18DE0C3D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:8b:6f:96:3c:ec:12:97:bb:11:3a:82:1f:
fc:81:fe:4c:db:79:c0:64:21:b5:a4:0e:5e:51:84:
ab:f9:a6:de:65:1e:6f:7d:f5:5a:a1:9d:94:5b:d8:
b5:2e:b3:6b:b9:a1:52:4a:a2:0d:c6:40:b9:5b:ea:
48:97:f6:ea:57:a3:af:44:39:da:69:6f:93:3d:86:
61:90:19:f0:8b:e9:f2:15:19:ad:07:70:a5:c0:4e:
4d:a0:4c:86:2d:b0:53:fb:05:21:ff:0b:fa:25:d2:
20:3e:d7:d6:16:9a:11:d5:07:73:b2:90:46:9c:bb:
93:3a:5c:d1:40:12:46:06:39:70:8a:b2:25:2b:49:
19:4a:44:8f:e5:95:88:59:16:8b:34:2b:c2:fb:e4:
db:01:9e:68:5d:e0:3e:d7:98:1e:85:48:0c:d8:e3:
a1:e4:ac:9a:49:5f:85:61:a1:fc:e7:37:fd:92:c6:
5b:2f:4b:93:5d:d1:dd:66:ce:2d:30:67:1a:cb:54:
5b:96:3a:99:43:8e:0f:86:2c:31:c6:7a:03:0a:49:
50:4c:7d:dd:bd:74:27:32:d5:7d:2c:d0:76:3b:e8:
26:06:9c:91:25:65:e9:98:c3:c7:3f:e9:22:7a:35:
ad:8c:2b:e2:34:ce:00:5d:b5:6f:88:62:59:21:80:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:19:66:EF:3C:D0:9C:22:D5:2E:E9:3D:99:A0:EC:18:DE:0C:3D:78
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2280::/44
Signature Algorithm: sha256WithRSAEncryption
8d:2c:96:b9:10:49:bc:59:46:22:46:3a:ea:30:c5:7c:1b:b7:
a9:e3:bd:10:c6:5a:dc:21:72:3b:2a:29:7f:dd:b6:bb:b1:b7:
e4:62:e4:87:d0:3d:dd:3d:79:e9:c1:d9:57:c9:8e:90:a3:cb:
b3:f4:7d:dc:60:2b:9e:87:84:22:01:65:00:15:89:99:6f:6b:
9a:09:cc:eb:5e:53:1e:de:d7:c1:f8:6e:d8:dc:ae:f6:8b:b6:
92:85:e9:65:c4:d9:9f:fa:42:59:e7:ad:27:97:d2:a5:5f:87:
16:fc:b5:06:73:2c:ea:7c:37:16:a8:1a:31:bb:1b:5b:2f:0f:
7a:e5:e0:91:1b:89:42:16:87:12:56:5f:32:32:ae:7b:3a:d1:
8f:61:29:eb:8b:bc:b6:ff:b2:81:1a:b5:75:e5:0b:04:80:58:
bb:7f:e8:9a:05:81:d4:d0:7a:a3:08:c4:02:db:b6:e2:49:89:
39:e3:08:92:80:f5:1c:51:b1:7a:33:df:a2:b7:5a:12:3d:f6:
ce:e9:11:af:c3:11:ce:b7:a5:d6:cd:2c:07:df:ec:ce:70:59:
02:4f:21:7e:4f:8c:84:97:13:98:61:06:c6:b2:8d:da:cc:a6:
de:98:24:25:fb:7f:9c:99:9a:e5:4d:6c:84:e2:27:0b:f2:aa:
45:bb:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:04 2025 by rpki-client