Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS58015.roa
File: AS58015.roa (raw, json)
Hash identifier: f8b4XxJtJb+xDgCZxBP1J59VtIgDwStS778+TKaDMXE=
Subject key identifier: 35:FF:0F:70:28:26:26:2B:39:3E:6F:F1:46:77:54:0D:92:FB:6E:B1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0E29023F51E718BF3E79F68889FD01C90E854159
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS58015.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 58015
IP address blocks: 2a06:a005:4dc::/48 maxlen: 48
2a06:a005:4dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:29:02:3f:51:e7:18:bf:3e:79:f6:88:89:fd:01:c9:0e:85:41:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=35FF0F702826262B393E6FF14677540D92FB6EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:7e:c9:62:63:49:04:88:d7:6b:42:d0:03:
81:c2:47:fb:2e:7f:37:cb:7f:0c:90:83:8d:c0:c0:
13:dd:00:9b:4a:bf:d2:1c:6d:f3:41:ec:c6:25:02:
fc:83:9e:9a:c2:63:4e:ae:5b:3a:bf:f5:56:c9:7e:
71:d3:36:2c:ad:b7:c1:b1:07:37:37:8b:5b:ad:60:
84:8b:f9:16:a4:39:73:4c:65:2f:18:c7:21:e7:ba:
51:b3:a7:71:0f:55:94:86:01:78:12:69:68:29:d0:
00:6e:12:76:32:8d:d7:75:90:ec:9d:3d:49:9f:60:
a9:27:44:8a:c1:e4:81:86:b4:eb:2c:25:0b:91:b7:
a1:cb:42:a5:0e:c2:7b:81:ee:0c:c9:fa:66:ba:b5:
4d:9d:b6:5d:9f:56:29:2f:4f:52:01:af:c2:f7:f1:
0d:b2:24:77:8c:5b:f9:1b:4a:25:2c:58:a4:ec:65:
84:a8:f9:34:31:df:08:88:7b:a6:15:2c:a7:72:a3:
b9:56:88:8d:10:41:02:d0:0b:cb:9f:68:d6:fe:fd:
d2:7f:f9:bd:89:b5:7a:9e:cd:c7:91:d0:c2:57:55:
23:00:a4:9c:c9:49:88:8e:90:db:15:34:a7:59:b9:
9d:dd:6d:65:84:41:ac:2f:18:63:18:a6:29:a2:08:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:0F:70:28:26:26:2B:39:3E:6F:F1:46:77:54:0D:92:FB:6E:B1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS58015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4dc::/47
Signature Algorithm: sha256WithRSAEncryption
65:61:57:df:c3:cf:63:da:c7:c8:83:8d:d4:08:b4:94:f1:8e:
bf:2f:da:6d:3a:46:9f:99:43:39:53:dd:15:d2:e1:71:d2:be:
97:a4:e8:1c:3d:69:00:52:9e:4d:c9:91:9e:b4:7a:b9:12:d4:
d2:0f:f0:2d:68:18:60:2e:e0:72:fd:e2:85:2c:fd:ca:61:e0:
8e:3f:5c:3b:fb:66:26:0e:35:72:eb:f7:15:c3:7c:21:d1:be:
20:f0:7d:e2:41:1d:ab:3f:5f:a9:d0:eb:53:02:85:be:9f:82:
0a:4f:a5:06:8b:17:ee:61:db:02:58:2e:02:d1:0f:d0:04:f7:
b1:b9:bc:86:99:37:d3:ca:0c:3c:93:70:28:3d:fc:75:fe:4c:
6c:d8:50:79:4c:d8:8b:d1:af:51:73:61:bc:16:b0:1e:68:f7:
61:9f:bb:5d:4c:1d:82:38:46:b9:ae:ec:7f:0c:34:00:f6:8d:
0c:6d:2b:a7:ff:ab:3a:b8:94:b2:b3:6e:e6:54:a7:0a:63:bb:
42:6e:0d:74:55:81:21:99:d6:c5:be:3a:5d:d4:f6:0c:06:e6:
f1:f6:e9:0b:fc:a1:70:03:8f:9f:63:2f:d1:51:57:e8:83:3c:
11:09:80:b8:c2:74:c2:ed:f1:5a:b2:66:43:74:18:63:b1:38:
98:56:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:21 2025 by rpki-client