Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa
File: 3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa (raw, json)
Hash identifier: bDr4NaR3J3NglH70DYZNpLUHSfuwaNg091LEfC8TSFM=
Subject key identifier: 88:F3:1A:C6:03:02:3E:33:03:8C:E9:A2:7F:47:49:E0:FB:DF:A5:FA
Certificate issuer: /CN=eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9
Certificate serial: 5F127A38409E5A97A797573C938723C9494E5535
Authority key identifier: F1:BE:EF:BC:B2:D2:57:EE:45:C5:9C:C2:43:2F:52:8E:29:C0:2A:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa
Signing time: Thu 08 Dec 2022 20:40:50 +0000
ROA not before: Thu 08 Dec 2022 20:35:50 +0000
ROA not after: Thu 07 Dec 2023 20:40:50 +0000
asID: 399122
IP address blocks: 128.254.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:12:7a:38:40:9e:5a:97:a7:97:57:3c:93:87:23:c9:49:4e:55:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9
Validity
Not Before: Dec 8 20:35:50 2022 GMT
Not After : Dec 7 20:40:50 2023 GMT
Subject: CN=88F31AC603023E33038CE9A27F4749E0FBDFA5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:c4:9f:08:2e:28:9c:8f:6f:bd:3e:28:0b:
99:50:99:a1:de:a9:92:a2:64:37:5d:b5:96:b9:25:
7f:e7:5d:2f:dc:ee:c7:ec:c8:82:c5:a2:1b:96:6c:
97:45:81:4c:11:e1:db:0c:75:a5:38:9a:b0:d1:9d:
3c:4a:ce:e9:7b:6f:8b:ab:03:51:23:27:cf:a0:c8:
79:bc:9c:63:95:4b:fd:f1:9c:ad:73:e5:25:a2:12:
0f:de:95:9c:53:f0:18:d5:87:4a:db:7e:16:aa:ee:
07:45:2f:3a:11:f4:cf:56:8d:48:cc:6a:58:5b:25:
29:53:e3:32:16:d2:7f:97:00:aa:39:3d:74:eb:21:
68:97:6d:01:87:0c:1d:1d:f4:dc:68:b2:0b:fd:34:
2a:d6:87:c9:6e:7c:40:0e:62:86:a8:ee:1c:04:98:
05:3c:f8:5d:b1:36:e7:d0:80:57:6c:54:74:b0:2d:
53:41:e8:cd:f0:a5:d6:8b:3c:39:98:db:05:ab:07:
be:3f:71:e6:3b:ca:98:8f:72:b4:ab:bc:5c:82:06:
8b:ff:2c:91:19:38:11:8b:e1:cd:4d:d4:26:f4:77:
9b:bc:ca:2d:6a:99:a9:26:49:14:f1:17:d6:0c:ec:
43:00:10:14:74:da:c5:3a:3b:fe:ea:79:70:0e:78:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:1A:C6:03:02:3E:33:03:8C:E9:A2:7F:47:49:E0:FB:DF:A5:FA
X509v3 Authority Key Identifier:
keyid:F1:BE:EF:BC:B2:D2:57:EE:45:C5:9C:C2:43:2F:52:8E:29:C0:2A:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/F1BEEFBCB2D257EE45C59CC2432F528E29C02AE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.207.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2c:1b:81:8c:0a:4f:a2:21:6b:ed:ab:3a:4a:f3:65:6d:31:
1a:c8:0f:d9:9c:13:37:07:69:83:5a:25:89:0e:b3:ea:c9:87:
6b:4b:c1:3d:4f:fe:b1:a3:09:2c:0a:56:1a:72:b2:a5:6d:d3:
83:4d:a7:87:17:fc:3b:cc:33:1f:e0:71:84:2d:0a:41:6e:fb:
4e:bc:43:ec:bf:07:1a:53:2e:6c:31:c1:72:36:43:bf:51:d6:
ce:3d:4e:7b:b5:12:30:d5:e6:32:73:04:3a:2a:76:b5:b6:c8:
63:d4:14:4c:b9:82:0a:6b:41:a0:9e:96:15:7c:4c:4f:bb:12:
2f:ea:53:71:d9:73:5c:6d:e5:3f:2b:b7:04:cc:9c:93:a4:99:
05:1e:6e:69:b4:15:70:29:8d:e6:b7:80:90:35:f7:bd:dd:15:
53:3e:dc:16:36:d3:90:35:b8:4a:57:c8:fe:38:57:e4:0f:a3:
19:88:f7:b1:d8:3b:63:19:24:2a:5a:ab:0d:71:3c:68:40:72:
c0:c3:1f:b6:b5:28:85:2c:87:58:33:b7:89:2f:a3:0f:b5:be:
14:6e:b4:fa:e7:84:df:14:99:34:f7:63:0d:c0:8c:57:0b:5e:
54:08:49:d5:3f:7a:82:81:e7:d4:8f:b7:77:46:f6:e0:64:ba:
1e:94:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org