Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS64264.roa
File: AS64264.roa (raw, json)
Hash identifier: MgwrWz3Fp49ZfsqdmCYWwMElYzqehXPBV/Dc7Hq39BU=
Subject key identifier: 78:77:80:57:CE:79:49:1C:1D:2D:FA:6F:B1:7E:84:EE:BE:A4:0F:94
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 48DBCD0C5C242A6FEE9DD5443B8EAA7B90176CF9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS64264.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 64264
IP address blocks: 2a06:a005:11a0::/44 maxlen: 48
2a06:a005:11b0::/44 maxlen: 48
2a06:a005:11c0::/44 maxlen: 48
2a06:a005:11d0::/44 maxlen: 48
2a06:a005:11e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:db:cd:0c:5c:24:2a:6f:ee:9d:d5:44:3b:8e:aa:7b:90:17:6c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=78778057CE79491C1D2DFA6FB17E84EEBEA40F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:98:60:d2:6c:6b:4a:64:42:5b:fb:62:86:
45:12:ca:25:39:13:2c:04:fe:a3:99:1a:fa:62:97:
16:4a:33:80:f1:ba:11:69:6a:72:30:bb:bc:03:fc:
12:2f:df:6a:94:f9:3e:40:01:08:73:d0:bf:6d:e3:
e0:9e:7a:06:79:40:c8:e9:6a:01:7b:c1:e3:b9:73:
9f:ca:25:54:00:bd:75:78:63:dc:b3:e3:a8:64:fa:
46:d0:01:8e:00:bf:33:c6:5e:b4:58:21:db:03:bb:
66:05:52:e9:2b:fb:50:18:66:0b:5b:bf:3b:80:ee:
a3:ea:19:b7:ae:7b:69:fa:30:a4:6c:8c:9e:32:1b:
d6:e2:3b:a4:84:1f:7b:0f:ec:dd:9d:2b:f7:1c:4a:
2d:30:b0:32:34:37:61:7d:0a:73:57:f0:5c:04:3e:
25:79:23:a3:d0:bc:0f:d0:30:8f:82:8f:1f:d7:cf:
2b:65:3b:fa:ff:81:47:58:dd:13:30:b4:c2:31:d4:
db:4e:ff:56:17:c5:f8:a2:a1:5f:d1:cf:4e:c9:24:
14:e1:bb:cb:fe:07:b7:bb:25:9b:7e:22:92:40:30:
30:e6:b0:48:53:a2:4a:50:d1:f9:75:8f:24:94:aa:
ea:6e:30:5a:05:71:71:07:9d:f9:a6:a0:90:03:1e:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:80:57:CE:79:49:1C:1D:2D:FA:6F:B1:7E:84:EE:BE:A4:0F:94
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS64264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:11a0::-2a06:a005:11ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b2:4c:6f:96:46:18:de:2a:c5:dd:25:a0:bb:aa:7b:26:70:e0:
31:05:df:56:6f:23:93:dd:ed:ea:78:06:0a:e0:37:b6:74:d4:
89:1f:a9:75:b4:e0:2b:b3:9b:f1:1b:ab:2d:5e:e7:45:d5:b8:
9a:61:b2:d5:ff:b1:45:dd:55:f5:ab:a8:5e:5d:d8:a0:fa:22:
00:d6:99:88:e6:61:f3:27:47:24:f5:52:0f:2a:cc:87:50:26:
6e:5e:8d:92:a7:18:50:a8:e1:91:f6:28:05:a7:a7:c8:e6:ea:
e9:0e:a5:82:5c:22:c0:b0:6f:4b:1b:18:12:74:43:52:33:43:
ad:66:6b:79:a6:0f:a5:02:62:57:a8:ec:32:17:0d:ba:65:3d:
1b:59:f3:19:3e:55:75:cd:a5:16:bf:fb:6c:26:47:d4:66:f7:
41:7d:88:3a:61:07:44:17:01:f8:1f:b9:77:f2:f7:ab:f3:b2:
91:35:15:ed:17:55:f0:04:b9:17:8a:c2:a5:1f:0b:92:92:8d:
5a:23:13:83:fd:36:57:b6:0b:54:33:cf:cf:6b:c7:df:b7:30:
c5:c3:93:c3:88:de:2c:73:e9:c6:56:76:92:b1:3a:b0:42:d0:
0f:a4:54:2f:c9:2d:d4:c7:3c:02:b6:39:00:6a:ee:b7:ea:c4:
34:02:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:05 2025 by rpki-client