Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60326.roa
File: AS60326.roa (raw, json)
Hash identifier: 50gtcaUU6SsGMNDS/zIA3lwEvvlTWp0Zn4u04eqX+tM=
Subject key identifier: E5:EC:28:EB:22:A1:A6:89:11:C5:7B:B2:4E:5B:FE:80:5D:86:3F:3D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 08D336A87251A751B697AFAF109A3DBF6DAF144A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60326.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 60326
IP address blocks: 2a06:a005:590::/44 maxlen: 48
2a06:a005:8f0::/44 maxlen: 48
2a06:a005:1060::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d3:36:a8:72:51:a7:51:b6:97:af:af:10:9a:3d:bf:6d:af:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=E5EC28EB22A1A68911C57BB24E5BFE805D863F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:18:ff:f9:4b:b8:fe:b3:f3:17:a2:3c:10:
6a:ca:c8:a5:a4:ac:82:7a:e0:1a:06:3e:1b:32:fb:
df:06:4d:24:a8:7c:f5:cc:45:f9:90:2d:14:4c:9a:
57:9c:ee:97:22:f8:4f:a6:95:49:76:04:f5:9a:cb:
a1:9a:7d:7b:a4:9b:17:05:9e:a4:c5:16:ca:03:5d:
5d:36:2c:88:c8:7c:69:c3:5b:60:9e:c2:e5:20:db:
82:22:e0:31:15:ac:45:76:29:2d:ad:1e:df:b5:15:
1c:22:71:ad:80:4b:bf:5d:7e:ba:95:c6:6c:ab:8c:
bc:e3:47:53:1f:17:19:94:d7:48:db:e0:d9:8b:1e:
5a:b2:33:a3:b5:7b:33:43:9a:eb:5d:d0:3f:1a:b9:
74:0c:d5:0f:72:96:bb:02:aa:3d:ae:72:e9:55:67:
de:68:1a:14:f4:93:9e:14:3d:91:be:87:d9:b0:51:
ff:13:10:60:a2:12:8f:d1:fe:a8:ac:9e:16:51:e6:
5b:30:6c:42:de:34:22:35:ab:f0:14:34:11:7a:58:
fa:c5:7d:68:30:e2:43:4a:56:ec:e1:e8:ee:a0:62:
1d:3e:64:cb:be:ff:30:4f:5c:cb:8a:be:b4:45:11:
27:2e:5e:3f:85:c1:63:77:f2:7e:e2:46:f2:6d:38:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EC:28:EB:22:A1:A6:89:11:C5:7B:B2:4E:5B:FE:80:5D:86:3F:3D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:590::/44
2a06:a005:8f0::/44
2a06:a005:1060::/44
Signature Algorithm: sha256WithRSAEncryption
99:af:3b:83:28:58:e4:d3:bb:ac:c3:89:df:61:63:1b:63:f1:
8a:cb:30:6f:f7:92:a8:32:b4:19:c6:cc:2b:f3:58:e9:be:8e:
05:2b:79:e6:31:9d:97:55:e6:d5:3f:23:1e:39:03:2f:f1:24:
2a:43:4a:7a:10:0e:a1:b6:8c:f1:74:49:09:16:a8:54:8b:72:
45:20:f0:57:51:a8:4d:44:b2:75:03:b0:23:88:90:05:18:74:
25:3b:4a:83:ef:48:dd:e2:5e:b1:95:47:18:77:88:91:68:42:
f3:79:db:ab:3a:5b:90:6e:f7:55:c0:6e:b1:fa:2d:cd:a7:a3:
12:4f:49:f3:d9:24:64:54:d5:68:69:0e:f7:fe:51:20:fd:5b:
d3:f6:08:44:a2:36:ed:c1:03:bb:63:fa:93:da:8d:4a:34:4d:
33:41:41:7e:d4:b3:64:01:2a:98:c6:88:a1:50:bf:da:d0:e2:
43:71:a3:23:5c:d5:67:31:61:c5:95:2c:a4:1a:9e:8c:50:44:
3e:13:d2:48:4d:1a:3f:7b:e8:aa:48:d1:4a:27:56:4e:e5:a6:
5e:b6:79:b7:92:4f:73:34:bb:4e:b4:ea:73:84:09:96:d8:78:
93:88:2a:90:8d:73:bb:c1:f4:94:cc:e0:7a:66:94:50:3b:b0:
b8:0c:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:55 2025 by rpki-client