Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208753.roa
File: AS208753.roa (raw, json)
Hash identifier: 50pyoY/f306VLPGFZsPDwGKmr9aeGBTSjr73T5QYmO4=
Subject key identifier: D9:07:B3:C6:5B:77:31:E8:B4:E5:0B:93:61:D7:47:A4:6D:10:75:28
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6AA0F6C2BE8C56CABA6D28BB420FA1A851D48F70
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208753.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 208753
IP address blocks: 2a06:a005:c::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a0:f6:c2:be:8c:56:ca:ba:6d:28:bb:42:0f:a1:a8:51:d4:8f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=D907B3C65B7731E8B4E50B9361D747A46D107528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:a3:fe:05:a0:69:1d:b2:29:cf:b1:98:26:
fd:f1:c7:f6:82:86:c6:37:ce:cf:d1:7c:fb:88:41:
97:2e:80:69:42:15:4d:09:40:7f:5d:b8:cf:23:f3:
2a:ae:87:35:96:1c:d9:97:2e:bc:d3:cb:3c:f6:c0:
23:95:0e:5f:7f:cb:d4:1d:6d:9e:7a:b4:8b:dc:9e:
33:ad:95:bc:99:bc:bc:ee:cf:09:d5:b1:52:13:6b:
a3:f9:8b:11:29:d0:5e:c9:f9:4e:c7:4a:c7:3c:17:
a3:35:63:b0:e2:41:87:82:15:07:8d:c8:1f:8f:c7:
82:41:94:8c:f0:37:65:7c:67:1f:62:9a:c0:75:fb:
9b:62:4d:b7:07:6a:ad:c5:f0:2a:df:40:ed:4c:ca:
12:33:fa:0c:ef:ea:8e:5f:63:a1:3f:c6:a6:61:0f:
4a:4a:67:48:96:ed:cd:43:dc:c2:29:c9:59:33:d4:
c6:55:81:5e:8e:7a:b0:fb:19:2e:41:56:90:7d:94:
90:9f:35:ca:11:36:02:3a:cc:49:70:4f:b0:93:c3:
fa:06:b4:54:75:71:c8:b8:79:a2:39:64:18:67:e3:
15:9b:c1:7d:1f:ed:af:e1:05:73:4f:24:0a:52:fe:
07:5c:e1:43:e1:82:70:a7:cf:cc:d7:6d:37:03:c6:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:B3:C6:5B:77:31:E8:B4:E5:0B:93:61:D7:47:A4:6D:10:75:28
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS208753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c::/46
Signature Algorithm: sha256WithRSAEncryption
d9:83:74:33:f5:b4:df:64:dd:73:1f:02:d5:55:a6:89:b5:c3:
e3:57:31:a2:6f:2e:83:30:d9:ec:f4:1c:7c:f0:0d:6c:d5:54:
cd:08:2d:2f:c5:82:15:2b:16:27:a1:96:f4:96:51:0e:fa:8c:
28:59:6e:49:c6:90:c8:18:1e:04:6f:87:52:ef:9c:c1:6b:1d:
72:2a:4d:2b:ce:e8:47:08:37:6d:55:ed:0a:40:6b:6c:ff:2a:
25:a4:3a:43:91:ee:61:a8:83:b6:6b:6c:7a:8e:b7:68:2b:c0:
24:e0:21:68:6f:97:76:d1:c8:fd:bf:a2:68:7d:e3:ca:23:b6:
b1:dc:f1:9c:40:18:06:76:b7:04:66:02:53:fc:f0:c1:cb:a1:
c6:19:26:d6:f5:af:53:f3:36:a1:24:9c:55:27:ff:39:01:21:
72:16:83:48:f0:24:fa:3f:6e:f4:63:a6:83:d1:41:1a:46:9c:
a0:57:ff:b7:15:71:35:39:86:20:9b:9f:28:14:1e:17:88:c4:
a1:e6:e9:7d:38:b2:95:3a:57:1b:d2:96:f5:b0:d8:77:27:08:
e0:49:37:ac:82:3e:60:ec:92:0d:9d:30:92:c6:f3:ee:b4:11:
77:2a:51:3b:56:4d:20:d0:91:b3:a9:31:32:40:00:a8:66:53:
76:b6:df:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:07:34 2025 by rpki-client