Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61977.roa
File: AS61977.roa (raw, json)
Hash identifier: 5F+dfTIJmcbw+ekjYc2wq/ZROXXAcCMovywanwIO/WQ=
Subject key identifier: CF:A2:D5:D2:B3:5B:1D:31:40:CA:0E:E0:6F:FB:51:64:35:F1:E5:DE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 53DBAEA422407974661398BA5399F275482CA749
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61977.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 61977
IP address blocks: 2a06:a005:5b8::/48 maxlen: 48
2a06:a005:1da0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:db:ae:a4:22:40:79:74:66:13:98:ba:53:99:f2:75:48:2c:a7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=CFA2D5D2B35B1D3140CA0EE06FFB516435F1E5DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:61:38:a4:e9:a6:5d:f1:fc:e5:fc:03:94:
15:9a:39:a0:c9:fc:ab:57:45:b0:f8:5f:ce:68:5c:
e1:a7:58:1f:87:3c:2c:d3:5a:fc:d2:ec:71:08:77:
e2:2b:57:0b:cd:5d:ca:c8:79:ee:81:0e:06:a3:2a:
62:b3:ad:8b:a2:1a:e4:35:0d:71:d4:c1:ae:8e:c1:
f9:63:a8:47:e1:79:11:22:3f:42:70:c9:65:6e:4c:
68:46:8d:5c:2f:13:c5:7a:72:b0:88:8b:b0:e4:40:
27:52:25:10:09:a2:f6:05:e2:99:0e:49:8f:a6:4d:
5c:ab:b0:a9:04:45:50:29:64:d7:8a:0e:45:a1:c3:
3e:a7:a3:9a:6a:a0:ec:c6:5d:c3:2a:66:ed:c1:78:
b3:df:96:b1:60:af:92:70:fb:46:20:18:40:5a:4e:
21:01:23:15:34:d7:d2:c6:40:95:31:7f:92:b1:05:
6b:b4:b1:22:22:48:99:75:06:24:8e:bc:73:2c:6e:
9a:d5:9e:b7:17:69:4b:d1:75:4b:2b:8a:03:1d:93:
62:7f:78:65:bc:ed:2c:94:7d:8f:78:df:bd:e5:7d:
66:2b:3f:4b:13:cf:37:fb:0f:74:53:4b:d3:19:0a:
e5:63:34:73:13:f8:60:f7:ba:06:4a:ef:3d:06:fe:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:D5:D2:B3:5B:1D:31:40:CA:0E:E0:6F:FB:51:64:35:F1:E5:DE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b8::/48
2a06:a005:1da0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:00:6c:78:11:33:b8:67:c8:32:85:53:10:21:02:77:38:6b:
37:65:c0:b2:1f:30:eb:9e:7f:a4:18:e1:22:49:d2:2f:5c:21:
80:e1:83:59:64:d9:f8:3e:73:f8:2b:a6:08:3a:fc:b5:51:bd:
57:08:27:74:f5:55:59:b0:fe:18:73:b4:a9:26:59:af:02:b9:
3f:a7:d0:6f:17:10:42:99:d7:8a:15:d8:a7:6e:bb:7d:e0:d5:
97:43:61:db:1b:c9:2b:90:54:59:57:dc:dd:24:45:8e:d3:9a:
3b:cc:c0:9f:17:8b:be:0a:ff:da:85:92:5f:63:14:bc:05:0a:
ae:49:99:b2:84:c0:a2:b6:7e:86:cd:68:46:c0:05:59:21:56:
7f:63:03:56:9c:37:43:4f:ee:cd:21:d8:8c:70:14:df:5c:c9:
4a:eb:48:67:2c:83:35:90:c6:2e:de:7a:a5:4b:83:81:ba:9c:
b8:c3:fc:bd:b1:8d:81:2f:3c:5f:37:2f:ed:d5:f1:4b:3d:99:
55:9a:3e:3d:de:5c:ce:c6:9f:a6:f3:83:80:8d:d1:fc:48:36:
8e:d6:98:91:62:68:0a:b1:92:b1:8a:02:c6:5f:0b:5a:ac:ad:
d9:47:0a:1a:45:a9:2f:78:3f:1c:02:06:82:10:eb:0f:e8:61:
78:6d:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:47 2025 by rpki-client