Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
File: 3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: uqVa94CXpBmWc4VmPQ4YU/6C3Th3fUYBWQhyWAPdFwM=
Subject key identifier: 6F:2C:4F:AE:9F:9B:BE:9F:67:FE:4B:80:6D:16:86:7E:97:E2:A8:2F
Certificate issuer: /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial: 14B966AFA9498FBAC55AC64D71E0E9C57FDE37B0
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
Signing time: Fri 23 Dec 2022 13:05:07 +0000
ROA not before: Fri 23 Dec 2022 13:00:07 +0000
ROA not after: Fri 22 Dec 2023 13:05:07 +0000
asID: 61138
IP address blocks: 103.68.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b9:66:af:a9:49:8f:ba:c5:5a:c6:4d:71:e0:e9:c5:7f:de:37:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Dec 23 13:00:07 2022 GMT
Not After : Dec 22 13:05:07 2023 GMT
Subject: CN=6F2C4FAE9F9BBE9F67FE4B806D16867E97E2A82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:d6:26:9b:d9:df:67:a2:77:f9:84:20:71:
7a:4e:81:50:e5:6c:22:9a:ff:39:68:40:46:70:7a:
02:aa:71:d4:89:cf:13:73:99:1e:3d:91:6e:77:25:
5b:11:83:8a:21:f8:95:43:5b:78:31:c4:71:bc:c9:
36:b3:b1:b6:a6:ab:e9:4e:c9:97:52:62:7a:59:89:
be:ba:24:58:21:e7:a2:c2:b1:40:b7:aa:ef:c8:91:
5c:fe:65:09:88:b6:ce:74:f5:95:b3:28:03:2c:ad:
6e:0d:b8:5e:5a:7e:38:43:08:cf:59:a9:13:4b:fc:
34:6e:3e:6f:b3:8e:ef:15:3e:6f:98:0a:d6:16:6f:
5d:d7:72:9e:eb:32:0f:9b:19:c8:83:d8:81:57:4b:
fd:e9:f9:c5:2a:dd:ad:6f:df:d6:bd:d3:d5:9b:74:
15:25:15:2a:9c:30:72:57:71:f1:3f:3f:e2:16:1e:
ea:e4:f5:d5:15:46:06:20:fd:f8:a2:02:ed:2c:7d:
06:1e:24:f6:a4:19:73:48:63:e9:ab:76:68:f3:e9:
4b:23:ce:2e:19:99:fc:43:91:93:c8:7a:f8:a7:ac:
b8:ea:fa:80:5d:e0:db:da:f3:05:ae:89:b4:1e:0d:
0f:d1:fb:c7:ad:d2:21:97:62:da:f3:5f:81:49:3b:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:4F:AE:9F:9B:BE:9F:67:FE:4B:80:6D:16:86:7E:97:E2:A8:2F
X509v3 Authority Key Identifier:
keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:01:72:1e:13:42:b7:e2:0a:28:87:aa:fc:47:3f:e9:77:63:
e8:cb:1e:bf:93:a3:28:d1:67:32:e8:57:32:41:f4:05:0c:bd:
13:5b:e6:1f:3a:d5:d4:f2:56:8f:e5:ae:b7:c6:a5:55:bd:9f:
ee:60:9a:09:98:7b:8c:28:7d:e7:04:42:a2:92:4c:e1:75:85:
4d:6a:3b:08:2e:fd:4f:bf:b0:08:8f:a3:b2:33:41:6a:c0:bf:
70:06:3c:db:cd:b6:39:c8:92:64:6f:e5:dd:cc:ac:10:40:57:
5f:d0:5d:1f:df:35:04:af:37:16:33:1f:ec:a5:6f:0a:e9:69:
dc:c6:bf:25:84:fa:6b:e2:48:ba:a1:cf:ad:14:20:d3:6b:68:
4e:c9:fe:6f:d6:69:87:f4:ec:78:72:af:e9:00:9f:f2:86:89:
f0:66:5e:ab:51:05:e7:5c:e3:38:ad:1f:8b:7d:be:5d:7a:5c:
ec:a8:0c:ac:78:b4:34:97:d8:ee:20:a5:c2:cc:2e:21:79:5e:
f3:9a:db:a8:4c:f0:2f:dc:8d:32:c7:85:b9:66:43:fd:72:ec:
5b:8d:76:95:85:79:d8:55:f1:59:1e:30:ae:64:3f:63:01:86:
9a:f2:45:48:6e:47:ac:36:30:3f:88:f9:ca:f6:98:1f:48:45:
5d:29:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:49:46 2025 by rpki-client