Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136322e302f32342d3234203d3e20313333343438.roa
File: 3138352e3132312e3136322e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier: xx2i1uZko24CadzUjG4Dcn298isLP4LSWa1XnZ6i1AQ=
Subject key identifier: 9F:66:D4:89:6F:6A:3C:E3:FA:72:1E:BB:84:30:C6:5B:91:71:4B:B3
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 7BD21F5DA3CB5357525777A2372F79A32BBEE808
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136322e302f32342d3234203d3e20313333343438.roa
Signing time: Fri 09 Dec 2022 05:10:54 +0000
ROA not before: Fri 09 Dec 2022 05:05:54 +0000
ROA not after: Fri 08 Dec 2023 05:10:54 +0000
asID: 133448
IP address blocks: 185.121.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d2:1f:5d:a3:cb:53:57:52:57:77:a2:37:2f:79:a3:2b:be:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:05:54 2022 GMT
Not After : Dec 8 05:10:54 2023 GMT
Subject: CN=9F66D4896F6A3CE3FA721EBB8430C65B91714BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:82:bd:d1:2f:e5:2b:fb:54:db:72:18:51:
11:52:ca:b8:f7:49:22:a4:d7:77:df:ad:dd:77:2e:
07:47:d2:12:4c:e4:8a:1d:c0:7c:f5:df:8b:69:df:
45:cb:75:64:fe:37:a5:73:db:cb:9b:08:d3:42:2c:
73:de:32:2a:53:54:4c:53:48:d5:d5:d7:c7:a7:09:
1f:ed:ca:5c:26:58:a3:bd:9b:18:5e:66:10:51:ce:
55:7f:f7:08:00:2a:f2:7b:b7:03:ee:5a:25:dd:16:
76:e8:10:d3:a2:de:58:ca:12:ec:be:05:36:37:f6:
96:1d:b3:37:97:a0:34:29:f8:3e:61:c1:3a:89:e2:
ba:26:d2:74:2c:5e:76:09:07:cb:35:4e:59:8c:6c:
9a:d0:73:50:25:71:ec:90:4f:50:3c:ab:89:84:65:
d2:a9:14:bb:5a:06:14:b4:8c:87:c7:5d:1d:82:6d:
e0:3a:5a:0f:95:e9:2d:84:4b:7f:1d:e9:d6:b5:0a:
85:b1:4e:62:2d:37:1d:c8:51:9c:38:6b:0b:c9:72:
ce:a2:73:e8:b3:e6:bf:38:28:15:9e:42:b5:b3:dc:
49:a3:e3:1e:ed:99:09:9a:99:21:d1:81:b6:bf:0e:
89:d2:4c:75:2e:a3:f5:f9:e0:27:91:ef:86:0b:86:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:66:D4:89:6F:6A:3C:E3:FA:72:1E:BB:84:30:C6:5B:91:71:4B:B3
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136322e302f32342d3234203d3e20313333343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.162.0/24
Signature Algorithm: sha256WithRSAEncryption
34:75:be:90:3a:09:42:9b:5b:05:20:19:98:e1:da:df:93:ed:
14:41:2f:f2:8f:77:48:56:9b:1e:f0:5f:3b:e7:d3:67:63:68:
ac:9b:00:fc:c5:f5:3c:a2:51:a3:09:53:2f:a3:23:79:26:75:
85:f2:c7:fe:ec:f2:a5:ec:d1:cd:5b:f2:af:60:e8:3c:26:15:
cc:47:ce:96:fa:e3:9e:f1:72:20:9d:03:68:b7:ca:65:26:3a:
63:1c:32:9d:a2:c9:49:af:0e:bd:08:15:49:f2:5e:b3:43:30:
03:57:6c:74:c5:7b:89:f2:58:02:64:39:9f:b8:cf:1d:dd:2c:
5f:dc:03:47:49:6f:92:50:71:3a:64:ee:a7:af:3d:5e:53:58:
87:f6:b1:f0:8f:09:5b:0f:cc:07:12:85:91:fc:3e:6a:94:3b:
1f:1b:3a:4c:f8:65:68:64:f2:ea:79:99:51:04:9d:cf:6c:a6:
8a:bf:91:d5:2f:88:27:df:d4:c1:c5:a4:2c:06:ed:58:ab:22:
0a:0a:cb:b4:46:1a:0b:18:ac:06:43:34:83:82:a7:f9:d8:6f:
2d:76:5e:27:6c:43:46:b2:b6:f7:56:c5:ec:20:41:99:21:3c:
80:d1:f0:1f:f7:fd:64:84:37:a7:00:cf:87:c0:40:18:31:be:
ee:c8:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:24 2025 by rpki-client