Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60391.roa
File: AS60391.roa (raw, json)
Hash identifier: oMCVB8wartXUjoPsL8NXiM+SfTeR2VaGm4lEUJz+IGE=
Subject key identifier: FE:25:CD:69:73:9E:0E:36:E9:30:8E:C1:19:35:E6:05:D9:D2:9B:AE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5CC2BA65B0C448800B5CECC5AB457BC24A6846C3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60391.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 60391
IP address blocks: 2a06:a005:da0::/44 maxlen: 48
2a06:a005:2300::/44 maxlen: 48
2a06:a005:25d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c2:ba:65:b0:c4:48:80:0b:5c:ec:c5:ab:45:7b:c2:4a:68:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=FE25CD69739E0E36E9308EC11935E605D9D29BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:a0:b1:1f:4a:6b:ad:be:e5:ec:76:7c:24:
b2:5b:06:2a:67:71:e5:e5:f5:17:90:44:4f:c0:91:
55:68:c0:56:86:0a:01:73:1d:5c:25:dc:db:26:bd:
11:fa:6c:af:90:a6:02:37:4a:23:8c:04:01:7c:5e:
35:aa:36:7c:81:91:35:01:26:23:ed:b9:c8:3a:f0:
cf:4f:16:70:54:06:5b:13:00:ee:45:14:d7:34:4e:
13:b0:b9:6c:46:07:9e:78:43:7d:60:f2:85:dd:af:
49:ef:08:b4:83:2a:48:23:02:a5:78:58:ba:12:ed:
d0:e3:47:7f:c2:4a:06:89:8f:75:48:65:05:d3:81:
4f:88:ce:1c:53:5e:cb:9a:53:5c:f0:e3:31:38:80:
70:f2:51:fd:97:8a:31:3a:47:f7:7f:a0:b8:33:d2:
75:ca:a6:65:de:92:ea:39:47:e4:ab:c6:a8:f8:83:
49:6c:b8:3a:78:25:d1:18:d8:c5:6a:ce:9f:a9:0b:
61:74:ce:ca:dd:79:48:3c:88:a6:b8:57:6c:ef:a8:
99:8b:af:89:e7:86:5c:d8:8a:86:56:c9:26:bb:65:
f1:fc:eb:a0:e5:9b:bd:55:37:8a:1d:ef:19:bd:c1:
35:cc:a8:c8:38:c7:c8:d5:56:86:8d:1d:4c:69:39:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:CD:69:73:9E:0E:36:E9:30:8E:C1:19:35:E6:05:D9:D2:9B:AE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:da0::/44
2a06:a005:2300::/44
2a06:a005:25d0::/44
Signature Algorithm: sha256WithRSAEncryption
70:15:00:0a:d5:29:d7:9e:e3:20:19:83:d3:35:9b:57:4f:d7:
c3:76:e7:b6:e5:64:ee:2d:d1:1e:91:60:5b:3f:9c:ce:99:0a:
c7:c1:fb:8a:d5:4a:b9:cd:b3:ba:3c:81:4f:a9:9e:5a:d6:ee:
29:b4:d6:3c:65:4b:bf:f8:dc:2f:1d:d9:54:bd:cd:99:f8:81:
59:27:35:0f:a4:a0:3d:7f:e9:31:1e:e8:af:64:12:3d:47:51:
d9:af:d7:b2:c6:41:f9:29:d8:da:49:de:f8:f2:63:49:ea:69:
ab:82:7f:ac:62:4d:c9:01:60:61:52:c9:15:9e:15:7f:2d:7c:
6a:1b:69:a5:cd:7f:4b:4a:b6:a4:f7:99:5e:b2:78:b3:74:62:
30:6e:c1:e3:28:34:99:04:64:8d:ee:0e:64:d0:f0:ab:90:9e:
d8:42:57:ea:3d:b3:50:f3:3c:cc:2e:10:fc:dd:6f:7b:8e:d3:
45:b9:a6:7c:2b:e8:9e:ae:0c:da:83:ef:f4:c8:89:75:c2:9b:
2d:34:ca:98:94:f4:bc:e4:9d:a6:f4:b4:1a:27:94:8a:24:c4:
ed:b6:24:9d:4a:27:42:fa:f3:19:95:e0:62:53:aa:88:1c:5d:
ff:77:23:ec:20:aa:9d:42:fa:96:3e:e3:f4:21:86:b3:ac:5f:
ed:e1:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:09 2025 by rpki-client