Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205980.roa
File: AS205980.roa (raw, json)
Hash identifier: mNSt8ysE32ElUZAxDxRstpF24lef7pa/mx+0bncyOyw=
Subject key identifier: 8D:31:B2:62:70:25:89:41:69:96:4F:41:57:FD:3E:7E:47:82:DF:9C
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: E0546609660B59772AAB24B07E9A098034399A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205980.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 205980
IP address blocks: 2a06:a005:5f0::/47 maxlen: 48
2a06:a005:fa0::/44 maxlen: 48
2a06:a005:1360::/44 maxlen: 48
2a06:a005:1370::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e0:54:66:09:66:0b:59:77:2a:ab:24:b0:7e:9a:09:80:34:39:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=8D31B2627025894169964F4157FD3E7E4782DF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:69:64:3c:59:7f:2e:03:bd:f0:51:aa:03:
25:14:7e:53:16:69:d4:0b:dc:4d:7c:6e:f6:61:6c:
83:7e:a1:66:20:ac:96:6e:70:ff:17:cc:f9:0f:0a:
d7:ae:4d:a9:72:c7:11:b9:9f:e2:9a:c1:d3:eb:72:
d6:c8:92:90:b8:0b:53:24:c9:78:c6:3f:1c:63:87:
35:7c:c1:d9:f3:d8:9e:94:e2:57:83:94:82:0b:9d:
01:8c:11:92:1c:dd:3f:4a:4c:fc:27:a9:6c:3f:f6:
93:2f:fa:02:66:42:ff:bf:82:6c:4f:5b:af:37:4f:
61:d4:93:ba:e6:3f:9a:fc:7a:e8:3f:c8:18:90:ba:
63:36:6c:a1:17:7b:4b:5b:ad:b0:ca:49:61:8b:fe:
42:8d:34:7c:2d:23:6b:58:4d:c1:27:12:58:21:1e:
6d:41:84:2a:6d:b3:ee:70:dc:de:4b:c7:13:fb:03:
b8:0e:81:fb:ad:cd:54:12:c2:03:fe:bc:2b:c4:12:
d2:da:0e:46:eb:05:f0:4e:34:aa:02:ca:6f:9a:dd:
9d:f8:0b:36:c5:e1:16:bd:30:fb:9f:e9:36:77:32:
32:1e:06:ea:8d:b3:63:20:b3:ff:9e:c5:11:c4:0f:
d6:fe:44:c3:eb:3f:8b:3c:dc:0f:09:37:bf:51:5c:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:31:B2:62:70:25:89:41:69:96:4F:41:57:FD:3E:7E:47:82:DF:9C
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f0::/47
2a06:a005:fa0::/44
2a06:a005:1360::/43
Signature Algorithm: sha256WithRSAEncryption
0d:29:dc:9b:8b:7c:42:b4:c0:3b:07:d1:60:c1:f9:9f:73:cc:
73:2e:ec:ff:f9:c3:b4:4c:68:a5:ff:a7:42:7c:de:ea:23:a1:
73:a2:8c:4d:a2:fc:19:47:66:fd:bf:88:5e:37:fc:2e:5c:29:
57:4d:a9:ae:46:37:cf:8e:7c:40:0b:41:74:5a:e2:a9:38:2b:
91:a5:77:38:2e:21:63:9b:a1:c8:38:6b:ed:d6:0c:a6:d5:5d:
02:4e:46:a3:96:7f:60:1c:35:38:93:db:89:48:38:81:b7:8c:
1d:5c:09:58:31:65:a9:b1:4d:34:b1:80:b2:74:1e:9c:ad:23:
05:2f:5c:07:ac:83:a9:2f:e5:e0:f8:22:06:4d:c8:ac:3b:95:
af:ea:be:95:08:36:9f:cf:71:39:de:30:5f:8d:ac:5c:d4:f1:
6c:fa:07:e8:d5:bd:af:52:a2:3a:2e:8a:d2:ce:3c:8d:53:e8:
6a:1b:53:5d:cd:e4:b9:38:b9:b4:ab:4f:6a:e1:60:87:e1:da:
f8:40:d4:e6:4c:a8:2f:33:a3:a6:91:6e:b8:bd:d1:53:57:4c:
bf:0f:28:4e:7b:70:ec:fe:ad:b0:0a:28:45:2d:d3:c8:0b:55:
b6:bb:b5:3c:3b:f0:eb:bc:cd:14:dc:e1:9f:18:4b:17:1f:51:
b4:db:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:55:58 2025 by rpki-client