Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54041.roa
File: AS54041.roa (raw, json)
Hash identifier: 4oWir4zDn8M8Aal3I9oyFF8KBaBgMjOF0v57m0kdU7g=
Subject key identifier: BF:03:DE:49:AF:44:46:77:BB:89:A4:CC:EB:4F:62:4A:69:06:88:31
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 792553E3282E56EA0CE1BE1C95A28BE5F1DCE8A6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54041.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 54041
IP address blocks: 2a06:a005:1085::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:25:53:e3:28:2e:56:ea:0c:e1:be:1c:95:a2:8b:e5:f1:dc:e8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=BF03DE49AF444677BB89A4CCEB4F624A69068831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:87:86:9c:70:83:b6:25:5b:be:1e:06:2d:
52:d1:9e:5e:a6:d0:05:fa:ba:f7:b6:40:4d:dc:cd:
7c:e4:02:74:39:44:40:72:bf:48:63:68:8b:4b:0f:
e1:eb:9c:33:b7:42:82:16:68:d7:41:9e:92:60:16:
7c:7f:d2:3f:97:9d:15:c3:14:54:9e:9d:0c:dd:77:
6c:7f:b7:ff:72:24:06:61:19:43:2d:6d:18:db:c2:
5b:89:d8:44:d6:51:ac:d0:12:e5:27:b7:65:ac:8f:
86:3e:45:7b:6a:5b:05:d2:83:51:d9:fb:42:8d:a9:
cd:fe:4c:12:3b:38:31:44:2d:43:3c:c2:9a:2b:0d:
82:6d:cc:7c:86:7c:00:b1:06:2d:35:8c:0e:c1:41:
4c:5c:ba:b9:88:56:c4:45:f5:f3:2b:1d:96:d9:df:
8e:e5:a1:85:9b:35:45:51:2a:32:8e:b0:d7:32:38:
ea:40:10:d1:57:eb:41:84:35:48:6d:2d:c5:d0:2d:
17:36:e8:c5:24:cb:6e:3b:99:34:01:b1:c9:ee:ea:
15:b3:f4:51:45:19:23:46:d4:c3:38:7d:83:aa:16:
7c:f0:5a:f8:6b:de:6b:f2:5b:91:76:2f:f9:48:b7:
76:79:5b:11:5e:52:c1:c7:72:a8:e9:29:79:82:3f:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:DE:49:AF:44:46:77:BB:89:A4:CC:EB:4F:62:4A:69:06:88:31
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1085::/48
Signature Algorithm: sha256WithRSAEncryption
04:c2:b2:e0:4f:fa:25:45:49:61:7a:0f:aa:16:a4:d0:1f:68:
96:07:bb:e9:db:4f:ea:9c:9a:d3:1e:9c:00:93:3b:66:67:bb:
b9:aa:ed:74:8a:01:02:8f:72:56:1f:11:95:30:02:fe:d7:63:
bb:37:33:e1:b8:11:27:1f:ba:60:df:b1:87:b4:e8:e4:f0:3d:
2e:73:9e:35:b7:d6:a0:ce:58:5b:17:cb:67:d8:8f:3e:a2:82:
f5:09:58:c4:76:56:08:6d:94:7a:19:bc:91:3f:ee:8e:a8:3a:
01:bc:12:51:86:9b:ed:16:c1:96:c6:4d:b7:c1:0a:74:86:bd:
0d:b5:9b:7d:84:b2:81:f2:00:fb:f8:8b:dc:9d:3e:76:aa:8a:
5d:c4:41:fe:0d:4a:62:11:fc:02:c4:de:03:d9:78:aa:b0:11:
49:dc:4c:17:6d:1f:c3:f9:de:ce:8b:fc:08:cf:88:37:0b:26:
ad:99:91:1e:39:f1:a5:4d:60:76:ee:c0:73:b8:b6:e0:98:65:
07:7e:16:30:c8:f0:8a:8a:17:19:b1:e6:10:75:7c:63:5d:57:
00:8a:b3:27:8d:17:92:9c:ab:98:e5:36:4c:bf:a0:35:8a:4a:
23:7d:18:99:59:17:17:08:ca:3a:71:a2:d9:4a:34:66:b3:56:
44:06:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:18 2025 by rpki-client