Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136312e302f32342d3234203d3e20323031333431.roa
File: 3138352e3132312e3136312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 3+uGJT7euxoeraayzUeCHr+Dn5GLipiesIZY85v9MSc=
Subject key identifier: DB:CA:72:FD:F8:5E:B3:36:31:1D:5D:FD:41:5B:95:E8:4D:90:6B:19
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 0E5787C202D00505FC24F37BB039DAF64B4CA6EC
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136312e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 09 Dec 2022 05:10:51 +0000
ROA not before: Fri 09 Dec 2022 05:05:51 +0000
ROA not after: Fri 08 Dec 2023 05:10:51 +0000
asID: 201341
IP address blocks: 185.121.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:57:87:c2:02:d0:05:05:fc:24:f3:7b:b0:39:da:f6:4b:4c:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:05:51 2022 GMT
Not After : Dec 8 05:10:51 2023 GMT
Subject: CN=DBCA72FDF85EB336311D5DFD415B95E84D906B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:8f:da:f3:c1:a6:c8:96:f4:77:55:a1:ef:
2e:b1:8d:d4:13:ff:fc:e2:be:f7:9f:24:c4:7b:c5:
56:41:c0:df:25:ac:08:4e:be:3d:96:f9:51:c7:2e:
43:9e:f5:33:e3:01:d0:83:de:9f:aa:a7:e4:fc:77:
46:43:2f:7d:90:d6:6a:3d:a8:fc:9a:d9:fe:40:40:
c5:63:bd:a6:89:57:31:3d:88:20:28:86:dd:f8:00:
55:2e:cc:7e:df:27:75:d3:f7:f6:25:30:67:65:e8:
70:14:e5:fb:6a:67:45:5c:fc:8c:3c:a3:08:2f:1e:
3b:95:00:98:16:58:17:34:19:79:4a:28:c6:b5:a6:
52:a6:c2:59:6c:df:7a:41:6b:8a:67:41:f5:1d:0e:
8b:78:d6:d5:bd:c5:7d:f4:f8:b4:75:90:fb:4f:a0:
76:ae:c6:8b:8d:8b:84:e3:ae:97:12:ed:1b:a1:9d:
5c:83:fc:30:9a:d6:5e:32:de:b1:55:bd:1a:06:e6:
ca:ff:fb:ce:a2:07:cf:0c:41:b7:e7:50:33:67:21:
1d:8f:be:46:9b:80:7b:5e:71:c6:d3:e5:52:64:05:
af:50:43:11:35:6c:d0:6c:a5:6c:9a:b0:e1:c1:97:
66:bd:ec:f6:e1:6a:56:3d:e5:61:f7:04:cf:ee:09:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:72:FD:F8:5E:B3:36:31:1D:5D:FD:41:5B:95:E8:4D:90:6B:19
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:21:47:20:15:22:25:4c:e9:29:5c:23:66:f1:98:41:19:f7:
d5:8f:50:28:c1:9d:fc:19:bc:be:4d:f5:f0:8c:05:d9:a7:90:
b6:a2:a6:3f:3a:5a:23:f4:60:b0:ea:c4:b6:7e:bb:3e:22:d3:
45:59:a1:1e:40:51:74:b9:e7:92:23:c8:b1:7a:6a:b3:31:c8:
15:c5:8b:2d:97:48:bd:cd:11:5b:4e:90:0e:0c:05:7c:2e:d7:
0e:ab:f7:7a:79:d0:99:ce:9d:fd:ee:b9:0b:19:ce:27:ec:ea:
af:96:c8:65:f2:b3:53:f4:d0:7e:df:cb:75:3a:00:0b:ac:66:
8d:d0:46:a8:73:68:47:58:5d:b8:f9:84:e3:24:b6:9c:74:15:
60:55:69:3d:36:be:44:b1:3a:d8:40:d2:d4:e4:46:96:fa:6b:
c1:08:6d:d3:5f:d1:a6:9a:82:0e:84:1b:7b:93:8a:52:ce:9e:
cf:e7:72:c4:9b:0e:a7:21:35:3f:93:83:2e:a0:c2:3e:7d:66:
29:42:6c:ad:81:1d:09:8a:d2:4d:17:23:88:4d:16:c3:d0:76:
1a:1e:aa:42:4a:70:47:51:bf:b0:b5:74:bf:4e:f3:8b:2f:28:
8b:df:2a:b3:fb:5f:45:3c:ee:bd:da:fc:70:0b:26:7b:b4:b4:
76:d0:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:48 2025 by rpki-client