Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51930.roa
File: AS51930.roa (raw, json)
Hash identifier: AUW12RA9ddBzk6DBIsS48EXCRfUwvh7bziLNEV8WtoU=
Subject key identifier: F3:4E:C1:DF:D3:E8:E6:9C:1C:73:5F:EC:5E:30:5B:0D:A9:C2:45:27
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 02C64100F3BFC18E4624779E8AC652EB0CBD9935
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51930.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 51930
IP address blocks: 2a06:a005:1d10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c6:41:00:f3:bf:c1:8e:46:24:77:9e:8a:c6:52:eb:0c:bd:99:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=F34EC1DFD3E8E69C1C735FEC5E305B0DA9C24527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:84:11:7c:4a:f6:99:9c:1d:88:ea:bf:46:
20:1f:49:96:e5:62:1b:c1:f7:18:3b:eb:8c:26:22:
4b:ab:b5:94:f3:f1:a7:47:b1:08:b7:6a:e1:55:50:
af:5f:d6:62:23:ff:04:b8:c4:35:71:92:61:f6:da:
e3:e5:73:3b:5f:d0:3f:f5:a7:33:1d:2a:a0:5f:c8:
74:26:83:f9:45:72:8b:17:af:5b:b9:04:33:85:f2:
56:94:a0:ae:4d:ac:e2:ef:3e:07:a4:ea:72:b6:31:
4f:bd:44:fc:bb:da:a5:58:63:ab:67:5e:12:7f:a1:
59:e3:b0:fb:0e:13:42:ed:c1:25:9f:0b:61:c8:10:
ae:d9:28:a6:2b:34:43:71:ad:73:09:da:19:c2:77:
6c:73:6f:aa:a5:f8:30:e2:0a:44:8c:1e:9b:0f:79:
e4:2f:5a:8e:73:ec:fa:81:82:ef:03:a7:04:02:b0:
92:41:19:5f:85:f8:d0:ce:9e:de:0e:a5:74:5c:88:
d6:3a:8a:bb:b2:31:b1:5b:0a:35:6d:91:f7:90:b4:
55:ad:7a:0c:0b:88:b9:76:d4:ee:40:6a:26:03:de:
39:a9:99:c3:92:8d:bb:b6:7c:aa:c2:71:4a:68:c6:
dc:40:0f:b3:15:a1:c3:f7:15:f8:29:43:e5:45:53:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:C1:DF:D3:E8:E6:9C:1C:73:5F:EC:5E:30:5B:0D:A9:C2:45:27
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS51930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d10::/44
Signature Algorithm: sha256WithRSAEncryption
99:d7:46:7e:3c:6b:d2:62:e8:06:a9:9d:86:7a:4e:a5:61:d7:
18:2c:8a:80:0b:39:a4:ca:44:c8:5e:26:3e:bb:97:8e:f1:5c:
37:95:b4:fb:4d:c7:a4:8d:32:85:62:f4:4a:34:03:28:ce:a5:
bd:12:c7:8c:82:71:15:96:4f:d1:a6:dc:9a:4a:ee:f4:df:67:
a9:f1:17:21:83:68:e8:a3:4e:b9:53:8e:3f:ac:1a:c0:32:43:
ae:7f:a6:07:4c:60:85:f1:11:ce:2f:0e:e6:68:7c:04:f9:44:
96:05:d1:ee:dd:18:28:59:55:6c:2a:3a:40:f3:21:60:03:16:
ee:c9:9d:4a:c7:0e:cd:ca:9e:03:1a:10:2a:4f:5f:92:9c:10:
0e:66:a7:93:da:a1:13:c2:be:2d:49:15:26:de:3d:14:9e:28:
0f:4c:37:96:cb:c4:c9:8a:8e:e3:49:ad:74:2c:9c:07:4b:5b:
76:cb:38:32:88:fa:2b:67:2c:ae:1e:ee:1f:d9:5b:95:c4:72:
6c:88:eb:68:ef:f1:0c:e2:c2:86:cc:d7:4c:91:3f:14:e8:a8:
dc:f5:79:85:cb:89:fa:2a:18:46:00:30:bd:68:a9:62:fd:34:
13:06:ec:09:8c:c5:99:d2:05:d4:c1:0b:98:52:a1:a7:80:98:
93:f0:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:19:45 2025 by rpki-client