Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136382e302f32322d3234203d3e203631313338.roa
File: 3138352e3132312e3136382e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: /T6+FeyuZih9QGGs79ROVazppGM5NTUThrLD7G3vpmQ=
Subject key identifier: A3:09:8F:52:74:F7:CF:75:50:B3:E9:92:26:87:B1:F8:CF:46:63:61
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 575557619EEF55E014EB35A5A23699B31A993C04
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136382e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:09:20 +0000
ROA not before: Fri 09 Dec 2022 05:04:20 +0000
ROA not after: Fri 08 Dec 2023 05:09:20 +0000
asID: 61138
IP address blocks: 185.121.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:55:57:61:9e:ef:55:e0:14:eb:35:a5:a2:36:99:b3:1a:99:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:04:20 2022 GMT
Not After : Dec 8 05:09:20 2023 GMT
Subject: CN=A3098F5274F7CF7550B3E9922687B1F8CF466361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:a1:52:e9:82:09:c7:0f:43:d0:59:2c:31:
b6:83:53:7d:79:7f:83:c3:e2:48:de:b7:96:39:c1:
c0:3f:c9:dd:3b:9a:0f:7f:21:18:18:03:d5:a2:04:
73:a8:49:d0:35:e6:93:52:35:4d:a3:e5:6c:f7:69:
9b:f9:e9:1d:b8:57:da:d3:b9:1d:7d:14:6e:20:6b:
db:46:25:70:2c:34:ae:c8:9b:95:07:b3:5d:2f:ec:
23:3b:da:37:3d:92:b5:e8:61:5b:ed:86:a1:84:a7:
71:ae:7d:fb:e7:92:0a:32:04:1d:78:b7:f0:ea:77:
b8:dc:2b:4d:85:78:94:36:55:8c:8c:4c:d0:20:0c:
1a:09:8f:e9:7f:c7:a3:6b:e3:83:75:64:7b:31:bd:
1d:81:6a:b1:c6:6c:99:d8:19:72:89:8a:8b:e7:3d:
8c:d7:fc:1a:ab:93:cd:b1:fc:7d:fa:f7:80:c4:1d:
0b:ba:f7:c1:c6:53:15:a3:b4:08:63:da:ec:6f:b7:
75:aa:d0:87:1c:dd:89:db:11:ce:fe:28:12:b6:eb:
d1:8d:7b:bb:8b:48:9e:52:8f:75:8b:fe:62:03:54:
40:2a:49:ed:a5:e4:00:d0:ba:98:80:fb:08:76:3a:
ae:3a:8e:e7:38:81:1f:e0:a6:bf:44:b3:4a:a4:41:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:8F:52:74:F7:CF:75:50:B3:E9:92:26:87:B1:F8:CF:46:63:61
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136382e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.168.0/22
Signature Algorithm: sha256WithRSAEncryption
54:64:7f:d3:90:18:af:d5:50:e0:24:c7:31:bb:a1:3e:f1:6e:
63:d0:49:0a:1a:96:88:71:63:65:83:95:d6:cc:3b:fe:e6:37:
c1:31:9e:56:0b:9f:2e:51:43:cb:fc:bd:99:8e:6b:4f:f3:3e:
74:bb:3a:7f:36:16:b3:d9:c7:67:cc:18:84:49:0c:04:55:5f:
3c:ce:d5:cd:f4:36:9f:1f:a6:b3:36:e1:2a:5c:68:2d:63:2e:
09:ec:07:3f:a6:25:2d:3b:ec:33:4b:64:03:1c:6e:fa:0d:59:
98:66:e3:f3:64:91:9d:be:c6:7b:a3:a5:cc:f7:15:b7:f8:5e:
b3:71:14:23:1a:f0:01:96:ea:3e:52:f5:36:16:ec:c0:1b:bb:
53:8b:8b:fe:06:43:ca:ad:68:4a:16:90:d4:d3:8c:16:21:25:
a8:64:60:9a:82:aa:ff:32:60:ed:16:cd:de:7a:c6:5c:15:81:
b3:6a:0d:76:5e:2e:73:0a:e7:22:f0:61:0b:90:ec:11:4e:a9:
fc:5d:dc:cd:13:41:77:54:00:9c:09:dc:24:5f:13:92:86:b9:
49:3e:77:2c:5f:58:c5:22:c3:8f:9d:f9:8f:68:bd:69:2d:52:
09:d4:f8:6f:04:1c:e4:ab:9b:3c:c8:9c:ea:5e:ce:e6:0d:ed:
d1:c3:bc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:14:42 2025 by rpki-client