Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
File: 3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa (raw, json)
Hash identifier: e2n687zMium1PjPrzqJPGkMmZwnDFYMGlC2nTICiTPQ=
Subject key identifier: 6B:7C:94:56:16:8C:FB:3E:8F:23:73:47:1E:A2:79:DE:2C:0D:4D:FF
Certificate issuer: /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial: 6780A2BAFEC6D665513DDA69C261CF3206E64723
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
Signing time: Wed 21 Dec 2022 16:56:57 +0000
ROA not before: Wed 21 Dec 2022 16:51:57 +0000
ROA not after: Wed 20 Dec 2023 16:56:57 +0000
asID: 396881
IP address blocks: 192.138.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:80:a2:ba:fe:c6:d6:65:51:3d:da:69:c2:61:cf:32:06:e6:47:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Validity
Not Before: Dec 21 16:51:57 2022 GMT
Not After : Dec 20 16:56:57 2023 GMT
Subject: CN=6B7C9456168CFB3E8F2373471EA279DE2C0D4DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:4d:4e:0b:10:cd:72:01:60:2c:22:78:d0:
eb:a7:91:ba:ac:45:e3:8a:3b:de:06:4a:34:65:c6:
14:ef:6b:82:53:5f:22:db:96:fe:e5:9b:4b:33:34:
f1:67:b3:79:6a:c5:22:86:aa:d4:d6:fd:48:ca:c3:
f2:eb:4e:74:23:e7:16:92:c4:5e:77:1a:14:34:52:
35:ec:21:70:c4:b1:47:07:59:eb:aa:cf:71:7a:1c:
c1:8d:59:05:7f:90:f9:4d:4c:22:46:33:82:09:f0:
67:43:43:98:64:72:1b:16:2d:45:ff:05:16:f4:a2:
c7:bf:6c:1f:cb:4b:e8:9c:04:43:26:c5:66:96:12:
a9:b4:11:5e:1b:60:f2:c4:20:19:b8:43:c4:a7:d6:
9b:11:f5:60:a9:b1:b4:4f:47:85:c3:9e:59:a5:9e:
df:73:c9:9c:6c:a7:ba:e2:23:cd:e4:2c:4e:e2:2c:
45:c1:2f:65:9c:b1:44:dd:1d:e9:be:fe:2a:ce:db:
87:24:fd:56:30:4a:75:5b:02:93:92:d9:0b:39:c3:
03:4d:53:76:85:99:14:b2:5e:e7:b8:0d:05:fb:0f:
cb:6b:58:b3:e6:77:c7:78:42:e0:12:d1:b6:d0:30:
93:0d:48:52:67:f0:05:9e:47:dc:b6:28:1e:73:3e:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:94:56:16:8C:FB:3E:8F:23:73:47:1E:A2:79:DE:2C:0D:4D:FF
X509v3 Authority Key Identifier:
keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.138.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:5f:28:5c:dc:31:e6:29:36:a9:35:91:c8:b8:76:35:ae:6c:
66:23:f7:2f:a8:99:d6:05:9c:82:9d:55:95:26:48:f8:17:2b:
81:77:85:8a:c8:7e:1c:84:98:b3:4c:e4:00:d7:f1:fd:57:06:
43:30:68:b7:6f:df:63:5b:e1:e1:b0:10:71:1c:0c:bb:1b:6a:
88:34:b4:f2:0f:9f:14:22:fd:05:fd:56:00:8b:a3:68:84:73:
4f:37:fe:ad:56:6c:2d:c0:b4:0b:f9:0e:4a:34:23:f5:01:ff:
63:90:9b:84:63:df:60:90:1f:c2:1c:c8:52:f1:e2:32:84:aa:
84:ea:fb:74:3e:fa:f5:24:ce:bb:81:fa:d1:4b:21:fc:c6:67:
f0:ca:d6:cc:d2:ad:76:93:43:90:f9:4c:bc:f5:b1:45:d9:85:
34:4d:97:3a:16:35:06:ea:ff:34:ca:da:d4:1d:63:73:b3:88:
68:be:6e:3f:41:c8:bf:9a:4c:cb:a8:1d:b5:91:41:f8:c2:a4:
e7:9e:ab:41:d3:ac:ec:33:60:32:4b:4a:3f:68:5e:47:0c:df:
a3:83:53:b5:1b:39:73:49:66:7e:ce:e5:ac:94:08:d8:16:4a:
8e:5f:19:3f:4a:6f:d7:b9:77:e6:8c:2d:f3:56:b4:2c:83:8c:
2c:2f:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org