Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57883.roa
File: AS57883.roa (raw, json)
Hash identifier: 0Cfx9+vWSGM0Kn1u3fNYGQod7UNBxsmwT6UPBX6KdF0=
Subject key identifier: 90:28:52:D9:A5:B2:F6:B8:D5:69:AB:DC:4D:3A:05:16:F8:62:50:52
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3BACCFC38177CADB6B31EEA1434CBAECB17CF61C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57883.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 57883
IP address blocks: 2a06:a005:110::/44 maxlen: 48
2a06:a005:120::/44 maxlen: 48
2a06:a005:130::/44 maxlen: 48
2a06:a005:140::/44 maxlen: 48
2a06:a005:150::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ac:cf:c3:81:77:ca:db:6b:31:ee:a1:43:4c:ba:ec:b1:7c:f6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=902852D9A5B2F6B8D569ABDC4D3A0516F8625052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:97:a1:a0:1f:f7:42:35:e0:ae:66:c4:2c:
d9:dd:ae:22:9e:c3:45:e5:7b:f1:25:99:8a:30:0b:
f2:72:8c:0a:b0:9d:24:35:9a:21:00:d9:e2:ff:00:
ce:8b:5b:33:7a:c1:54:8c:82:88:76:f4:52:09:2c:
e0:40:71:35:09:a4:08:d5:34:dd:e7:0c:8e:11:96:
ab:7b:a1:c3:d9:1c:1d:a4:1c:9f:d6:07:33:5b:d9:
ef:8a:ea:c1:52:2f:51:d0:3a:1e:ad:6a:45:ac:01:
6e:14:46:82:13:4e:f0:77:94:8d:72:57:45:22:30:
90:fa:8c:e5:8a:99:96:1a:3b:b2:4a:f0:ba:9b:c6:
ee:46:f5:c7:03:53:79:79:5b:84:41:a0:15:48:cc:
99:2d:b5:db:10:bc:55:96:92:ac:e9:64:77:de:8b:
80:12:7b:f4:d6:b9:ff:fa:b8:95:ad:cc:6a:1e:b8:
5d:99:69:3d:b9:9e:93:bd:58:56:91:0e:11:db:8d:
ba:47:af:54:3a:c5:d5:84:d4:17:e5:98:ed:3e:6a:
8b:75:b5:cd:a9:64:af:80:fa:ed:3f:38:41:0a:7c:
09:ce:67:30:b1:ee:f2:e3:d6:0f:d8:4c:30:8f:85:
50:69:10:c3:0f:a8:a1:a9:6f:24:a6:84:2d:67:94:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:52:D9:A5:B2:F6:B8:D5:69:AB:DC:4D:3A:05:16:F8:62:50:52
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57883.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:110::-2a06:a005:15f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:87:64:de:27:b9:15:ee:ee:a1:85:46:53:46:fe:26:da:2c:
02:45:7f:59:29:3a:2f:9e:d8:37:ff:7d:19:67:55:ca:bd:8d:
b4:1a:8d:7b:61:9a:97:23:f5:50:0b:51:a1:80:8b:de:51:c9:
bf:5c:c7:f0:07:8e:c1:36:ef:0b:51:0f:50:f7:67:17:ca:b3:
4d:e4:53:a4:4d:16:72:96:74:08:b1:b2:ff:bf:35:71:3e:b6:
4b:84:8b:3c:91:d6:ab:03:4f:ef:1c:50:46:52:1a:44:0e:e5:
d3:64:c2:60:9d:a4:4d:ad:03:d3:9e:60:6f:4f:65:7f:71:f8:
f6:b1:6f:21:fc:29:a7:9f:8f:20:9b:16:44:45:55:70:a6:6a:
15:8e:a3:95:11:d3:65:2c:76:a9:64:a0:cb:7b:e9:97:03:94:
ec:6d:c6:ed:d5:45:a6:46:9a:01:09:e4:dd:8c:59:4b:bb:87:
a4:3d:4b:25:41:83:2a:53:71:27:8e:0a:d6:1e:35:26:08:e2:
7e:54:03:69:4d:ad:aa:c7:71:ec:8e:a1:86:a2:6f:c2:3a:1e:
65:42:56:99:e2:d4:9d:cd:aa:75:de:d6:5f:6f:9e:f5:c6:12:
3f:e3:b7:46:7c:32:40:d8:fb:8f:8c:cb:cb:96:82:be:dc:cb:
a6:af:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:46 2025 by rpki-client