Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS58132.roa
File: AS58132.roa (raw, json)
Hash identifier: RatHPZ2wLsC8QpSaels9ybZZYDx/BVD6ydb5VPUvNo0=
Subject key identifier: 0D:9D:60:05:00:B2:00:CA:FA:48:10:E5:4A:D5:2E:C8:83:C3:8C:AA
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2544DE65795E878C04E7A0071430AE755034201D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS58132.roa
Signing time: Wed 21 Dec 2022 16:56:56 +0000
ROA not before: Wed 21 Dec 2022 16:51:56 +0000
ROA not after: Wed 20 Dec 2023 16:56:56 +0000
asID: 58132
IP address blocks: 2a06:a005:2d9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:44:de:65:79:5e:87:8c:04:e7:a0:07:14:30:ae:75:50:34:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:56 2022 GMT
Not After : Dec 20 16:56:56 2023 GMT
Subject: CN=0D9D600500B200CAFA4810E54AD52EC883C38CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:88:00:87:87:79:fc:a7:d8:dc:2c:c3:ef:
a0:6e:1f:dc:30:9b:0d:e1:75:9d:9d:c0:ab:07:6b:
c5:01:37:e4:f4:42:43:27:9e:c8:d0:91:84:54:f8:
fe:8b:1f:e1:c7:62:cd:81:c3:6e:06:05:ec:f6:62:
8f:97:6c:da:ce:f8:2f:f3:7a:7c:49:e3:57:4b:76:
a8:4b:9f:0b:f8:a4:ae:74:35:48:ea:3f:fc:32:2d:
ab:05:9e:99:a3:bb:f6:95:35:98:59:63:34:99:b7:
bd:e9:de:f7:f8:c8:c6:40:ae:5d:da:71:90:ca:ca:
13:88:e0:2b:48:d4:35:2f:94:b5:cc:84:1a:df:80:
82:e5:71:63:32:d1:ed:7f:6b:0f:0c:26:b0:49:62:
bf:c3:07:f9:35:01:f1:99:dd:a2:41:0f:59:c7:90:
5f:c4:7b:c8:fb:14:60:91:4d:59:7c:bb:44:88:dd:
f7:61:ee:62:60:e9:52:40:34:bc:be:c3:b8:b7:31:
ac:b1:76:71:03:7d:10:9c:01:10:75:ac:a0:b1:71:
bd:80:a9:6c:89:1a:2d:93:5c:d1:0e:a8:ca:91:0a:
39:87:59:02:17:6c:8d:b2:57:b8:d7:6f:a8:7c:85:
30:75:0e:7c:c4:31:da:ac:3c:cb:d2:1a:ed:34:b5:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:60:05:00:B2:00:CA:FA:48:10:E5:4A:D5:2E:C8:83:C3:8C:AA
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS58132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d9::/48
Signature Algorithm: sha256WithRSAEncryption
c6:bf:ed:e5:70:bf:1b:2d:0d:07:cb:71:01:ab:21:c0:71:e4:
d3:fc:01:a8:c7:d8:b2:f1:36:60:bc:ae:4c:a1:e2:7c:4b:84:
57:d7:d1:19:6e:ef:ba:31:08:cf:d9:bd:d3:0b:a5:e5:f6:a6:
5a:d1:06:6e:a5:94:4d:50:34:99:a0:7d:a2:4f:38:22:db:a8:
f8:81:8a:4c:e9:41:d7:b5:e1:16:f6:2a:16:e1:25:92:ed:39:
25:ee:ee:5a:53:57:fc:9a:0e:74:d3:3e:a6:6c:24:05:03:d2:
10:b1:eb:21:40:63:48:f6:3e:b9:89:78:e2:72:2f:7d:37:da:
13:a6:6d:48:f2:48:f7:68:da:cd:86:a9:3a:61:52:c3:19:97:
54:31:91:57:92:8d:cb:b5:50:1d:61:25:ce:91:47:78:55:42:
38:4f:b1:f9:3b:24:21:e5:24:57:af:24:3b:3e:26:f4:44:64:
d4:38:72:7d:f6:32:1f:f6:c6:90:2e:93:88:19:7b:f4:1c:d5:
14:06:d6:bc:78:12:c7:04:a3:f1:3d:ff:b0:34:02:23:66:8f:
d7:cf:6d:7f:3c:ea:9e:67:09:d5:c2:a9:0f:2a:00:f3:74:9b:
9f:66:e9:14:01:d3:2f:80:25:be:84:ef:0e:e4:69:12:f1:b1:
9e:48:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:32 2025 by rpki-client