Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137372e302f32342d3234203d3e20323034313336.roa
File: 3138352e3132312e3137372e302f32342d3234203d3e20323034313336.roa (raw, json)
Hash identifier: uPFcQjvYLoIRIJ3BWJ6nmKBJvOr1ZXKo/lCQhdhl5WM=
Subject key identifier: 63:FD:DC:63:41:54:4B:1B:4B:5A:36:88:87:06:F6:93:26:81:22:17
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3E0FD2AA1B505D1B444F7718040C4D601A77C1C7
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137372e302f32342d3234203d3e20323034313336.roa
Signing time: Fri 09 Dec 2022 05:12:06 +0000
ROA not before: Fri 09 Dec 2022 05:07:06 +0000
ROA not after: Fri 08 Dec 2023 05:12:06 +0000
asID: 204136
IP address blocks: 185.121.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0f:d2:aa:1b:50:5d:1b:44:4f:77:18:04:0c:4d:60:1a:77:c1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:07:06 2022 GMT
Not After : Dec 8 05:12:06 2023 GMT
Subject: CN=63FDDC6341544B1B4B5A36888706F69326812217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:71:c3:0d:7b:50:e5:ef:9b:28:50:f0:19:
eb:e6:6b:0c:af:43:73:95:1d:32:3b:fa:a4:14:d2:
70:3a:c6:5d:4b:e2:bf:a3:1a:94:78:d2:1a:c4:79:
f2:43:3c:72:8b:b2:56:f7:0b:50:17:0b:ef:b1:ba:
5b:5e:76:ca:bf:f1:f5:60:12:61:8b:90:f8:02:98:
6e:c0:d1:98:34:d4:dc:0b:c7:08:3e:80:73:c4:ab:
2c:7e:71:37:12:a3:7e:83:46:2f:56:57:47:58:d5:
02:7a:5f:7f:29:e9:b0:47:88:f1:e3:a0:c4:97:e6:
05:c6:d7:85:83:23:01:76:eb:91:9a:86:99:c5:10:
a6:3f:75:c0:08:71:8b:f1:53:4c:57:87:7e:b2:ac:
15:74:ce:f5:a7:fc:25:17:34:d4:f9:9a:09:51:17:
23:67:01:d7:0c:dd:66:92:35:73:3a:bc:54:dc:7b:
2e:3e:dd:01:29:97:a0:99:eb:88:56:50:36:7a:19:
4c:1b:cd:8f:d2:9f:20:02:ad:af:11:9a:44:b1:7c:
03:69:94:0e:27:f3:af:65:4c:35:af:45:9d:f5:80:
f3:1f:11:5c:e6:a8:90:80:ff:ee:c0:b7:6e:b7:ab:
f8:13:44:a2:f0:d9:f5:78:8e:86:1f:25:ff:97:40:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FD:DC:63:41:54:4B:1B:4B:5A:36:88:87:06:F6:93:26:81:22:17
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137372e302f32342d3234203d3e20323034313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.177.0/24
Signature Algorithm: sha256WithRSAEncryption
65:63:53:f4:95:7b:c4:f3:e8:05:8d:0f:67:d7:71:df:da:97:
eb:e8:b5:c6:c4:3f:52:a7:2e:64:52:ef:da:56:61:aa:7a:6f:
a4:82:38:1b:6d:b7:7d:c5:10:7e:13:38:67:43:e9:06:19:d0:
f5:d7:1e:78:df:e8:39:53:7a:f4:2f:19:88:0c:7c:08:10:cc:
b1:dc:ed:89:02:ce:99:c5:10:4a:a9:20:ae:2c:08:3f:d6:92:
bb:76:2d:3c:e6:d3:a3:12:ce:65:74:83:30:26:9d:8d:90:b4:
8a:ee:8f:65:12:51:5a:ba:4a:b5:bf:ba:c8:38:f0:9b:73:c6:
50:8d:5c:17:be:b6:58:e1:d4:2b:e3:5c:31:39:6a:0d:50:76:
10:92:94:64:81:1b:b6:45:23:93:80:9e:80:6f:92:f1:5f:ab:
8a:0e:ec:f0:1a:35:d6:b7:4a:ae:f6:72:3f:03:2d:64:40:9f:
f4:57:98:24:7a:d2:77:be:ea:45:79:14:e8:4a:79:4d:4d:70:
02:4c:85:3e:66:dc:05:46:b0:0b:65:37:dc:b5:f5:a2:1a:31:
3d:e2:d1:53:f2:47:a1:a5:17:38:cd:97:c1:f6:b5:9e:a6:7d:
cf:1f:cd:12:ca:94:cc:6d:ff:f7:64:f4:9d:2e:e8:30:d6:b3:
be:7c:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:39 2025 by rpki-client