Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136382e302f32342d3234203d3e203631313338.roa
File: 3138352e3132312e3136382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: 8THwExuJU0/DFaHknVyJ9rilQsf/i3oNcFC1MGLD3B4=
Subject key identifier: 9F:C6:66:01:43:21:B3:D1:5B:D8:02:17:14:10:B5:0D:EA:25:D7:BD
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 14D982A33084342CA0F3D3B75E576F978C6364BB
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136382e302f32342d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 04:54:56 +0000
ROA not before: Fri 09 Dec 2022 04:49:56 +0000
ROA not after: Fri 08 Dec 2023 04:54:56 +0000
asID: 61138
IP address blocks: 185.121.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d9:82:a3:30:84:34:2c:a0:f3:d3:b7:5e:57:6f:97:8c:63:64:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:49:56 2022 GMT
Not After : Dec 8 04:54:56 2023 GMT
Subject: CN=9FC666014321B3D15BD802171410B50DEA25D7BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:e8:d1:8e:b9:1a:1b:13:c6:4e:2f:87:c4:
f5:da:97:9d:2d:72:7a:66:a7:d9:b1:38:8e:5e:26:
56:b0:f8:df:d4:3b:e9:eb:77:e2:63:26:a7:84:8a:
d3:7a:c7:ad:fc:76:12:c3:ff:e2:dd:49:fd:2a:d1:
ca:e4:16:c2:9d:cf:53:39:65:33:3d:ca:77:e8:5b:
f5:34:2f:b5:c0:9e:54:94:fd:7b:53:58:8c:74:d6:
bb:d6:97:75:27:9d:73:f2:cb:bb:d4:56:5a:db:cc:
40:e8:62:54:dc:2e:e9:f4:a3:3f:d0:3c:dc:f1:65:
e7:f6:08:65:9a:1e:72:ef:76:af:20:ec:93:54:ed:
2d:98:cf:c6:db:92:54:09:8d:e8:e7:68:28:48:ba:
d9:63:63:53:a4:1d:7f:18:2d:fe:dc:05:3d:9b:0b:
ee:d3:73:e8:ea:1d:aa:5d:f4:94:4f:a2:54:23:68:
31:3d:f4:a4:aa:2e:cb:3c:a0:de:1f:45:f9:67:22:
72:7f:1b:2d:fb:85:67:60:8c:da:92:dc:bf:df:2a:
5d:72:e4:ea:d8:17:23:d5:4b:68:94:af:f8:68:da:
22:a9:30:89:db:5a:79:d9:6c:56:90:f5:62:87:3b:
77:a1:72:b9:9f:83:34:8d:f3:da:05:8b:2b:c4:48:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:66:01:43:21:B3:D1:5B:D8:02:17:14:10:B5:0D:EA:25:D7:BD
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136382e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.168.0/24
Signature Algorithm: sha256WithRSAEncryption
66:16:fd:49:fb:35:03:c4:73:19:1e:4b:b4:f8:06:86:7b:a9:
b5:f6:53:8f:f6:15:5d:9e:3a:22:71:8c:fb:5f:f9:4f:e4:7e:
c3:97:18:87:ac:2b:ed:ff:f5:19:64:2b:07:23:f6:60:c5:82:
9f:de:63:52:08:2a:08:a2:3a:fa:f1:6b:24:4f:84:64:28:d8:
c1:1f:26:45:dc:80:11:34:95:3a:38:7e:0d:20:5e:43:01:78:
17:06:49:5d:c9:c5:2e:21:c2:74:72:3c:da:fb:c0:e3:3c:b6:
ca:d2:1d:f4:a1:4a:28:b3:a1:66:b6:15:b6:b9:d6:b0:11:98:
1d:74:9b:a7:bf:63:a6:cf:25:70:a1:d2:d2:53:b8:da:04:6b:
8d:31:96:58:45:45:2f:fb:f4:27:35:14:75:bb:8e:1e:6f:4a:
0e:ad:93:a7:f2:91:e6:50:35:f4:c1:37:43:ae:33:34:27:10:
34:ff:5a:8f:30:96:7f:78:05:a1:47:4c:86:e8:17:ae:51:47:
4f:e3:a3:6e:1d:79:bd:78:cb:53:60:24:c2:47:41:74:94:bd:
12:f9:14:86:c1:f3:54:6b:33:58:77:15:a5:ee:76:f8:f4:d2:
23:73:af:c6:7f:cd:cc:77:52:16:63:8c:23:ad:25:39:1c:b5:
51:03:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:36 2025 by rpki-client