Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57860.roa
File: AS57860.roa (raw, json)
Hash identifier: 6nZ1+WX/vyR7sncKk8WHZDDSp957Fdf8yKfxUEjYgDo=
Subject key identifier: D9:69:8E:CA:4C:7A:AD:AD:9D:3C:02:EC:F2:35:0E:B3:2B:98:98:53
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0E63F922DC3C580BECDC422FEB687D3B7691FE73
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57860.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 57860
IP address blocks: 2a06:a005:2d5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:63:f9:22:dc:3c:58:0b:ec:dc:42:2f:eb:68:7d:3b:76:91:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=D9698ECA4C7AADAD9D3C02ECF2350EB32B989853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:2f:ef:5b:08:95:3c:73:77:81:ef:c3:ba:
25:45:df:fc:97:26:9f:6e:c7:58:80:fd:e0:fc:00:
6e:06:ad:ac:a6:7f:4f:17:6d:0f:57:72:06:58:a6:
50:96:a6:84:9c:10:0f:df:02:44:e4:5d:b4:c9:de:
be:b5:70:d3:83:ee:76:7d:d5:d7:c3:27:9a:52:c6:
60:99:b5:e6:8c:73:f1:a9:42:39:0d:e2:b9:ea:ca:
f4:72:64:aa:1a:6b:76:92:55:d3:23:c4:46:c6:cd:
3b:e9:a8:64:e0:4f:46:dd:65:46:5f:3d:9f:34:f0:
74:22:32:05:eb:e6:2b:d5:87:72:d0:a6:3c:1f:c0:
7e:fb:ba:8a:23:44:67:83:75:81:11:04:ea:50:ba:
2c:8f:08:e2:e6:80:a3:f4:f6:4e:0b:a0:c6:3a:98:
1e:d3:34:3e:18:7b:2f:6a:f2:87:9c:67:d6:94:19:
36:26:38:fa:9a:6c:7a:91:12:8f:49:6a:d8:cf:4b:
40:fd:b8:de:fc:69:82:7b:c3:94:97:ea:25:18:a6:
45:54:80:de:42:52:ad:e3:cd:8d:30:ed:15:2b:71:
c0:35:1a:db:b0:ae:0d:86:d4:fe:03:b4:eb:a2:73:
2f:ef:9b:3c:a4:a0:f0:47:0a:5b:05:21:da:a2:05:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:8E:CA:4C:7A:AD:AD:9D:3C:02:EC:F2:35:0E:B3:2B:98:98:53
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d5::/48
Signature Algorithm: sha256WithRSAEncryption
d5:5f:24:61:2d:8f:80:f9:8e:5b:76:1f:99:5b:7d:a9:a1:73:
34:c8:90:d9:dc:7f:76:2b:1b:85:91:9f:5a:51:2e:dc:72:f5:
3e:fa:d7:79:53:c8:2e:d7:02:32:ae:91:19:6a:08:e4:70:9e:
72:bc:09:8a:a1:80:bb:fa:d2:77:4b:6f:90:b7:d6:fb:51:85:
c0:bd:fb:5e:b3:58:c8:77:9f:70:8d:34:1c:ae:3f:7d:5d:c0:
9e:a0:1e:c2:21:30:7e:5e:a6:06:1f:bb:26:52:aa:67:79:30:
46:98:da:62:de:72:86:7e:8b:18:6c:57:ce:0a:0e:bc:e5:79:
31:23:ab:63:20:71:94:bc:cd:66:dc:17:8f:bd:3b:ed:1f:95:
28:9e:2d:e8:47:1f:b8:3f:6c:b9:ad:bc:cc:f2:10:47:31:4e:
e2:3d:4a:2a:92:e1:3c:b2:22:5a:57:30:f9:c9:ab:ea:f2:80:
39:02:33:ae:88:e6:78:c2:e5:1d:3e:2c:a3:9f:39:ff:fb:cf:
a7:32:82:ff:a3:64:f3:f2:fa:f5:a7:f3:1d:7a:f0:35:f0:c9:
ba:2f:21:6b:d1:70:89:4c:10:d8:d3:14:92:4c:27:84:70:a8:
cc:79:09:3c:45:75:85:f6:48:91:ae:7a:74:86:44:85:80:4f:
f3:4f:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:26 2025 by rpki-client