Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137362e302f32322d3234203d3e203631313338.roa
File: 3138352e3132312e3137362e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: 6Cy7NsTwTYSMb1qHsdqi988ja3/2aevEElCV1FhnTog=
Subject key identifier: 6B:46:23:62:E0:B7:83:9A:00:90:14:34:93:E3:86:BE:AF:EE:87:CF
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 02218F450B9495C4068D6D30F84D8E9700E1212E
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137362e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:09:08 +0000
ROA not before: Fri 09 Dec 2022 05:04:08 +0000
ROA not after: Fri 08 Dec 2023 05:09:08 +0000
asID: 61138
IP address blocks: 185.121.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:21:8f:45:0b:94:95:c4:06:8d:6d:30:f8:4d:8e:97:00:e1:21:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:04:08 2022 GMT
Not After : Dec 8 05:09:08 2023 GMT
Subject: CN=6B462362E0B7839A0090143493E386BEAFEE87CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:7a:98:3d:0a:0c:71:14:70:46:14:38:11:
23:30:7a:d3:ac:62:4b:72:4d:d7:f9:15:58:48:44:
84:8e:9c:78:7d:d6:8b:f6:14:2c:a2:ea:32:5f:a3:
0e:99:8f:61:07:05:54:58:36:2d:80:1d:50:48:51:
c0:09:09:49:52:c6:45:3e:85:35:c8:f5:e4:c7:73:
b2:04:0f:51:0f:6f:c3:25:ce:c8:3b:5d:3a:8b:8d:
7d:57:fb:14:71:fc:f9:a9:4d:50:0b:4f:2e:56:33:
b9:44:07:ad:39:62:1c:90:f1:ef:0d:25:b5:37:b1:
e1:eb:6e:6a:f9:23:4e:75:ef:51:13:09:32:ee:36:
c7:72:9e:53:95:cf:83:e9:a2:b5:9e:f6:5c:60:22:
9d:a1:5b:58:d7:a7:e5:05:72:cd:7e:77:b5:a4:80:
13:b3:50:71:71:07:e2:6b:ee:7e:36:02:da:f5:6a:
f9:81:53:ed:37:99:6f:cb:a1:5e:11:6b:92:4a:0b:
55:ee:74:2f:25:1a:fa:21:cc:70:df:42:89:a9:fd:
1c:82:48:ca:58:f7:0b:85:a6:5c:1a:2c:bf:36:ea:
a7:a9:5d:2a:33:76:35:54:9b:24:32:19:45:3f:7b:
da:9c:da:73:e3:6c:4f:28:ad:29:84:53:c3:d0:a8:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:23:62:E0:B7:83:9A:00:90:14:34:93:E3:86:BE:AF:EE:87:CF
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137362e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.176.0/22
Signature Algorithm: sha256WithRSAEncryption
75:58:75:83:08:d3:61:59:ba:8c:1d:62:56:92:bb:d7:ee:01:
a0:51:96:76:70:51:d0:b6:e2:4d:84:83:0f:95:44:17:e9:a6:
e6:9f:dd:2d:02:a6:08:12:55:8d:cc:3b:ea:fd:09:aa:74:27:
de:51:eb:32:15:d8:ea:9b:44:9c:cb:0a:b6:1a:07:42:72:ad:
91:63:d6:66:bf:68:ab:5a:f7:80:71:5c:b2:ad:ce:b3:17:1c:
c3:44:ee:1f:85:36:6c:98:18:b7:ec:8e:f7:b8:84:94:1f:15:
86:e3:08:9d:c0:b1:46:4d:20:4d:eb:bd:9b:2d:ed:0e:72:55:
5e:56:53:b9:95:82:92:35:e4:af:2e:9b:4f:d4:32:a4:eb:af:
d2:bd:5b:0f:c1:8d:f4:1b:91:1a:0a:64:2e:a6:50:0c:17:35:
89:00:22:3e:e4:9e:84:b0:74:1a:03:f9:0d:d8:d6:cf:03:ee:
a0:80:10:76:1c:5c:63:69:c3:bd:9e:87:4e:11:dc:4d:a4:64:
56:b5:33:6e:64:70:9a:a0:31:9a:fa:50:4e:bd:fe:56:eb:da:
d4:db:22:39:fb:37:ef:c0:0f:5c:d1:60:db:67:a6:99:22:b9:
00:7b:ce:31:f1:98:0f:69:41:58:cc:79:47:f5:5d:3e:fc:71:
f1:1c:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:24 2025 by rpki-client