Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS7721.roa
File: AS7721.roa (raw, json)
Hash identifier: 0r7fA2ic/lgkQTEyr0lZvXBY/mRPdTpX1BusLwRXD2k=
Subject key identifier: 45:26:2D:3D:EF:4C:AC:08:66:41:30:FA:9C:83:34:D0:94:20:5D:81
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4548F26F559FA6EB250CA62EF884607A66C8018B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS7721.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 7721
IP address blocks: 2a06:a005:220::/44 maxlen: 48
2a06:a005:230::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:48:f2:6f:55:9f:a6:eb:25:0c:a6:2e:f8:84:60:7a:66:c8:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=45262D3DEF4CAC08664130FA9C8334D094205D81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:81:c8:36:3a:f6:5e:ec:ca:f5:84:10:c1:
58:2c:6e:28:22:fd:03:12:2c:c5:c5:a3:e8:4d:4e:
b3:45:24:c5:da:70:d9:a7:c5:b5:49:0c:14:54:f4:
06:d6:b0:ac:54:76:da:8e:4c:5a:0c:aa:9d:c0:83:
19:fa:0c:7f:9c:d0:03:57:04:bc:24:75:8b:ef:f1:
55:fc:d2:d8:5f:6e:27:3b:e9:cf:37:76:e9:92:65:
77:d3:77:7e:ae:76:df:fa:bc:4e:30:c1:a1:50:f5:
04:0e:1d:99:e8:fc:33:9a:77:63:f3:2e:ef:5b:ee:
47:99:0b:f4:16:c6:4a:09:93:59:5a:63:04:81:ca:
68:89:da:3a:f1:54:c5:12:c0:43:1f:dd:56:0e:cd:
74:09:1a:15:8b:57:62:a4:76:20:1b:41:7c:e0:e6:
b3:1a:17:69:e6:66:43:ef:f9:6c:0d:7b:87:5f:51:
f4:e2:33:c2:90:21:1e:5e:67:d5:f1:bb:18:02:2d:
18:06:e4:8f:83:f5:24:a1:3a:02:2f:bc:98:87:ca:
95:dd:fc:2a:d9:dd:4d:87:64:b7:30:92:98:97:91:
ee:55:8d:7f:c4:7d:80:26:e5:3c:ea:c8:71:55:3d:
87:f1:80:08:68:f7:9b:58:d5:61:27:a5:f8:85:1e:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:2D:3D:EF:4C:AC:08:66:41:30:FA:9C:83:34:D0:94:20:5D:81
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS7721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:220::/43
Signature Algorithm: sha256WithRSAEncryption
85:0d:2f:a0:e7:d9:72:e8:6a:a7:15:e5:7d:72:63:07:18:34:
27:f9:c8:83:e9:ac:01:24:97:bd:97:87:3c:35:ae:08:3b:2b:
75:14:23:94:fc:14:74:7b:ee:91:c7:63:1e:10:5c:50:08:69:
e8:59:f7:f3:b1:33:8e:07:b3:93:51:03:17:00:84:80:c5:5c:
2c:96:65:d5:e3:d7:07:a1:c7:f7:7b:d1:5b:a3:2b:32:64:38:
e0:14:27:6b:99:f8:75:4c:37:fc:5d:bc:4e:19:75:a2:20:ef:
8c:48:e8:fb:b8:2f:8b:e9:08:07:06:da:3d:0f:ff:94:dc:36:
dd:8f:fe:b2:d0:87:07:a0:df:2d:72:38:58:3b:1a:2b:60:b0:
c2:54:30:4d:38:68:c3:b0:6b:af:b3:95:a0:96:75:de:12:66:
f3:69:fe:fa:3d:8a:0d:a4:e7:3d:7c:02:07:d2:a9:6c:3d:e6:
8d:3f:c4:c0:9b:c2:9a:9c:b7:b9:1f:5b:70:34:15:e0:52:15:
c4:c9:5f:c6:cc:86:63:30:ea:95:f1:cc:9e:75:69:bf:ce:e9:
b9:6f:f9:53:ba:82:67:c2:17:b9:fd:c4:f7:24:a4:41:b3:e4:
0a:be:08:a6:79:01:8e:14:4d:d5:2b:e4:97:e1:6f:ac:aa:1a:
61:5b:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:40 2025 by rpki-client