Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56696.roa
File: AS56696.roa (raw, json)
Hash identifier: jP8PRqjhaqEgpAcPVpcj1Fm89n47DWyYIp13gAz03B0=
Subject key identifier: 9E:F9:8C:C3:4E:74:2E:B4:1B:24:9B:AA:7D:11:E7:18:DA:E0:F4:F8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 32EADE6AF2012294B1A835B4193045283FB88E7F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56696.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 56696
IP address blocks: 2a06:a005:5e5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ea:de:6a:f2:01:22:94:b1:a8:35:b4:19:30:45:28:3f:b8:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=9EF98CC34E742EB41B249BAA7D11E718DAE0F4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:39:19:88:e7:bc:51:b2:a0:28:47:b1:68:
1a:eb:cb:ed:e5:2e:2d:ae:56:2d:1a:a1:42:78:41:
f9:34:91:73:99:2a:c4:bf:6e:f0:73:58:bd:e5:42:
f9:ca:d7:3a:be:4b:4a:8f:7c:98:7d:87:f9:20:fb:
7f:ca:ac:e1:ef:69:cf:81:c4:a0:6e:3f:dc:4a:d9:
39:fe:e9:9c:7f:dc:46:bc:83:a9:ac:ac:73:8e:ea:
f6:8e:30:48:a4:31:80:33:31:56:b0:94:11:3a:59:
2c:21:66:a0:41:21:28:f4:24:fd:ad:6c:da:0f:2a:
f4:34:d9:55:0d:e6:ce:4d:a7:37:43:5c:9d:b6:53:
98:9d:16:bb:76:d7:4a:c4:72:4d:43:1a:b9:59:a5:
c3:66:ae:d7:d4:90:53:c0:52:f8:c9:e2:fc:22:ae:
88:78:5a:53:53:af:d0:12:4c:e8:1c:bc:49:da:95:
ca:6f:be:a5:c7:5f:5a:fb:75:e2:6e:82:c7:f4:70:
50:8a:11:26:79:82:b3:0e:d6:7c:37:ca:2f:43:02:
5e:3e:1a:73:57:95:d6:63:2d:34:f0:5c:9c:44:13:
7d:25:33:59:be:60:ef:7f:cb:b2:f9:e5:16:3d:0c:
dc:fe:5b:fc:38:f6:bb:2c:2a:ac:04:57:7e:50:6f:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:8C:C3:4E:74:2E:B4:1B:24:9B:AA:7D:11:E7:18:DA:E0:F4:F8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e5::/48
Signature Algorithm: sha256WithRSAEncryption
2e:e9:f6:5a:7b:ce:70:e6:d1:91:b8:b3:b1:1e:45:44:e4:eb:
06:32:40:8a:cc:0d:20:68:6b:2b:88:5d:14:d3:42:16:f8:f3:
39:6b:46:aa:bc:03:44:5f:ff:ae:59:dd:70:49:17:73:49:67:
6b:aa:0d:98:60:76:98:c5:90:33:ee:ea:61:73:aa:08:8d:1c:
08:31:e3:de:be:7f:57:d1:cd:95:29:48:c3:1d:09:d2:ae:6c:
4b:e2:92:24:4d:d5:90:bf:7a:00:20:71:c0:38:30:33:af:c6:
ed:af:62:01:d7:a2:3c:a6:f6:47:4b:5c:89:d5:70:05:85:3b:
f1:1b:cd:26:e7:64:c1:b5:d3:91:de:d2:a3:cd:58:4b:13:2c:
2b:27:16:7d:5b:3f:3b:02:5c:9f:d8:bd:5c:31:70:77:7f:b4:
a7:39:d5:7a:a0:f9:77:20:d3:04:bd:ca:b4:bd:b1:8f:96:fc:
57:77:76:cb:8c:53:ed:d7:37:16:4b:41:d2:d0:20:62:60:63:
05:3e:cf:6e:80:97:20:22:e6:6b:d1:03:94:f4:1c:91:79:3b:
9f:ca:63:f7:0c:87:b2:66:d4:f4:f9:e6:6d:5f:9e:aa:c0:47:
34:14:8e:93:cc:21:78:c7:35:71:81:2c:e5:70:52:c7:58:b1:
15:10:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:10 2025 by rpki-client