Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61004.roa
File: AS61004.roa (raw, json)
Hash identifier: wofeCpSsJzbZrjJrahe/RNR3YUyYWI0DU2Acfp1nfoQ=
Subject key identifier: E1:ED:6B:EF:69:20:AB:E7:7D:70:4C:4A:8D:ED:7A:4F:DE:DC:B3:A6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 14CB2F0A890E76FBF042A98D7C3AF68F5A38DF2B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61004.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 61004
IP address blocks: 2a06:a005:5aa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cb:2f:0a:89:0e:76:fb:f0:42:a9:8d:7c:3a:f6:8f:5a:38:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=E1ED6BEF6920ABE77D704C4A8DED7A4FDEDCB3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:b4:27:65:42:56:ff:58:ca:cb:34:e8:b8:
34:83:e4:f2:ee:3a:9d:b3:cb:69:ce:4f:c0:4b:d5:
ef:02:c4:e6:60:94:0e:a8:1b:c6:8e:2d:b5:f5:4a:
35:3c:cf:92:3c:bd:47:36:c3:89:17:3c:c3:5e:bb:
a5:45:7c:46:db:e3:fd:01:0c:f8:50:45:35:26:8c:
c4:a3:e9:2f:2e:15:47:0f:2d:a4:31:33:71:22:84:
b1:8d:43:a1:0f:46:17:db:43:84:92:68:17:f8:07:
2c:4d:55:c0:07:48:78:bd:94:8d:fe:f9:a5:03:e2:
9b:0e:70:5c:4d:70:b1:3f:88:be:31:17:42:49:83:
8d:69:bf:af:79:66:f1:12:93:06:fd:47:53:a3:01:
70:cc:6b:81:56:6a:fb:c5:75:76:d5:d2:2e:aa:16:
97:b6:31:5d:34:f1:1f:df:77:c2:bc:16:30:16:09:
08:87:a9:bd:04:c0:64:1c:68:37:7e:e4:b4:8d:cb:
89:7f:60:9f:38:d6:65:f1:c0:f6:af:8d:f5:4e:10:
2b:7b:fb:00:2c:c8:dc:f5:03:a0:ff:fb:e0:75:99:
39:c6:cb:0e:1b:ba:15:a7:22:59:ce:63:67:a4:95:
75:03:66:ac:cd:e2:f8:ab:83:23:59:99:ce:13:9f:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:ED:6B:EF:69:20:AB:E7:7D:70:4C:4A:8D:ED:7A:4F:DE:DC:B3:A6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5aa::/48
Signature Algorithm: sha256WithRSAEncryption
87:aa:16:f1:69:cc:31:79:a5:74:4c:8a:07:56:4a:61:a1:b4:
41:69:bd:0b:fa:70:08:3d:7e:3a:81:a8:b7:4d:45:12:88:d5:
74:20:b6:45:9c:f0:99:f8:09:20:ef:4e:d0:b7:ff:e9:17:3a:
7f:f2:30:1a:fc:2a:e6:d6:f0:e6:81:1e:76:40:99:88:5e:64:
d7:d5:4f:8f:5e:1c:48:b0:f8:0f:93:c4:64:15:5f:9f:e6:17:
56:9d:d9:fa:5d:ac:0e:ec:09:f4:05:f6:fe:bc:04:b0:10:d5:
4c:57:28:20:c9:88:d8:14:7d:e7:0a:61:f9:46:f3:e0:aa:02:
c4:3c:91:b3:a2:80:a4:95:30:19:f3:33:79:db:5f:27:b9:de:
88:d4:18:af:f0:97:b7:f3:39:0d:57:a0:91:9b:53:33:b1:b3:
23:43:b6:62:b3:4c:2b:1a:cb:01:d0:58:c4:19:fd:e9:7d:52:
32:dd:cc:a5:d6:1f:a5:c4:44:cd:91:19:ef:75:e9:79:0f:0d:
a1:fb:60:02:eb:99:4f:55:99:c9:06:e5:3e:43:93:38:42:44:
ab:65:ef:df:84:12:2d:da:07:f6:5e:33:e5:b3:ef:75:9e:b8:
80:de:73:43:58:a1:b8:95:5a:c9:24:0d:f8:e6:17:24:3a:a9:
0f:a1:5c:b1
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUFMsvCokOdvvwQqmNfDr2j1o43yswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTRaFw0yMzEyMjAxNjU2NTRaMDMxMTAvBgNV
BAMTKEUxRUQ2QkVGNjkyMEFCRTc3RDcwNEM0QThERUQ3QTRGREVEQ0IzQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8T7QnZUJW/1jKyzTouDSD5PLu
Op2zy2nOT8BL1e8CxOZglA6oG8aOLbX1SjU8z5I8vUc2w4kXPMNeu6VFfEbb4/0B
DPhQRTUmjMSj6S8uFUcPLaQxM3EihLGNQ6EPRhfbQ4SSaBf4ByxNVcAHSHi9lI3+
+aUD4psOcFxNcLE/iL4xF0JJg41pv695ZvESkwb9R1OjAXDMa4FWavvFdXbV0i6q
Fpe2MV008R/fd8K8FjAWCQiHqb0EwGQcaDd+5LSNy4l/YJ841mXxwPavjfVOECt7
+wAsyNz1A6D/++B1mTnGyw4buhWnIlnOY2eklXUDZqzN4virgyNZmc4Tn9wtAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQU4e1r72kgq+d9cExKje16T97cs6YwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTNjEw
MDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAqBqAFBaowDQYJKoZIhvcNAQELBQADggEBAIeqFvFpzDF5
pXRMigdWSmGhtEFpvQv6cAg9fjqBqLdNRRKI1XQgtkWc8Jn4CSDvTtC3/+kXOn/y
MBr8KubW8OaBHnZAmYheZNfVT49eHEiw+A+TxGQVX5/mF1ad2fpdrA7sCfQF9v68
BLAQ1UxXKCDJiNgUfecKYflG8+CqAsQ8kbOigKSVMBnzM3nbXye53ojUGK/wl7fz
OQ1XoJGbUzOxsyNDtmKzTCsaywHQWMQZ/el9UjLdzKXWH6XERM2RGe916XkPDaH7
YALrmU9VmckG5T5DkzhCRKtl79+EEi3aB/ZeM+Wz73WeuIDec0NYobiVWskkDfjm
FyQ6qQ+hXLE=
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:15:47 2025 by rpki-client