Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61228.roa
File: AS61228.roa (raw, json)
Hash identifier: 9SlN1tBbSNLFvhN2K+OZKTpTYsK/le1RIxt1xEluCfQ=
Subject key identifier: CC:9D:FE:30:92:03:3A:21:EB:0F:27:DF:F4:93:88:6C:83:22:90:D7
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 051A0C0AAF64AB992A73E43A71CF5009DC2A10EF
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61228.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 61228
IP address blocks: 2a06:a005:5ad::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1a:0c:0a:af:64:ab:99:2a:73:e4:3a:71:cf:50:09:dc:2a:10:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=CC9DFE3092033A21EB0F27DFF493886C832290D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:4f:ed:23:56:5f:f8:91:7c:f3:63:89:ff:
82:7e:7c:41:59:8d:b3:7e:ea:39:1a:57:23:c5:e6:
eb:6b:e2:72:86:99:8e:ac:74:91:73:3e:b5:22:aa:
9e:99:61:68:22:40:73:03:31:87:b6:b3:25:b5:0d:
b6:5c:0e:cb:93:e2:e0:fe:d9:50:6f:7c:0f:27:38:
1c:8c:fc:c4:38:63:62:b3:69:17:58:27:dc:47:6e:
be:7b:f2:ea:68:32:b8:b0:da:ae:ad:aa:aa:0a:ef:
d8:d4:9b:ec:42:10:2e:55:d1:5e:56:71:6d:d1:8a:
06:ce:7e:f1:d1:75:cf:b0:49:8b:a4:08:82:01:20:
32:4e:d7:44:d9:d1:23:e1:62:07:0e:1d:be:4c:e5:
a5:38:74:5f:ed:11:1d:2b:fd:54:c8:cf:97:d6:ea:
ed:1a:60:36:9d:80:fe:d6:63:bf:80:47:1c:5d:6d:
7a:76:e4:c1:8f:1d:14:07:49:a8:d4:ad:38:55:01:
54:67:cb:6d:4f:1d:19:fa:e7:a1:f1:e5:1a:e0:6f:
8b:a1:31:0e:b6:8f:c1:d8:1d:57:de:c9:c2:85:95:
2a:1f:91:6f:50:80:2e:20:22:57:fc:65:ce:8c:ae:
92:a8:bd:36:bb:63:93:1f:f2:b5:c7:d1:ee:a0:1b:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:FE:30:92:03:3A:21:EB:0F:27:DF:F4:93:88:6C:83:22:90:D7
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ad::/48
Signature Algorithm: sha256WithRSAEncryption
59:b6:c8:15:65:a4:84:0d:69:5b:d9:74:bc:8a:d0:ec:50:b9:
40:7c:eb:3a:70:99:52:ae:09:8c:34:46:c5:c3:8a:74:a2:c6:
4b:8a:38:48:b3:2f:e8:69:f6:34:5c:44:21:28:7a:3c:77:4a:
ad:6a:31:be:71:2c:09:be:44:8c:de:0e:7c:d1:e2:76:56:84:
08:a4:a1:37:61:71:7c:de:46:65:bf:3d:85:ee:40:7c:d0:e6:
18:3a:09:18:bf:77:a0:18:0f:2e:85:d6:d1:c2:5a:a9:62:a9:
75:b1:6e:f5:fc:a2:ff:37:d2:53:53:4d:39:e1:7c:84:6d:7b:
69:73:0c:95:c5:e3:25:de:65:3b:bb:7a:b8:c4:ae:e5:12:08:
51:23:32:c5:9f:f9:8e:60:3a:f5:34:87:bd:83:cc:57:36:07:
2f:29:ad:fb:88:25:46:60:60:8e:34:db:59:18:62:d7:08:5f:
10:8c:9d:7e:86:93:46:61:3c:94:55:d6:2e:a9:0f:94:3a:74:
ba:eb:ee:ac:4c:e8:0c:f1:4c:a9:8f:f1:25:37:7c:cf:b1:01:
3e:71:a2:c0:8c:61:a8:a4:3f:b2:ac:df:a4:2a:a0:8e:91:6d:
f0:c9:3b:e5:f3:84:91:7f:e6:c9:31:24:d7:00:96:4f:c9:93:
df:95:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:20 2025 by rpki-client