Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137392e302f32342d3234203d3e20313338393935.roa
File: 3138352e3132312e3137392e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: uqBjziFyuEnkGll/ZBPwiMvCOMuCccbvxDT14V0n5RE=
Subject key identifier: F7:16:FD:4B:C8:6E:A2:D4:7C:9D:63:F9:BF:4B:7F:42:F2:FD:E1:12
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 1FD6A681B68E8C1F2ABD6D3945F7D664D2ABFE6C
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137392e302f32342d3234203d3e20313338393935.roa
Signing time: Fri 09 Dec 2022 05:12:19 +0000
ROA not before: Fri 09 Dec 2022 05:07:19 +0000
ROA not after: Fri 08 Dec 2023 05:12:19 +0000
asID: 138995
IP address blocks: 185.121.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d6:a6:81:b6:8e:8c:1f:2a:bd:6d:39:45:f7:d6:64:d2:ab:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:07:19 2022 GMT
Not After : Dec 8 05:12:19 2023 GMT
Subject: CN=F716FD4BC86EA2D47C9D63F9BF4B7F42F2FDE112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:65:5b:fb:49:45:0d:8d:5c:eb:d9:35:c2:
15:36:91:c7:07:5a:34:d0:b0:0a:fb:dd:07:8c:48:
cb:2e:87:99:fd:21:5c:df:2a:59:0c:94:4b:71:f0:
8e:cb:cb:ac:8c:6e:36:0e:0c:62:78:c8:21:b3:3f:
0e:34:d1:e8:1a:05:fe:30:2f:b0:a0:dd:5d:39:61:
77:cc:82:d5:cc:df:d3:00:ea:02:0d:20:cf:0d:2c:
5c:7a:e7:7b:e5:d8:6f:54:97:85:5b:aa:cd:e9:71:
20:6f:51:5a:04:b7:cc:e0:06:21:be:77:18:40:17:
2c:7d:e2:88:55:d0:3a:a3:fc:b0:cb:e7:5d:98:25:
ee:e7:3c:72:58:fe:2e:d6:6c:39:3c:62:73:35:98:
93:45:e9:56:bd:a3:64:36:80:34:88:f3:a0:b5:29:
e1:b7:6a:1c:17:18:6a:5b:58:e3:87:44:ad:37:26:
27:ce:e8:fe:aa:c2:4f:f3:2a:91:32:68:c1:63:31:
72:95:1e:05:81:98:c1:df:13:80:f3:db:f3:9b:6d:
c8:74:b5:eb:4d:5f:78:38:54:43:5d:5b:b9:9f:36:
bd:42:51:5e:d8:b0:fd:3a:57:85:32:a7:64:8a:1b:
3e:62:c4:3b:78:c5:a9:fd:76:b1:3c:02:ab:b1:62:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:FD:4B:C8:6E:A2:D4:7C:9D:63:F9:BF:4B:7F:42:F2:FD:E1:12
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137392e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:da:c3:b6:5d:0c:b3:62:fe:82:35:83:aa:04:07:58:a6:bd:
f2:e6:0f:e8:f7:9e:e4:08:74:77:36:2c:41:96:77:d9:f1:ad:
cb:a2:91:3a:fb:67:54:b8:64:c1:5f:ee:e7:ea:0e:98:bf:9e:
ce:50:86:b5:00:fd:2c:61:b7:3b:07:79:9b:b4:bb:f9:ab:d8:
55:b7:f4:42:75:80:85:2d:07:51:6c:af:e3:48:fd:b8:51:c7:
0c:29:7e:4a:b1:8a:81:6a:a6:26:6c:42:bd:17:4a:ad:25:c7:
af:a2:b5:4e:fa:30:41:26:86:85:37:95:b2:79:ed:4d:1c:c5:
38:5b:8b:1c:4e:2b:23:9b:b5:c8:0b:cd:ca:89:d2:4c:c3:34:
36:69:42:0b:b8:76:2f:79:9f:c3:ce:38:3c:df:7a:fb:b2:d3:
05:d3:ba:db:e5:0d:c1:14:d7:6f:83:06:6d:ca:e5:54:53:79:
cc:d1:20:ff:c4:d2:d3:ae:fa:f1:39:1e:aa:9e:38:b4:95:56:
00:da:a6:4e:d8:04:4b:67:41:17:33:62:ce:38:3a:1d:40:2e:
bc:26:81:b0:17:4b:2a:d8:48:84:bf:6e:f0:cb:62:96:23:4b:
15:61:0b:00:3c:eb:13:7d:08:59:b4:6e:32:d9:6a:e5:d0:99:
6b:87:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:24 2025 by rpki-client