Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136302e302f32342d3234203d3e20323031333431.roa
File: 3138352e3132312e3136302e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: II65YYyenSN8lgseaHyLtqjXuayMwZdg4xM2dESPWB4=
Subject key identifier: 25:40:71:22:46:A0:45:AF:99:FD:4B:5A:56:7E:63:B5:FC:9F:9C:21
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 293F567AFD86DDD74C27B1C8CAF61266FA8DDF1E
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136302e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 09 Dec 2022 05:10:48 +0000
ROA not before: Fri 09 Dec 2022 05:05:48 +0000
ROA not after: Fri 08 Dec 2023 05:10:48 +0000
asID: 201341
IP address blocks: 185.121.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3f:56:7a:fd:86:dd:d7:4c:27:b1:c8:ca:f6:12:66:fa:8d:df:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:05:48 2022 GMT
Not After : Dec 8 05:10:48 2023 GMT
Subject: CN=2540712246A045AF99FD4B5A567E63B5FC9F9C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:19:00:1e:8d:cb:b9:98:79:7a:4c:a1:d4:2c:
62:cf:7e:70:73:f3:27:5c:99:c9:bf:f3:60:4d:0a:
b9:c7:73:8c:35:84:bc:d2:59:9e:4d:c0:d4:20:94:
5c:1f:44:f3:da:9c:7c:05:d6:be:96:23:b0:c3:aa:
1e:8a:c8:c3:3a:c2:2c:ab:4d:6d:a5:15:bc:5c:c6:
53:4c:0d:0c:fb:b5:09:41:2c:b7:76:7e:0a:fd:da:
02:06:f9:ba:88:e6:ae:f5:4e:36:dc:6e:20:8a:f0:
1d:06:c5:b4:e7:34:2c:83:60:1b:f2:f9:80:79:31:
20:dc:74:d8:cc:fc:f2:da:db:e1:b1:2c:fd:a5:a5:
1b:30:51:5f:83:08:87:3f:58:a0:ca:0a:05:e3:02:
54:ff:bc:72:aa:0e:fd:65:a9:03:68:03:bc:f3:80:
ac:a7:c6:9f:57:fc:c4:ea:db:96:e3:60:bf:a5:89:
e8:6b:03:9c:36:3e:19:dc:0f:59:eb:94:37:7f:0f:
dd:ba:c9:18:6e:b4:a8:1c:f4:48:b7:61:aa:99:2d:
ff:65:c4:0d:44:78:d1:bc:32:ab:80:7b:98:3b:ca:
85:06:33:28:6c:d2:dc:18:5d:55:b5:89:7f:c7:d9:
3e:53:02:90:6d:e2:5e:f2:29:18:c6:13:85:3a:bd:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:71:22:46:A0:45:AF:99:FD:4B:5A:56:7E:63:B5:FC:9F:9C:21
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136302e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:92:d1:cd:09:81:81:d0:fa:15:0e:07:f2:97:ae:ae:5f:2a:
a1:c0:36:eb:d2:83:83:2a:39:9d:e9:a6:5e:9f:ce:9c:60:f1:
aa:29:fa:31:3d:53:1c:2b:eb:db:b4:f2:3d:e7:96:72:b5:34:
90:cc:4c:32:64:80:18:5b:94:6a:df:a1:30:cc:32:4c:95:70:
22:41:1b:05:94:dd:ca:77:a5:dd:3a:50:99:74:2c:4f:b4:03:
b5:33:e5:7a:8d:d3:79:51:60:8c:46:4b:99:fb:36:8c:b1:21:
2e:af:68:24:21:3d:06:aa:c5:53:99:ca:39:5a:9d:0d:ec:01:
04:36:4e:1d:4d:04:1f:96:51:ff:9b:5a:2d:ef:10:ad:1c:9a:
d5:1e:eb:f6:e4:5a:ba:45:79:2d:7b:00:d0:90:b0:44:5b:6b:
03:6b:d0:c6:b4:b0:f6:b1:1b:7d:5b:a9:93:d1:60:c9:64:b9:
b9:63:ac:ac:f6:9d:ff:52:14:1d:00:88:3c:bb:f6:fc:a1:e5:
c6:60:77:eb:4c:55:9b:f9:35:39:05:88:3a:bc:ed:5c:f4:8e:
d9:1b:1f:79:11:86:3d:4b:ea:4a:6c:0e:a0:63:4a:78:cf:a4:
aa:60:d9:6e:95:e9:0d:1b:d1:04:c6:a5:74:ae:cf:7f:23:f4:
2b:6e:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:44 2025 by rpki-client