Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136392e302f32342d3234203d3e20313333343438.roa
File: 3138352e3132312e3136392e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier: dGXGk3RcVtMxyNQn82asym9GCTopKb+mPeivwjIZiyA=
Subject key identifier: B3:D7:01:C8:9F:59:E1:1B:45:C2:44:CA:49:28:47:53:6E:78:83:BE
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 7E11D1213FB3D37F6C9D4159014ACD412046AF17
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136392e302f32342d3234203d3e20313333343438.roa
Signing time: Fri 09 Dec 2022 05:11:08 +0000
ROA not before: Fri 09 Dec 2022 05:06:08 +0000
ROA not after: Fri 08 Dec 2023 05:11:08 +0000
asID: 133448
IP address blocks: 185.121.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:11:d1:21:3f:b3:d3:7f:6c:9d:41:59:01:4a:cd:41:20:46:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:06:08 2022 GMT
Not After : Dec 8 05:11:08 2023 GMT
Subject: CN=B3D701C89F59E11B45C244CA492847536E7883BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:1c:f3:42:d2:25:8b:45:8f:14:02:2a:4b:
c9:e0:67:6d:04:69:4a:db:fc:d2:79:32:7d:35:d0:
9e:47:26:85:c4:2f:02:3d:bb:03:ea:eb:29:85:78:
b1:07:ec:23:2a:2c:30:77:19:19:13:5a:1c:21:88:
f6:10:e1:68:59:70:2e:d0:fa:ad:8e:f7:9b:bd:36:
2d:e6:44:e8:35:4b:5b:c5:44:6e:ae:7b:b2:10:d4:
38:ee:0b:43:f2:5d:15:dd:fe:3c:0c:fe:6c:72:bf:
15:7a:52:e5:71:e2:86:0f:50:eb:7c:e8:fd:1b:73:
3f:19:d5:57:11:fd:27:49:a2:0b:19:b5:ee:81:db:
ae:8b:7f:d3:88:e4:b5:10:d0:87:6c:f6:0a:da:d0:
44:1e:47:00:2a:81:e6:42:10:d1:e7:26:f2:e0:e9:
ee:c1:ab:08:9d:9c:3f:cd:27:b8:04:fc:42:a5:5b:
e8:00:61:a8:dd:f3:05:27:37:3d:fb:81:1a:54:f9:
e1:a0:ab:23:48:ae:aa:7a:e4:d0:0e:aa:44:f1:05:
fc:39:ae:33:22:70:7d:5d:ed:fd:55:bb:25:43:c1:
47:dc:f6:c0:4a:16:70:d8:38:37:f4:61:43:7d:35:
48:c6:e7:e9:ec:54:fc:32:f3:8e:18:ef:d2:53:e4:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D7:01:C8:9F:59:E1:1B:45:C2:44:CA:49:28:47:53:6E:78:83:BE
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136392e302f32342d3234203d3e20313333343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.169.0/24
Signature Algorithm: sha256WithRSAEncryption
96:78:cb:97:a4:df:53:f6:60:bf:e3:c1:01:21:66:09:d0:be:
d1:d9:7c:97:d7:63:d0:89:ed:20:27:df:59:a9:1c:78:ec:3f:
87:df:08:3f:dd:ca:da:18:e9:cf:f1:b0:42:8b:fb:f1:9c:96:
87:ef:e8:6f:50:8b:38:42:25:5c:5e:db:6d:de:5d:1e:76:ce:
49:4e:f6:73:23:9a:a5:01:97:fd:63:05:13:a2:4b:bc:bf:55:
a2:7c:d9:e0:1b:e0:20:29:c0:3c:bf:ec:6f:e8:22:62:4b:2c:
28:cd:a9:ef:a3:4f:e4:d5:87:0d:f7:f7:78:86:da:c1:e7:39:
c0:74:96:7a:55:c0:a5:a4:4e:ca:70:f5:77:f6:cf:a8:d6:ab:
bf:89:0f:71:0d:01:18:1e:39:4e:27:66:3e:e3:66:9f:0d:c5:
94:19:be:9a:4d:7e:d5:b3:0e:6a:c7:66:6f:1d:22:3a:80:88:
69:53:37:7d:2f:fe:6d:da:7d:f1:c6:95:6b:bf:8f:ac:ea:c6:
9e:02:0d:fc:b7:60:c7:13:c8:4a:7b:a4:dd:59:ec:49:cd:8b:
47:b3:6c:95:b6:3d:3e:fb:4b:3f:17:ab:f0:19:a6:fc:f3:50:
37:23:7a:05:29:53:5e:6f:b5:8b:d3:68:26:34:cf:0c:ee:11:
7d:ed:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:25 2025 by rpki-client