Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54681.roa
File: AS54681.roa (raw, json)
Hash identifier: EBsKZ8WDoN2RcnClbhknvuZCASuQ8iMWXx+bqK/n9O0=
Subject key identifier: EE:21:70:93:8C:3D:39:DA:6C:F9:20:E8:CC:28:FA:4A:53:7A:18:BB
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 60713C5BB1C6AF8F87081E9AEBA717C4451E1FD6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54681.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 54681
IP address blocks: 2a06:a005:ee0::/44 maxlen: 48
2a06:a005:ef0::/44 maxlen: 48
2a06:a005:f00::/44 maxlen: 48
2a06:a005:f10::/44 maxlen: 48
2a06:a005:f20::/44 maxlen: 48
2a06:a005:1506::/48 maxlen: 48
2a06:a005:18a0::/44 maxlen: 48
2a06:a005:1950::/44 maxlen: 48
2a06:a005:1960::/44 maxlen: 48
2a06:a005:1970::/44 maxlen: 48
2a06:a005:1980::/44 maxlen: 48
2a06:a005:1c7e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:71:3c:5b:b1:c6:af:8f:87:08:1e:9a:eb:a7:17:c4:45:1e:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=EE2170938C3D39DA6CF920E8CC28FA4A537A18BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:7a:88:2f:68:77:08:96:74:89:fe:c4:77:
3a:c5:86:38:47:7a:45:61:55:30:2a:c1:4a:27:c5:
3a:b7:50:80:af:2f:d3:0a:4c:07:d4:f3:66:60:02:
14:db:4c:e9:02:5d:db:03:61:c0:10:5b:39:fe:e2:
ae:bf:0c:55:f1:49:e8:6c:aa:0a:00:d1:40:23:3f:
84:01:61:59:d3:bb:1f:4a:2f:86:80:b7:3b:88:e4:
cf:d5:b3:ba:3a:13:d1:37:b0:6e:28:ea:90:fb:63:
13:c4:4c:99:5e:f0:e2:e5:3d:e5:e7:30:db:3a:fb:
9c:5b:0e:aa:d1:16:13:56:72:7d:d6:0c:21:2d:38:
b2:65:43:e7:61:31:4f:27:75:75:e2:20:1c:da:12:
3e:79:69:67:5a:90:06:75:e4:e4:50:94:3a:65:eb:
a1:ba:e6:71:8a:16:e4:26:e9:f4:c6:8b:b2:4d:89:
4e:b4:d2:16:dd:e3:93:58:61:92:2c:e1:f5:53:30:
9e:0d:a0:d6:26:75:0c:17:d8:0e:4b:a3:e8:6a:05:
cd:19:86:75:8f:67:2a:d8:d1:2f:09:4a:dc:11:d9:
fa:39:f9:07:be:a9:69:88:e3:6b:ce:1a:ed:59:27:
92:75:f2:9a:38:57:f5:60:6a:ad:9c:7b:85:ff:e2:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:70:93:8C:3D:39:DA:6C:F9:20:E8:CC:28:FA:4A:53:7A:18:BB
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1506::/48
2a06:a005:18a0::/44
2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1c7e::/48
Signature Algorithm: sha256WithRSAEncryption
22:08:e2:c7:52:f6:83:91:f6:ee:41:6b:9a:56:75:be:ec:76:
d8:6a:1f:af:55:45:da:26:28:bf:1c:ce:d7:15:12:f3:92:40:
91:1a:72:35:0b:37:c4:be:a4:c7:85:2d:e4:9a:24:a2:0c:8b:
d2:45:83:50:78:97:8d:5c:b1:34:6f:cd:32:8a:36:c9:e1:1f:
f2:d0:d9:ab:e2:9e:a0:4b:c8:a0:e6:26:c4:7c:90:40:6a:b0:
5d:09:fd:6c:73:2d:1f:45:98:78:80:c3:1e:e7:d1:ba:05:2c:
e0:70:01:e0:bd:75:b7:b2:85:97:76:8e:d1:9d:0b:be:81:3d:
c9:7e:78:81:81:1b:9f:a5:7c:dc:db:d4:ec:fd:f4:ff:2e:3d:
5e:8d:dd:f3:d4:97:f3:33:57:23:fc:30:c3:63:14:d9:9d:71:
f7:79:99:fc:15:ee:9b:a1:6c:6d:3e:e5:ae:5c:44:5a:a6:53:
94:9a:56:50:15:e8:56:e0:51:a4:5d:a3:b2:84:e1:aa:a8:16:
ac:04:d7:c1:68:01:4a:ce:24:3f:06:64:5f:a1:10:32:4a:f2:
84:91:77:a2:e6:c6:fe:81:26:c9:0c:cc:44:e8:2c:bd:06:09:
18:3d:aa:48:a9:cb:a8:6e:22:7c:ee:ee:e6:62:3b:68:6d:f2:
59:62:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:46 2025 by rpki-client