Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137302e302f32342d3234203d3e20313338393935.roa
File: 3138352e3132312e3137302e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: GVCIgIHAUUiFzQ6lPLv6uhyR7KGwbN+VWxxtWa2aUPU=
Subject key identifier: 1D:16:75:87:51:5A:70:A6:53:C5:1B:C9:49:53:64:6E:EF:FD:5F:51
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 52151B7E73F35AB16A98028AA365A37F7C59393D
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137302e302f32342d3234203d3e20313338393935.roa
Signing time: Fri 09 Dec 2022 05:11:49 +0000
ROA not before: Fri 09 Dec 2022 05:06:49 +0000
ROA not after: Fri 08 Dec 2023 05:11:49 +0000
asID: 138995
IP address blocks: 185.121.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:15:1b:7e:73:f3:5a:b1:6a:98:02:8a:a3:65:a3:7f:7c:59:39:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:06:49 2022 GMT
Not After : Dec 8 05:11:49 2023 GMT
Subject: CN=1D167587515A70A653C51BC94953646EEFFD5F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:66:7a:bc:67:09:13:1d:79:7c:41:c7:9c:
75:8e:a2:92:a5:b1:8e:33:13:47:37:73:48:ef:e4:
93:c2:f5:1f:db:c2:51:2a:30:48:c3:f7:b4:73:25:
09:e0:b5:79:2e:c7:f6:4a:aa:30:47:c8:c4:ef:c3:
00:28:4d:85:07:d7:98:63:21:d4:b9:8c:ef:8b:93:
eb:7f:42:a7:27:bb:b1:bd:7a:15:a7:df:cc:a9:4b:
8b:af:00:d8:7d:bd:60:d9:a4:db:66:0e:22:24:c1:
9a:f0:9c:56:24:1a:cc:51:49:d1:37:c8:1d:6b:b4:
03:a5:76:df:5c:bd:f3:43:c9:8e:73:74:da:12:1d:
a8:4b:43:ca:89:3f:22:a4:83:c0:03:d3:64:39:f2:
cf:b1:8e:66:fc:15:49:d4:9a:6c:70:65:a7:dd:08:
01:1c:d9:a6:db:2e:bb:b8:29:07:55:f9:50:13:be:
6b:b5:46:40:f7:f9:26:c9:e2:d5:15:b8:fc:0c:f5:
59:ad:8a:79:e1:fd:e1:65:a0:9d:5e:85:d5:bf:1c:
ee:74:9a:8a:cb:f9:65:c3:bd:c4:4c:5f:a5:be:4a:
6d:aa:1c:12:6d:40:99:60:fb:ee:3a:35:31:5e:18:
be:86:d0:8c:e0:de:85:18:6b:1c:2e:f9:f9:0f:bb:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:75:87:51:5A:70:A6:53:C5:1B:C9:49:53:64:6E:EF:FD:5F:51
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137302e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f2:2a:07:46:4a:94:98:bd:ad:fe:04:7a:33:1d:32:17:3d:
79:29:d7:a3:1a:be:08:13:e5:df:4b:76:cb:ec:0e:cf:ff:6d:
9c:be:42:73:9c:c6:5e:2c:8c:d0:09:ef:04:9c:ad:ef:7b:eb:
ab:1b:24:7b:3d:c3:72:10:04:bb:e9:53:3b:f3:52:a0:84:56:
f8:ba:b9:70:a4:23:0a:54:56:d5:b0:bc:59:4b:61:a2:9b:ab:
df:36:c2:28:8b:63:7d:10:1d:04:f9:6c:f7:ec:22:81:02:2a:
36:9f:5c:36:b4:dc:71:7c:d4:e8:24:2f:85:2a:1e:60:fe:25:
5d:89:1b:0b:a8:2d:00:70:06:38:06:d0:63:56:8b:f5:4b:2c:
f2:39:1b:de:d9:a7:71:61:08:03:95:00:85:6a:c6:7c:cf:f7:
60:6a:66:3b:54:cc:16:7e:23:7f:bf:0c:b6:59:ba:0b:60:ee:
8a:e8:42:f4:a6:01:49:69:e7:1c:a4:e7:7a:4d:66:28:ce:73:
aa:bc:0f:3f:45:b4:20:87:6f:d3:e1:5a:e1:3c:b9:c0:c8:e2:
ea:1d:be:54:1d:c8:14:bc:ff:5e:73:13:c2:4d:cd:50:fb:d6:
42:24:ca:a5:b6:fb:7f:b5:0e:15:ae:55:42:12:16:ac:6a:68:
ae:6a:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:24 2025 by rpki-client