Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56808.roa
File: AS56808.roa (raw, json)
Hash identifier: GxLG6CmZl+VvVEm+N6vsN8LpolNeJMocZZ5LvY8RQBg=
Subject key identifier: 1B:A0:47:56:D5:34:59:20:2D:41:F5:1C:21:44:84:17:31:E4:95:CD
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0499A06894EA4F885BBF5B72D2D998F00833E742
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56808.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 56808
IP address blocks: 2a06:a005:1273::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:99:a0:68:94:ea:4f:88:5b:bf:5b:72:d2:d9:98:f0:08:33:e7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=1BA04756D53459202D41F51C2144841731E495CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:e2:d6:7f:42:7c:cd:8e:20:43:af:b1:74:
aa:10:04:5c:a4:95:7b:2f:0d:52:4d:b2:83:a1:ad:
01:0c:fa:8d:0d:1f:73:51:42:fc:3e:7f:02:b2:17:
1e:c2:4c:3d:52:c4:9d:f0:f2:34:5d:a1:b7:ac:07:
1d:83:34:97:9d:85:ba:bb:68:a0:b8:40:8f:9d:c7:
6c:d5:09:ed:ee:18:f4:e7:6c:25:70:75:9d:bf:98:
f1:25:27:b4:bb:3f:c4:b9:f4:b1:a8:0a:45:e7:91:
6c:29:a0:f5:03:c2:9d:77:f6:8c:d8:fc:5a:9d:27:
5a:ab:7c:e9:98:56:dc:c3:ff:f7:fb:47:35:01:4c:
15:be:09:c9:1d:d7:d3:b0:3e:32:ca:8f:3f:58:b3:
cf:71:0f:90:85:f6:07:03:f6:99:16:64:fe:4b:81:
39:7c:08:e0:a6:4f:e7:da:cd:a6:84:37:50:68:03:
91:4d:e6:37:56:6a:f3:59:99:72:5f:84:66:45:7b:
54:f0:93:65:4c:d2:28:9d:88:9f:42:90:08:99:f9:
fd:61:5f:c7:8c:ba:8f:e9:0e:a3:00:54:d4:eb:ab:
6e:e6:55:f0:13:da:42:28:35:95:c0:e4:81:10:88:
3a:97:b6:c0:4c:12:1f:a7:f6:82:62:fd:2e:ec:94:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:47:56:D5:34:59:20:2D:41:F5:1C:21:44:84:17:31:E4:95:CD
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS56808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1273::/48
Signature Algorithm: sha256WithRSAEncryption
8d:7c:ef:90:d9:06:56:ec:1f:9e:ca:f6:f2:a2:23:98:0a:53:
77:9e:ea:10:29:c5:14:f9:61:ef:f8:09:61:4c:c0:7d:13:7c:
21:47:86:dc:73:84:91:d9:6a:e2:6b:37:39:1b:33:4a:c1:07:
4c:36:95:fd:3c:a9:5f:19:fd:23:4d:74:83:85:3a:76:ee:7c:
82:64:6f:03:b5:41:fd:47:c4:05:77:35:d0:c7:c8:26:4a:18:
c8:3a:fd:b2:7a:d9:50:29:59:bc:0b:a8:a0:02:a9:2b:f0:ac:
37:f0:d2:22:fe:bd:e6:28:d6:68:b2:fc:d3:fb:f4:0e:db:12:
1c:d5:6b:87:1e:1d:53:a6:a1:61:04:cb:ec:b1:1b:39:5b:ae:
63:29:53:de:19:e0:56:32:e5:aa:55:3b:40:7e:4e:4c:a6:af:
49:70:9d:bb:13:62:8a:80:45:f1:24:d8:fe:15:16:f2:00:1f:
ba:9f:48:40:b5:42:d3:54:75:78:d4:68:1b:96:12:ad:7e:17:
9f:07:73:8a:f0:f5:d2:59:c4:04:c2:d5:45:69:47:cc:ee:24:
f1:1e:7a:be:23:2c:9b:fd:83:5d:4e:b6:ff:2e:2a:8b:0d:ce:
a9:27:9c:22:ea:25:0b:6a:6d:bc:e0:56:e7:a2:4c:72:c5:d4:
7e:55:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:15 2025 by rpki-client