Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51856.roa
File: AS51856.roa (raw, json)
Hash identifier: PyQXl/BzDlhu7iX4QSMkJWXSK2VVCeBHvQRiXRY3EUk=
Subject key identifier: A6:3C:0E:D9:3E:90:7D:E2:BC:19:1A:11:50:9C:25:55:42:89:6C:A0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2F2BA1DE65BC715E317CF52AAFF861D9D25CACFC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51856.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 51856
IP address blocks: 2a06:a005:1310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2b:a1:de:65:bc:71:5e:31:7c:f5:2a:af:f8:61:d9:d2:5c:ac:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=A63C0ED93E907DE2BC191A11509C255542896CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:46:66:db:35:60:93:53:70:1d:f4:22:c5:
30:ef:75:54:72:fc:eb:9a:63:52:a5:21:06:5f:9f:
ac:88:58:f7:9d:cf:d1:2f:65:4a:88:53:d9:f6:0a:
e2:cd:c9:80:96:f8:9e:e2:44:b9:37:d3:7e:79:62:
b1:54:ef:8b:3a:39:e7:9b:a0:57:3d:fe:78:0f:f4:
10:13:45:7f:1e:1a:a3:f7:cf:f7:8f:ac:8a:75:66:
6b:63:9e:fe:6e:66:73:3e:95:c0:fe:bd:33:02:d4:
07:14:54:c1:d1:ff:44:35:3b:a1:02:e8:9a:b0:76:
ab:50:03:7f:a5:80:7f:9c:50:05:ef:9e:73:0c:21:
18:5b:b0:7d:f7:20:06:40:11:d8:31:fe:47:47:35:
60:88:d4:0b:85:9e:07:52:6b:76:ca:8b:bf:2e:dd:
01:9f:55:a2:71:0a:16:2d:52:85:ce:d9:c1:66:22:
22:e1:99:a3:a7:ed:64:b4:47:87:5b:f7:51:1b:14:
c7:c9:0a:04:78:2d:65:8d:03:2a:d7:8f:53:b0:01:
ed:3e:d3:3b:a7:79:cd:48:18:98:d2:80:47:b6:ac:
1c:8e:cf:77:e8:e7:b0:d9:67:ea:e6:5b:d2:ab:5f:
b6:bb:7a:64:16:62:4c:a8:c6:43:f9:e9:ce:86:49:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3C:0E:D9:3E:90:7D:E2:BC:19:1A:11:50:9C:25:55:42:89:6C:A0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1310::/44
Signature Algorithm: sha256WithRSAEncryption
3c:67:44:0e:a9:13:b3:70:93:9a:41:73:25:63:97:8b:ed:8e:
92:0e:82:93:81:2b:48:b0:07:16:d2:49:f5:fc:77:c8:25:80:
ac:40:5f:69:08:31:1c:c6:70:03:00:3d:d6:4a:e8:f7:13:82:
96:09:af:49:dd:cf:4c:e9:52:31:5c:b2:4e:d4:eb:0a:ad:b7:
40:0b:af:83:f3:e2:be:cb:3c:b2:e2:08:47:5b:17:f5:b2:b2:
80:f8:cd:90:1a:9c:14:57:01:f3:21:31:26:4f:98:2b:d2:a2:
e0:06:13:85:ae:4c:47:0d:8c:f3:17:11:ec:27:73:bd:ff:0b:
f1:5b:5e:a5:1b:03:d5:6a:c8:b1:b1:d9:55:f0:62:98:b5:1e:
19:21:60:1e:b1:5c:0b:8e:0b:e7:77:ed:c8:5d:91:fc:84:5f:
1e:ea:2c:09:f3:a2:82:f1:fc:62:9f:c2:29:c5:b3:72:c2:f8:
5f:4d:cb:88:f2:51:55:bf:51:35:0a:00:cc:b0:e7:e3:a8:42:
f4:87:4a:ba:17:33:87:b0:b8:4b:cf:62:af:ea:a7:c2:5c:2c:
70:90:a5:46:43:ed:5e:e5:9d:20:c2:28:d8:16:86:2a:38:7a:
b6:70:2d:45:d3:ef:4d:46:71:e0:76:6a:1d:7d:94:a0:3b:c2:
40:c3:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:33 2025 by rpki-client