Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130392e302f32342d3234203d3e20323033343533.roa
File: 3130332e36382e3130392e302f32342d3234203d3e20323033343533.roa (raw, json)
Hash identifier: 8f+u61K6S12WcH27hj+fxolYz+w07pF7hhzNBTvMEVo=
Subject key identifier: E7:24:16:2C:F5:F5:8C:45:A5:4D:52:29:C8:9D:DA:D7:6C:7A:82:E7
Certificate issuer: /CN=A91115900000/serialNumber=A241E7D919F0F116AC3B88FE14392042202DEA0C
Certificate serial: 0AD75861D276B7A6F14D046E211C8A1027FF4D90
Authority key identifier: A2:41:E7:D9:19:F0:F1:16:AC:3B:88:FE:14:39:20:42:20:2D:EA:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okHn2Rnw8RasO4j-FDkgQiAt6gw.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130392e302f32342d3234203d3e20323033343533.roa
Signing time: Sat 17 Dec 2022 21:13:32 +0000
ROA not before: Sat 17 Dec 2022 21:08:32 +0000
ROA not after: Sat 16 Dec 2023 21:13:32 +0000
asID: 203453
IP address blocks: 103.68.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d7:58:61:d2:76:b7:a6:f1:4d:04:6e:21:1c:8a:10:27:ff:4d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Dec 17 21:08:32 2022 GMT
Not After : Dec 16 21:13:32 2023 GMT
Subject: CN=E724162CF5F58C45A54D5229C89DDAD76C7A82E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:f0:e9:31:45:92:04:ab:be:47:3c:0b:23:
54:7f:bf:a8:2e:17:5c:ff:dc:e1:d4:c5:56:47:fd:
28:af:ed:8f:b9:04:9c:ff:5d:af:04:3f:e4:40:35:
55:d9:05:f1:45:74:ba:3f:0d:fb:55:0b:33:2e:44:
92:e4:8c:03:db:04:9c:08:00:83:85:e0:db:43:e1:
cf:bc:6c:bc:f6:7b:02:e0:e2:1a:70:4e:e3:c3:6d:
b7:d1:26:f2:86:24:e0:51:4c:11:e1:aa:d9:21:a9:
dc:d3:a4:c2:d9:44:86:cf:0c:07:00:0c:17:c1:cb:
41:50:32:0d:83:88:60:4d:10:7b:69:21:26:f1:51:
2d:23:49:05:6e:a7:e6:1b:cf:0b:6e:6f:f9:74:2d:
71:c7:4e:49:86:c2:1f:22:c0:ff:d6:ae:64:fa:b4:
25:0e:34:98:57:f4:5d:ec:a1:00:ca:6c:1c:e7:cd:
5d:25:a6:d2:37:d1:00:41:04:83:2d:72:fa:eb:78:
89:43:91:52:5d:76:d1:9b:f6:26:74:0d:b3:eb:f1:
15:f3:02:c0:04:31:59:47:81:e9:16:2b:6f:50:8d:
51:6e:9c:ab:9a:ee:26:07:a6:aa:13:d2:29:3d:0d:
33:5a:43:a2:ea:8e:b8:76:b7:41:4d:0a:53:51:39:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:16:2C:F5:F5:8C:45:A5:4D:52:29:C8:9D:DA:D7:6C:7A:82:E7
X509v3 Authority Key Identifier:
keyid:A2:41:E7:D9:19:F0:F1:16:AC:3B:88:FE:14:39:20:42:20:2D:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/A241E7D919F0F116AC3B88FE14392042202DEA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okHn2Rnw8RasO4j-FDkgQiAt6gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130392e302f32342d3234203d3e20323033343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:cf:59:3c:ea:52:10:53:b2:bb:58:48:5f:91:56:a5:57:36:
8b:2e:59:7a:f3:d5:a4:ac:af:f7:44:7d:8e:ea:25:91:c7:3b:
7f:94:87:41:ad:8a:6c:f5:c8:97:c4:11:a3:ba:55:eb:1a:6b:
d8:0d:e8:11:1b:44:47:2e:3f:d5:5c:f5:37:a9:d0:f0:5b:02:
14:45:df:3b:a9:a1:cc:f8:ad:55:09:1e:68:1f:9f:a9:d4:28:
15:5c:16:30:86:fa:d1:b4:d9:84:05:1d:cc:d6:dd:1e:69:60:
c8:ab:bb:60:17:cf:8b:26:05:cd:de:f9:b4:4b:eb:20:b9:d8:
11:9b:ae:02:15:14:f6:8a:b9:4d:1f:8d:c6:7f:24:d9:bc:9f:
cc:6e:6e:39:97:e5:ae:f0:df:c2:67:16:f5:56:7b:a9:51:7a:
de:07:08:1b:9a:cd:69:33:81:2c:f6:01:fa:5a:f0:a6:3c:b3:
b5:b2:cd:0f:8e:10:e6:49:8d:44:a0:1a:df:a2:22:31:8f:96:
bc:66:a3:80:8c:b8:16:40:a1:1b:23:c8:7a:8e:24:01:8f:0d:
4f:21:96:10:c5:5d:cd:e1:4f:f6:d0:6f:ac:30:78:00:a1:5b:
b2:2a:29:1b:23:db:5b:b3:86:22:a3:72:72:63:a7:d5:d3:79:
ab:2e:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:29:25 2025 by rpki-client