Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137362e302f32342d3234203d3e2038313030.roa
File: 3138352e3132312e3137362e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: CX+wMWKz8ufDuBDqtrtPmO3NRaY6rBqT/PkNj93pTSw=
Subject key identifier: 09:59:3F:E4:61:ED:C3:98:24:6C:94:31:7B:A1:10:B0:DD:28:40:9A
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 53A6179F438AE4916F26A2477A38DE14820C3F39
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137362e302f32342d3234203d3e2038313030.roa
Signing time: Fri 09 Dec 2022 05:11:59 +0000
ROA not before: Fri 09 Dec 2022 05:06:59 +0000
ROA not after: Fri 08 Dec 2023 05:11:59 +0000
asID: 8100
IP address blocks: 185.121.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a6:17:9f:43:8a:e4:91:6f:26:a2:47:7a:38:de:14:82:0c:3f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:06:59 2022 GMT
Not After : Dec 8 05:11:59 2023 GMT
Subject: CN=09593FE461EDC398246C94317BA110B0DD28409A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:cb:a8:e1:9b:16:96:cd:c2:d8:5a:f7:cd:
51:98:46:c3:1c:4c:8f:d5:57:8a:fd:1c:74:18:0a:
86:b5:9c:5b:17:b5:0c:92:41:a8:f9:90:22:a2:f5:
7d:6a:20:f9:4c:81:ab:d2:7b:fb:8e:a8:2b:87:41:
0d:83:ff:b3:85:54:1b:17:04:b9:6d:0e:00:39:a7:
38:df:df:a3:1f:9c:18:3f:c1:8c:9f:9a:83:5a:00:
dd:f2:48:87:1e:23:44:97:12:6e:d8:e9:f2:b0:28:
0c:f4:aa:26:4f:23:0a:cb:ac:a1:cf:86:23:e0:53:
7d:59:ee:f0:f3:a5:a5:67:6d:00:39:c5:ec:af:e8:
9e:27:9e:d8:92:ae:d3:14:fa:74:af:1b:34:27:25:
61:d5:d0:1c:6f:3d:9b:53:9f:67:8a:a2:a7:71:20:
bd:c7:a5:b6:a9:ea:45:a8:8b:b1:88:1c:f2:ca:f4:
38:3a:e2:f8:7d:8f:51:01:8d:f7:d3:4a:a3:2a:6e:
c5:4e:7d:f5:1f:a2:5c:80:13:30:74:da:99:c6:1b:
c6:0e:0c:f0:56:f7:ff:a5:78:bf:a3:69:aa:7d:f7:
31:5b:c1:26:2b:12:d1:5c:4b:a6:de:f6:97:0d:e1:
87:eb:d9:28:8d:85:3a:67:83:8f:94:bb:65:70:43:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:3F:E4:61:ED:C3:98:24:6C:94:31:7B:A1:10:B0:DD:28:40:9A
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137362e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:07:c2:cb:a8:c2:30:3e:f8:37:c7:79:7a:a5:b1:b7:ba:30:
65:5a:99:e8:9e:69:51:78:1d:b8:c6:0a:e1:ab:a4:c2:46:b8:
41:a2:30:ff:98:a7:bc:6f:cc:b5:fb:1b:1f:3f:07:33:3b:f0:
6c:e5:ba:c7:04:25:f0:5e:f1:c0:c3:c8:f9:05:8f:1e:6c:a2:
b6:66:ba:ec:f1:0c:b8:e0:94:72:9c:5e:34:52:ca:f5:c5:71:
ca:cb:db:4e:5e:95:2a:48:26:22:35:2d:49:ea:1f:3f:f5:91:
12:93:c5:15:f9:36:f4:50:84:02:0b:d7:01:21:89:82:83:57:
d9:66:67:8c:30:1b:52:ba:7f:36:06:1b:5d:eb:3f:dc:97:5f:
2e:85:7e:50:27:06:d1:bd:54:c2:72:6e:4f:fe:75:5d:1a:bd:
7d:a1:79:c6:07:47:38:d9:b0:68:0c:1a:3e:9c:13:32:9f:a1:
90:ee:26:08:a5:a3:65:3e:f8:c4:dd:26:4f:35:12:22:bb:c9:
88:11:11:a4:90:ba:46:a0:4e:f2:41:ec:e7:3a:ed:3a:13:34:
3d:37:07:94:03:d0:7b:cc:2b:ac:9a:01:ca:85:b5:db:10:9d:
5b:cf:9b:84:0a:2c:37:c0:44:e7:87:f1:e9:80:ab:fc:20:4f:
c5:f5:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:44 2025 by rpki-client