Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33352e302f32342d3234203d3e203633303233.roa
File: 3138352e3134372e33352e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: RlYy3r2T62MJ6i5SMdvK7Miq9ThnDo2MPMrbxNAYecs=
Subject key identifier: CD:32:25:37:A7:58:F1:1B:05:9F:A6:0D:E4:4C:59:C6:CF:2B:7A:7D
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 72DCA1D3C9D1ACAFB72F05D3E7D29F42544DC64B
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33352e302f32342d3234203d3e203633303233.roa
Signing time: Fri 09 Dec 2022 05:13:11 +0000
ROA not before: Fri 09 Dec 2022 05:08:11 +0000
ROA not after: Fri 08 Dec 2023 05:13:11 +0000
asID: 63023
IP address blocks: 185.147.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:dc:a1:d3:c9:d1:ac:af:b7:2f:05:d3:e7:d2:9f:42:54:4d:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:11 2022 GMT
Not After : Dec 8 05:13:11 2023 GMT
Subject: CN=CD322537A758F11B059FA60DE44C59C6CF2B7A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:b0:95:90:fc:ca:7a:a6:60:5d:db:80:92:
78:3f:30:ea:03:02:f9:9d:9a:5a:48:b6:bb:56:d3:
58:21:58:e9:8e:4d:76:7b:06:41:e2:9a:d1:72:b4:
f3:72:92:3c:c5:d7:c7:d7:7e:e4:78:5c:b6:6b:9d:
88:ba:9f:85:92:c4:98:9a:7e:4a:ec:78:18:a8:8a:
31:c4:b5:a5:bc:68:92:eb:9a:30:50:7d:b3:73:38:
af:ae:a5:50:a5:9e:a5:09:48:58:58:7a:fc:b2:0d:
e4:c4:79:e4:ba:03:0e:22:8a:f0:95:69:15:a4:53:
45:fa:23:0f:2e:9e:7a:12:e4:a1:c7:81:a7:bb:fa:
63:76:88:a4:32:67:77:be:8d:b0:7e:fd:81:1f:92:
0b:2d:d5:93:e2:e5:9e:7f:ae:17:6d:fb:a0:f3:ac:
73:2a:ea:11:01:a0:24:08:0b:39:e5:9b:01:8f:3d:
2d:94:80:b4:e6:1d:0d:65:69:9b:84:0c:79:0c:2d:
a2:28:bd:4d:86:74:2c:78:91:14:a8:8d:3d:47:ec:
ac:e3:90:0a:43:80:12:9e:99:c1:49:d4:d1:21:5b:
47:5d:91:8e:e2:a0:a5:e2:e6:2d:98:90:ab:91:9a:
4e:1b:2e:e9:db:77:29:ef:79:13:86:fb:53:92:e1:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:25:37:A7:58:F1:1B:05:9F:A6:0D:E4:4C:59:C6:CF:2B:7A:7D
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33352e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4d:0d:9f:20:9a:61:13:11:9c:d7:5e:02:ba:45:5f:7e:1b:
53:29:d7:15:cb:6c:0c:b8:f9:99:79:06:c6:ea:d7:47:8e:eb:
3c:0d:fa:02:95:a4:26:98:19:31:2d:92:0b:5c:d9:40:f2:55:
e4:63:cd:71:ca:84:c5:36:27:02:e8:3d:81:a0:14:ab:e3:45:
72:02:e1:0a:ef:c4:d6:35:ad:e6:25:b5:b8:87:19:64:0e:75:
c3:26:86:fd:17:b9:8b:a9:43:8e:3f:9c:19:d2:61:5a:90:9a:
a1:3c:9c:3e:06:aa:5d:6d:51:05:1f:1c:24:ad:8b:44:d1:a8:
64:f8:d8:56:58:1a:e5:e2:e6:21:46:d6:34:c2:fa:4a:64:b8:
73:33:7e:e9:21:d2:12:20:a5:e8:0b:52:52:a3:84:f5:bd:84:
f8:f5:e7:54:05:4a:e5:49:84:e3:67:d3:d6:87:58:f6:3e:43:
d9:7f:20:01:96:30:4d:6f:fd:b8:1d:a0:be:4d:88:9c:cc:98:
04:1e:f8:e7:67:3c:08:bb:0b:7f:13:f5:2f:b1:d1:cc:04:12:
5a:b0:e0:98:92:a0:f3:48:02:31:1d:cf:9e:59:57:25:e1:5d:
eb:8b:09:d0:71:97:a4:54:d7:98:d3:a4:bd:c5:8c:5a:c1:8b:
1b:6c:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:50 2025 by rpki-client