Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136332e302f32342d3234203d3e20313333343438.roa
File: 3138352e3132312e3136332e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier: 9yfpMNBzfhaEQD6hlyZ4BFh/w8k8L4R2MwTNX4FgZps=
Subject key identifier: 91:3A:7F:44:20:35:46:81:24:DF:60:D4:30:6A:AB:75:AF:64:F0:1B
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 5A743B655511C0E49D08BFA2BAD90C15AB446BDF
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136332e302f32342d3234203d3e20313333343438.roa
Signing time: Fri 09 Dec 2022 05:10:58 +0000
ROA not before: Fri 09 Dec 2022 05:05:58 +0000
ROA not after: Fri 08 Dec 2023 05:10:58 +0000
asID: 133448
IP address blocks: 185.121.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:74:3b:65:55:11:c0:e4:9d:08:bf:a2:ba:d9:0c:15:ab:44:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:05:58 2022 GMT
Not After : Dec 8 05:10:58 2023 GMT
Subject: CN=913A7F442035468124DF60D4306AAB75AF64F01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:44:ce:0d:84:aa:1f:84:72:b9:52:7c:52:
a6:33:f5:6e:cf:4b:f8:08:bd:cb:f5:f7:db:16:77:
9b:f3:c6:d2:d4:be:66:d2:25:01:b2:a1:25:02:f8:
79:73:6d:27:9c:50:9f:79:3e:bd:62:1b:cf:2f:08:
eb:07:cc:c9:eb:47:9f:6a:20:0e:b7:5e:c8:13:64:
21:4d:47:f0:a8:f5:3e:d3:9f:ac:6f:ca:51:7e:6d:
cb:49:a5:40:55:39:04:02:35:13:90:f3:b7:0d:29:
32:39:b1:fe:0a:32:9e:3f:c1:f4:be:b1:f9:30:d0:
a0:0a:e1:72:dc:5c:cd:db:91:70:bb:ff:fa:fa:04:
64:e4:68:95:70:a5:2c:9a:df:1d:be:e3:06:04:fc:
c9:e3:8f:f8:4f:86:16:f5:00:36:e7:63:47:6c:e0:
ac:bf:25:c3:63:e8:84:54:7e:5c:07:c2:b6:58:01:
55:bb:c8:12:d9:5c:e0:4f:ac:cd:f9:e5:16:2d:e3:
47:1c:98:10:26:37:91:62:40:93:0f:21:e2:3d:73:
8e:f9:13:be:0d:d4:ca:81:d2:6a:39:9e:e0:67:64:
ab:3c:e4:fc:d3:91:78:e9:e3:56:66:13:2e:20:58:
e0:a1:36:c4:11:63:83:70:ed:02:65:6e:04:1c:bc:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:7F:44:20:35:46:81:24:DF:60:D4:30:6A:AB:75:AF:64:F0:1B
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136332e302f32342d3234203d3e20313333343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.163.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ee:91:d9:17:14:8c:e6:2c:7b:b5:42:81:e1:28:33:28:ed:
b5:7a:3f:43:6e:d8:14:50:d8:17:c5:8e:04:0b:87:d5:48:38:
94:4c:70:79:9c:f3:e4:b1:e6:c4:5f:98:5a:fd:bb:d8:7c:d6:
37:74:18:a0:46:9c:53:c5:03:b2:fe:e2:ff:26:1a:04:28:7b:
77:ad:eb:d3:5a:66:88:0b:9e:20:66:91:45:f7:72:3a:4f:d1:
a1:44:3d:9a:19:a1:fe:69:73:07:62:20:55:1f:35:f4:db:d4:
64:7c:93:b0:e5:7b:31:0a:6b:8d:dc:85:52:4a:89:60:5a:83:
ea:ff:3f:0d:fd:a9:a7:50:f7:28:b7:ac:f2:a7:3a:19:1e:a7:
48:da:6e:bb:33:94:55:70:a3:bc:e7:0e:d7:43:36:43:78:f3:
67:87:1a:69:63:83:09:11:89:76:11:c6:54:06:e9:2e:b6:8d:
79:42:e6:2e:49:cf:2a:f2:6e:ec:13:09:75:8f:ef:a7:0c:f5:
3f:c6:17:70:60:5c:16:c7:5f:85:6f:44:2f:a4:50:0c:65:17:
c3:87:61:76:94:9b:e0:d7:9e:fa:8f:c1:2d:6e:47:21:e2:2e:
f3:7b:c4:15:40:26:e2:e8:4d:06:4d:eb:a9:ec:3d:37:86:1c:
78:93:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:52 2025 by rpki-client