Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS9267.roa
File: AS9267.roa (raw, json)
Hash identifier: WidMAAT205BkHystj/QABDXt1mrYbRXXLj+afEvbKCk=
Subject key identifier: 18:67:E5:79:63:17:AC:C9:BC:C4:70:98:EF:A9:1D:39:CF:1E:71:B4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1A371C3E425B46B8EE83ADC8DF0B825E42C33C54
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS9267.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 9267
IP address blocks: 2a06:a005:200::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:37:1c:3e:42:5b:46:b8:ee:83:ad:c8:df:0b:82:5e:42:c3:3c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=1867E5796317ACC9BCC47098EFA91D39CF1E71B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:42:d1:03:33:23:17:2c:b6:0b:f9:2c:30:
e4:e7:77:59:b9:c9:6c:62:b2:99:7d:97:6e:af:68:
54:74:fb:de:c7:7a:01:84:be:4b:26:11:65:03:11:
5a:ca:65:2c:d5:d2:ef:40:52:39:e3:3b:e4:43:c8:
34:3c:70:1e:62:f3:52:d3:0a:4f:58:85:cd:d2:e5:
f7:ae:51:76:b9:6f:db:fd:44:25:6a:e7:f4:4e:49:
55:46:13:78:ea:5d:1b:50:8d:64:6e:3d:f2:7f:b2:
dd:b4:54:34:2b:6e:3d:d4:b5:a4:e7:81:2a:ec:6e:
eb:11:a8:b2:01:fe:56:75:43:4b:91:67:be:28:90:
64:aa:23:c8:e0:0c:51:1a:09:90:b5:12:d6:92:1e:
fd:76:6c:90:35:f3:a9:de:c3:0f:e1:a9:3b:0a:55:
cb:02:e8:a8:2c:1f:8e:d4:af:5f:fb:78:82:d6:2a:
d3:7b:3f:3d:4b:0e:d2:e7:97:b6:e6:5a:d8:17:a4:
f5:2d:7e:3f:e4:97:a9:c7:98:4b:27:4a:2a:01:bb:
75:e6:7e:5f:1c:32:d0:44:61:bc:4c:21:f4:a6:c4:
04:1a:22:c8:64:6c:62:70:72:64:a4:ec:2e:13:cd:
5c:64:69:06:f8:33:22:ff:49:58:0a:5e:b3:68:da:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:E5:79:63:17:AC:C9:BC:C4:70:98:EF:A9:1D:39:CF:1E:71:B4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS9267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:200::/44
Signature Algorithm: sha256WithRSAEncryption
ac:cf:86:3e:5d:25:4d:0d:28:c1:95:75:61:b4:8b:0a:bf:ab:
42:1e:bc:44:be:53:03:02:52:6c:27:a7:08:72:c2:c5:21:3f:
f6:2a:32:e9:f0:3e:20:c4:d2:1e:c4:40:76:6f:fa:47:f7:f8:
64:8e:06:ab:55:f7:b8:e0:e5:d4:fa:f5:ec:94:16:80:c0:38:
ce:62:a3:ea:8b:1e:d0:0c:2f:7e:93:3f:f2:20:12:35:ea:d4:
31:a4:19:22:72:17:f7:48:44:b9:99:5b:68:72:09:20:0f:0b:
27:71:66:9f:17:21:f3:cb:5d:ff:ac:d5:0a:51:e9:df:6c:ab:
e2:ac:71:a6:61:9b:f9:d0:39:5f:b4:87:b7:02:bd:9e:84:88:
8d:fa:21:17:7a:06:9c:a8:b5:83:15:6d:e3:66:3b:e5:79:a0:
1b:91:a6:35:f2:9f:77:58:94:48:dc:3a:8b:30:ea:e9:54:3d:
12:af:2f:48:a1:0c:bf:92:02:e9:ca:85:ca:76:41:05:e2:0b:
06:89:93:52:bf:0d:b0:16:81:ee:da:4e:cc:f8:84:c5:dc:c6:
5d:6b:e1:38:0b:e3:c1:00:c2:17:59:c9:d1:6b:13:f4:72:e5:
0a:a1:ff:63:16:a0:3f:cf:e7:95:60:63:38:df:18:ac:af:8e:
97:cb:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:47 2025 by rpki-client