Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3233203d3e20333936383831.roa
File: 3139322e3133382e3231302e302f32332d3233203d3e20333936383831.roa (raw, json)
Hash identifier: b7AhKK8i0/zrxg0/hhk4KHCk3eN9O7AWMse32BTTTUM=
Subject key identifier: 40:86:5D:A4:A8:A5:23:76:69:B9:E2:5A:D3:65:F5:DB:20:11:90:E7
Certificate issuer: /CN=eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9
Certificate serial: 563B85311A0139332729401DD2E003F5235259E7
Authority key identifier: F1:BE:EF:BC:B2:D2:57:EE:45:C5:9C:C2:43:2F:52:8E:29:C0:2A:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3233203d3e20333936383831.roa
Signing time: Thu 08 Dec 2022 20:40:42 +0000
ROA not before: Thu 08 Dec 2022 20:35:42 +0000
ROA not after: Thu 07 Dec 2023 20:40:42 +0000
asID: 396881
IP address blocks: 192.138.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3b:85:31:1a:01:39:33:27:29:40:1d:d2:e0:03:f5:23:52:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9
Validity
Not Before: Dec 8 20:35:42 2022 GMT
Not After : Dec 7 20:40:42 2023 GMT
Subject: CN=40865DA4A8A5237669B9E25AD365F5DB201190E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:66:8f:13:66:0a:64:db:4e:22:ef:89:50:
ec:2a:5d:1a:fa:7d:5d:17:da:69:95:7b:21:04:7d:
90:f2:40:29:57:59:a6:c7:9d:22:c1:ee:45:3e:bc:
bb:61:3c:e5:0a:92:05:16:cc:27:24:2d:95:53:4d:
01:7a:0f:db:21:92:77:67:d7:08:81:df:b0:e4:0e:
f7:97:35:df:aa:9f:c3:ee:e3:38:f8:85:db:b3:a3:
7d:df:d4:78:44:ff:12:09:f5:d2:e0:0a:dd:57:b8:
0e:4d:93:34:6c:37:c6:75:a2:44:57:d2:87:ac:36:
34:d1:e4:4b:98:0f:2c:52:17:08:71:60:96:d9:a5:
21:8e:95:60:14:64:d2:24:6f:4c:5e:a6:5f:3c:d3:
6b:b2:ea:3c:3a:bb:b1:63:52:c9:26:d5:6c:db:7e:
b9:62:4a:c9:c4:64:66:4b:1c:74:f7:23:57:b5:ef:
df:eb:a4:b1:07:63:6c:30:b0:2b:0f:5e:e0:d8:4e:
1a:51:89:62:97:3e:01:87:00:7d:b7:f1:a4:50:38:
a3:bc:a5:1b:07:b5:6e:4b:8a:32:db:e1:13:93:d6:
6e:46:9a:74:77:7b:ee:f2:c6:f1:a6:78:42:88:ff:
4c:58:a5:f5:4d:ab:47:0b:58:ed:a4:f2:6c:9e:a9:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:5D:A4:A8:A5:23:76:69:B9:E2:5A:D3:65:F5:DB:20:11:90:E7
X509v3 Authority Key Identifier:
keyid:F1:BE:EF:BC:B2:D2:57:EE:45:C5:9C:C2:43:2F:52:8E:29:C0:2A:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/F1BEEFBCB2D257EE45C59CC2432F528E29C02AE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3233203d3e20333936383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.138.210.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ce:bf:4e:74:4f:c8:4d:61:21:1f:22:71:08:cc:92:1a:be:
13:4f:3a:0c:b5:7b:90:02:dc:31:16:15:8d:54:a5:2b:db:aa:
b7:1f:ca:7b:36:98:2e:af:01:d1:7b:56:c5:99:98:9b:32:f4:
e4:a5:31:49:bf:a0:a0:43:e8:6d:07:4b:4c:0b:b4:8e:46:b4:
fc:dc:8d:fe:0d:dd:39:db:28:e0:4c:85:45:b5:91:f2:cb:e4:
79:8b:dc:67:f9:53:f2:8e:9a:99:24:39:ac:f7:a6:23:e2:ab:
80:7b:2c:8e:b0:5f:ed:12:03:07:fa:e3:cb:51:1f:33:7e:48:
98:d1:db:24:4d:ad:96:a4:39:ec:79:52:cc:3d:c5:40:42:2f:
1b:12:30:60:bd:16:d9:0a:f1:54:72:0c:d9:78:75:e1:15:c0:
1e:19:ff:e6:d2:9a:88:3b:91:f1:1a:65:df:09:93:c4:7e:8c:
b2:dc:e1:5b:a8:fb:da:82:2d:0c:4a:6b:c0:f6:1f:55:9b:25:
38:22:3c:af:f7:ca:e4:dc:90:02:b5:02:ec:5a:1a:89:06:c0:
ea:65:78:4f:6a:e6:1f:72:98:aa:20:86:20:9e:5a:23:56:67:
ad:61:e8:4c:ee:f7:21:cd:b5:9e:83:d8:93:3e:68:48:a8:89:
d8:c7:59:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org