Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57481.roa
File: AS57481.roa (raw, json)
Hash identifier: nM2fRhenfN0zoijqCpyRO5GNdaZObc/EC9yKLR/u60k=
Subject key identifier: F5:78:92:73:1B:2D:FB:8D:95:89:78:68:1E:AC:98:30:50:7B:83:86
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3C154A30E7907F4037F6D0C923EAB3627D3860E0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57481.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 57481
IP address blocks: 2a06:a005:1d20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:15:4a:30:e7:90:7f:40:37:f6:d0:c9:23:ea:b3:62:7d:38:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=F57892731B2DFB8D958978681EAC9830507B8386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:8d:66:bd:09:c5:ae:48:ec:eb:4c:e2:05:
3f:d2:55:8b:72:d5:00:ef:f7:56:de:9e:4a:3c:e7:
c1:8d:d9:0f:42:57:91:0c:a9:fd:c5:68:aa:05:91:
1c:0c:cc:21:be:fb:5f:35:cc:bf:8a:d6:49:22:7d:
27:55:0b:a1:82:a1:48:04:3e:0a:8c:48:df:9f:18:
23:0e:56:58:69:db:8f:29:9d:dd:5c:3d:26:89:65:
95:07:bb:be:73:90:87:e1:e9:95:ef:02:cd:60:bf:
47:90:8b:02:9e:a0:b0:d1:1c:21:ff:32:dd:ef:f3:
71:96:81:de:e9:4c:4c:3f:d8:d6:e8:29:7e:5a:70:
42:9f:36:b9:07:86:41:d4:23:0e:d5:7d:c4:80:7d:
28:01:d2:5f:9e:ad:37:eb:7d:58:4a:80:d5:dd:8b:
75:b6:12:d2:2d:de:a2:60:4a:df:91:07:21:c8:39:
79:3d:8a:46:7c:92:a2:d9:d3:e8:28:40:89:1a:50:
52:00:60:59:29:a0:6e:cd:5a:eb:dc:bf:33:28:d1:
6e:5d:47:b9:5b:14:50:f6:32:59:d5:1a:41:c8:0e:
5b:d3:ea:33:8c:c1:4b:7f:22:5a:a5:c4:fd:3d:a9:
e6:46:e2:18:f5:24:e2:f9:09:54:5d:92:3e:33:f1:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:78:92:73:1B:2D:FB:8D:95:89:78:68:1E:AC:98:30:50:7B:83:86
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d20::/44
Signature Algorithm: sha256WithRSAEncryption
21:49:04:3c:4b:6d:53:96:0c:fb:52:cd:39:09:6d:ab:8a:de:
71:fa:73:1d:0e:bf:ee:af:e2:30:08:af:e3:bb:a3:4e:78:9c:
a8:3a:3c:e6:0a:a7:6e:51:2a:66:49:19:94:20:a5:b7:66:5a:
5d:7a:d4:d0:97:01:62:b7:fd:0e:ba:a6:bc:5c:1f:c4:a3:7f:
83:f1:a9:88:af:9a:32:39:c2:25:f9:bc:0e:24:43:20:9c:01:
bd:1f:1b:f7:3d:71:14:c0:e7:d6:d3:fe:a4:34:d3:89:45:1a:
f1:95:be:a5:49:7f:ab:0e:62:41:ba:55:5f:bd:79:3f:22:38:
d7:b6:48:c4:2e:7e:36:f2:0b:99:2d:df:37:37:82:c6:65:8f:
59:8d:d3:cf:26:c3:cc:a6:3d:32:3b:af:04:f5:31:64:0b:f7:
f7:61:26:88:2b:63:f2:31:02:2c:da:ad:61:f4:18:d5:bd:80:
f9:e6:bb:6e:a2:81:09:34:f9:8c:5e:8f:00:e4:1d:7b:24:1d:
dd:58:79:b2:30:a5:d3:72:39:c8:49:79:3b:66:90:e9:42:d5:
fc:b6:0b:0b:d0:e2:d8:b3:3f:dc:9b:51:a4:0e:58:6f:66:d9:
10:73:53:d9:ea:5e:d5:3b:16:6f:37:59:0b:d0:07:e2:06:c1:
a7:84:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:49 2025 by rpki-client