Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS945.roa
File: AS945.roa (raw, json)
Hash identifier: IYAkQNEe4jM0/kemwhHuNdrb+zBXIHYVpqVUXEqpxuU=
Subject key identifier: 12:18:F0:4A:AA:8E:12:8A:D2:18:7D:90:F5:DF:FB:2A:97:D3:4F:0E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 50F9213DBF013C85ABAFC4D401D9B3FC913BE510
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS945.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 945
IP address blocks: 2a06:1280:b00b::/48 maxlen: 48
2a06:a001:b00b::/48 maxlen: 48
2a06:a006:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f9:21:3d:bf:01:3c:85:ab:af:c4:d4:01:d9:b3:fc:91:3b:e5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=1218F04AAA8E128AD2187D90F5DFFB2A97D34F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:d1:5d:dc:ca:12:d9:3c:e5:97:de:1b:1b:
b1:16:c5:79:b6:ef:1f:00:b9:5a:ae:73:ce:9c:0e:
7d:34:df:61:7b:65:8a:d4:84:09:1a:27:8e:3d:ac:
bb:8c:95:34:60:15:98:71:b3:ab:52:f2:93:e8:30:
90:5b:08:7f:64:b9:38:fa:32:21:85:b6:af:b0:db:
ac:b9:2d:53:50:1c:c4:1c:a7:36:66:f3:be:83:2b:
5e:c4:b8:44:0f:39:9d:c6:28:39:38:9f:cb:19:21:
9b:31:50:f0:67:82:d2:c3:47:b9:d1:8f:60:14:4e:
b9:da:8a:e4:75:0c:d7:9f:84:58:cf:88:4c:e4:77:
88:13:e4:87:73:1f:ff:fc:71:88:e5:d1:72:5c:cc:
08:ef:56:f5:8b:01:a8:90:4f:59:e9:8e:03:24:ef:
f5:fa:76:07:4c:1f:d7:26:d3:ed:dc:22:35:2f:84:
97:33:79:92:38:1c:c7:16:0d:7e:38:83:03:1c:a1:
be:02:9c:c8:a7:0d:71:6b:4e:bf:ac:29:2a:7b:83:
ca:8e:70:4b:41:f1:0d:f0:21:8d:a9:28:c2:e2:a3:
37:ea:7a:5e:a3:34:e3:fd:1c:31:3b:94:2d:86:8e:
e7:c0:23:78:2f:74:aa:6b:b3:31:56:f4:8b:aa:14:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:F0:4A:AA:8E:12:8A:D2:18:7D:90:F5:DF:FB:2A:97:D3:4F:0E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS945.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:b00b::/48
2a06:a001:b00b::/48
2a06:a006:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
de:14:97:6d:dd:eb:ea:cf:e8:51:93:6d:6e:b8:b4:e1:01:8d:
27:13:d5:04:cb:42:85:0b:5d:67:e7:d0:81:7a:d6:16:53:a4:
50:e0:39:fe:e9:11:2d:2c:1a:89:22:4f:b5:01:e8:d4:0e:33:
f4:c2:ee:c3:86:41:54:80:9b:f1:a2:e8:54:73:b9:7b:cc:90:
c4:07:cd:a4:fa:86:da:2c:ad:9a:95:d7:45:b2:45:bc:27:c4:
b4:62:3b:d8:2c:a3:d7:70:cd:50:67:13:b2:a8:80:9a:b5:62:
d6:d3:9e:7a:82:c0:3d:e7:0b:03:c8:7d:c3:7c:8b:ae:12:40:
e3:c0:50:9f:df:3c:64:06:09:37:8f:db:6c:97:d8:88:bc:b1:
b8:96:f7:d4:0d:aa:11:4d:47:96:a2:27:2d:28:12:0c:bb:db:
1a:4c:a5:0d:11:cb:b6:c4:68:68:4d:8e:f7:75:79:5d:be:d9:
d1:a3:ef:6d:cb:50:10:d0:06:a8:29:01:b8:34:b4:63:1a:ab:
fe:2e:cc:44:b9:8c:32:98:df:e5:77:97:9f:5a:fa:c0:4d:c0:
93:0c:90:e7:12:f8:be:a6:eb:10:58:d8:0e:29:ff:a5:b7:68:
78:89:52:5d:61:71:98:d3:8f:e6:0e:c9:2a:f6:5f:6f:57:22:
d1:74:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:06 2025 by rpki-client