Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56328.roa
File: AS56328.roa (raw, json)
Hash identifier: oF3SGzdG06yYU6ETbpNR//IMvI3D4bvWcDRfYbZHIjU=
Subject key identifier: 28:B3:C8:E8:19:4A:41:E8:B6:B6:19:7D:75:37:5A:2F:FD:41:EC:FB
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3B398110DEB79E1210C2C59C81DE0001DEB4B324
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56328.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 56328
IP address blocks: 2a06:a005:3b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:39:81:10:de:b7:9e:12:10:c2:c5:9c:81:de:00:01:de:b4:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=28B3C8E8194A41E8B6B6197D75375A2FFD41ECFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:a5:d4:67:bf:61:5e:4f:52:7c:1c:38:02:
e1:99:1d:8d:21:7a:9d:08:9f:3d:dc:4b:bd:dd:f3:
52:96:16:0c:bf:4f:a7:b4:10:5f:29:3f:75:41:dd:
aa:87:b7:18:92:ba:4d:5c:5d:31:63:ae:cf:1c:0b:
7a:ed:c1:b0:bd:3e:3d:f3:5b:40:e5:50:b2:a3:e5:
14:90:6a:3d:b2:27:35:96:77:14:65:f9:69:cb:1b:
b3:0e:94:80:a9:7d:a1:c4:bf:fc:d8:26:c8:89:24:
ea:95:78:5c:f0:cf:66:0c:d3:58:b4:be:38:77:78:
d1:85:b0:f3:bc:ba:1f:b2:36:92:93:e0:e0:96:93:
b4:2f:4c:83:68:2f:07:60:b2:aa:82:13:0a:ae:f7:
44:87:8d:47:7d:ef:c7:be:06:b6:ba:08:e5:0e:dc:
2e:c4:be:1c:ed:9d:cf:f4:a4:29:fb:ce:8e:ea:20:
60:c4:f0:cb:79:25:03:39:1d:63:f1:68:e2:58:60:
fb:7d:85:f6:de:af:92:a2:8d:ff:bf:07:1c:0a:d6:
69:a4:aa:49:df:6d:69:1e:a5:2a:1b:99:f1:3e:8d:
ce:a4:b2:77:d6:3b:19:e0:41:d5:03:96:d4:28:1b:
91:40:d2:a8:e8:16:45:87:5e:d4:a8:a8:f5:4f:45:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:C8:E8:19:4A:41:E8:B6:B6:19:7D:75:37:5A:2F:FD:41:EC:FB
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:03:94:f2:bb:c0:c7:1b:ec:5d:ff:6b:37:8e:97:ce:b6:c7:
5c:bf:f7:23:ab:6b:c6:4a:a0:60:2d:54:fa:8f:81:f0:c1:33:
49:b4:03:0e:ee:c6:ff:4a:de:5a:76:7e:8a:b7:34:20:c5:27:
15:6b:79:24:4f:83:ba:3a:db:ad:7f:25:3e:af:be:67:4c:d9:
b2:d0:2f:06:e0:5b:d7:9e:48:2d:eb:b5:01:9f:73:7d:88:6d:
93:5a:d8:3b:9e:4e:5d:31:8c:fd:9c:4d:4d:f3:ab:bc:2f:75:
d1:b0:93:19:52:79:37:0e:d6:5e:76:ab:93:9b:dc:92:5e:a6:
46:0c:64:03:d9:a0:2f:ee:22:d9:4b:dd:14:b6:e0:b5:5d:5e:
96:06:0b:d3:58:a5:ee:03:45:24:57:19:ac:e6:30:29:87:ab:
d1:cf:23:b1:bf:66:1a:b9:0f:85:d5:25:54:a1:af:c5:1d:33:
6c:a8:de:0f:15:75:63:8f:6e:1a:2d:5e:74:b8:19:70:2f:90:
a6:6c:e7:71:48:07:55:59:2b:6f:b4:e8:92:22:32:c4:fa:ef:
89:54:fc:f5:ad:b8:be:75:b8:8c:d2:4f:e4:1f:2c:a8:28:46:
9b:fd:17:79:1e:be:ab:11:4e:1a:e3:34:4f:02:0b:6c:a1:fc:
24:65:50:77
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUOzmBEN63nhIQwsWcgd4AAd60syQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTBaFw0yMzEyMjAxNjU2NTBaMDMxMTAvBgNV
BAMTKDI4QjNDOEU4MTk0QTQxRThCNkI2MTk3RDc1Mzc1QTJGRkQ0MUVDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oqXUZ79hXk9SfBw4AuGZHY0h
ep0Inz3cS73d81KWFgy/T6e0EF8pP3VB3aqHtxiSuk1cXTFjrs8cC3rtwbC9Pj3z
W0DlULKj5RSQaj2yJzWWdxRl+WnLG7MOlICpfaHEv/zYJsiJJOqVeFzwz2YM01i0
vjh3eNGFsPO8uh+yNpKT4OCWk7QvTINoLwdgsqqCEwqu90SHjUd978e+Bra6COUO
3C7Evhztnc/0pCn7zo7qIGDE8Mt5JQM5HWPxaOJYYPt9hfber5Kijf+/BxwK1mmk
qknfbWkepSobmfE+jc6ksnfWOxngQdUDltQoG5FA0qjoFkWHXtSoqPVPRVolAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQUKLPI6BlKQei2thl9dTdaL/1B7PswHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTNTYz
Mjgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQqBqAFA7AwDQYJKoZIhvcNAQELBQADggEBACoDlPK7wMcb
7F3/azeOl862x1y/9yOra8ZKoGAtVPqPgfDBM0m0Aw7uxv9K3lp2foq3NCDFJxVr
eSRPg7o6261/JT6vvmdM2bLQLwbgW9eeSC3rtQGfc32IbZNa2DueTl0xjP2cTU3z
q7wvddGwkxlSeTcO1l52q5Ob3JJepkYMZAPZoC/uItlL3RS24LVdXpYGC9NYpe4D
RSRXGazmMCmHq9HPI7G/Zhq5D4XVJVShr8UdM2yo3g8VdWOPbhotXnS4GXAvkKZs
53FIB1VZK2+06JIiMsT674lU/PWtuL51uIzST+QfLKgoRpv9F3kevqsRThrjNE8C
C2yh/CRlUHc=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:30 2025 by rpki-client