Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61125.roa
File: AS61125.roa (raw, json)
Hash identifier: K1Vm8sYtfvMSTgASLah8wMTXNpGSQ9EmMJYDdNIcODo=
Subject key identifier: 0F:96:C8:40:15:BD:6F:D3:ED:59:CE:BB:A1:23:30:62:CA:D9:CB:A7
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0BA17C175CE328BBE07FAC4E94D6CB5124E4B4FA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61125.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 61125
IP address blocks: 2a06:a005:a05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a1:7c:17:5c:e3:28:bb:e0:7f:ac:4e:94:d6:cb:51:24:e4:b4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=0F96C84015BD6FD3ED59CEBBA1233062CAD9CBA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:58:c2:cb:58:b3:c1:cb:e8:7a:7b:39:56:
91:79:7e:41:e9:af:1f:2a:be:58:19:12:06:9a:39:
93:1b:93:29:39:3e:4a:88:b6:5d:cc:d3:4b:76:93:
ca:ee:d1:21:10:f8:83:47:2d:c6:98:92:bb:f8:9b:
4e:e6:79:fc:78:5a:77:36:07:65:7f:82:38:d5:a2:
be:a2:c9:19:f5:f4:d8:0d:d8:ef:35:85:57:49:c7:
8e:75:a6:02:24:07:f9:84:ff:2d:e3:76:f9:47:c9:
c1:d3:24:44:f4:df:fa:6b:34:56:ef:1d:43:83:9a:
25:2e:22:4b:85:96:1f:89:4c:ca:5f:c4:69:4d:f1:
13:5a:a2:e7:e1:16:30:d8:aa:c0:49:43:d9:04:c5:
37:7c:90:ba:de:b4:c0:b8:0d:dd:73:ed:d3:fa:08:
6c:b7:03:8c:48:e9:ea:de:33:c2:6d:68:1b:2a:d1:
9f:c1:2d:82:d0:cb:aa:07:9d:83:a8:ff:79:fd:98:
76:7c:43:e9:03:4a:dd:dc:1c:fb:9e:95:53:f9:7b:
3f:18:b5:32:ee:89:6f:09:8d:26:30:9b:a4:1d:3e:
96:2d:71:b4:14:4b:49:8c:fb:99:9f:ba:97:25:aa:
2f:ca:a1:16:a5:ae:01:87:d3:f2:ae:bf:cd:49:fc:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:C8:40:15:BD:6F:D3:ED:59:CE:BB:A1:23:30:62:CA:D9:CB:A7
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a05::/48
Signature Algorithm: sha256WithRSAEncryption
8d:50:cc:16:03:a5:69:5b:07:ae:42:fb:82:9e:9b:fe:5a:0d:
33:ae:c5:f8:79:11:21:05:93:8d:6b:f1:b9:ab:9a:16:85:f7:
db:5a:94:79:6b:77:a0:a7:c8:6b:60:c9:18:8c:2e:e3:50:b6:
d7:d1:23:f3:2b:74:49:57:6a:7a:96:30:81:ac:39:48:69:ae:
34:1c:3e:1f:a0:73:a6:4a:35:e6:c3:c5:2f:90:e9:69:6b:34:
e7:e1:bb:9c:48:c3:cf:26:a7:14:cb:89:0c:1e:35:b2:67:d9:
c1:82:37:19:36:b4:19:ec:6c:c8:32:30:9f:aa:8c:b8:1b:28:
c1:1b:08:64:d5:ce:50:a8:e9:ca:6e:9c:f8:1e:70:20:02:d4:
92:b3:a4:52:fc:68:ff:7a:f5:76:6b:75:7a:76:fc:e3:d7:23:
4d:1f:94:bc:8b:27:35:98:3f:ad:84:9a:5c:80:37:8c:d6:df:
d3:9a:1b:e7:e1:65:df:b2:66:a5:c8:36:31:68:7f:fc:52:89:
be:58:d9:6e:aa:15:ed:6b:9d:b5:61:c3:d1:b2:64:58:8a:ec:
87:1c:52:4f:f6:a1:bd:17:46:ef:e0:12:23:27:ef:0a:93:00:
fe:81:74:fb:49:ad:7f:90:a9:04:b5:8b:7e:e2:63:09:6d:8b:
ab:40:5c:cf
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUC6F8F1zjKLvgf6xOlNbLUSTktPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDdaFw0yMzEyMjAxNjU2NDdaMDMxMTAvBgNV
BAMTKDBGOTZDODQwMTVCRDZGRDNFRDU5Q0VCQkExMjMzMDYyQ0FEOUNCQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAW1jCy1izwcvoens5VpF5fkHp
rx8qvlgZEgaaOZMbkyk5PkqItl3M00t2k8ru0SEQ+INHLcaYkrv4m07mefx4Wnc2
B2V/gjjVor6iyRn19NgN2O81hVdJx451pgIkB/mE/y3jdvlHycHTJET03/prNFbv
HUODmiUuIkuFlh+JTMpfxGlN8RNaoufhFjDYqsBJQ9kExTd8kLretMC4Dd1z7dP6
CGy3A4xI6ereM8JtaBsq0Z/BLYLQy6oHnYOo/3n9mHZ8Q+kDSt3cHPuelVP5ez8Y
tTLuiW8JjSYwm6QdPpYtcbQUS0mM+5mfupclqi/KoRalrgGH0/Kuv81J/O1FAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQUD5bIQBW9b9PtWc67oSMwYsrZy6cwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTNjEx
MjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAqBqAFCgUwDQYJKoZIhvcNAQELBQADggEBAI1QzBYDpWlb
B65C+4Kem/5aDTOuxfh5ESEFk41r8bmrmhaF99talHlrd6CnyGtgyRiMLuNQttfR
I/MrdElXanqWMIGsOUhprjQcPh+gc6ZKNebDxS+Q6WlrNOfhu5xIw88mpxTLiQwe
NbJn2cGCNxk2tBnsbMgyMJ+qjLgbKMEbCGTVzlCo6cpunPgecCAC1JKzpFL8aP96
9XZrdXp2/OPXI00flLyLJzWYP62EmlyAN4zW39OaG+fhZd+yZqXINjFof/xSib5Y
2W6qFe1rnbVhw9GyZFiK7IccUk/2ob0XRu/gEiMn7wqTAP6BdPtJrX+QqQS1i37i
Ywlti6tAXM8=
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:09:35 2025 by rpki-client