Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233362e302f32342d3234203d3e20323036383034.roa
File: 3138352e3139352e3233362e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: VDfZz7YuYtT6VVDZ3zf/aNeWWcJH5zUxgNGo7d//28k=
Subject key identifier: DF:24:AD:78:44:2D:1E:BE:BE:2C:D8:E6:AB:15:92:53:D6:6F:77:5A
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 0A19B2C8BB5E0A2D76DC0D04D6F0D0BD57139B6F
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233362e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 09 Dec 2022 05:13:14 +0000
ROA not before: Fri 09 Dec 2022 05:08:14 +0000
ROA not after: Fri 08 Dec 2023 05:13:14 +0000
asID: 206804
IP address blocks: 185.195.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:19:b2:c8:bb:5e:0a:2d:76:dc:0d:04:d6:f0:d0:bd:57:13:9b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:14 2022 GMT
Not After : Dec 8 05:13:14 2023 GMT
Subject: CN=DF24AD78442D1EBEBE2CD8E6AB159253D66F775A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bc:d0:12:6f:de:5e:9e:bd:e2:12:48:7d:14:
5a:18:57:66:85:43:fc:ec:d6:db:0d:a9:f7:07:7a:
41:c3:41:d7:6f:ac:20:c9:e5:79:36:c7:22:23:30:
9e:09:0a:19:6f:c0:80:12:fa:7f:24:11:8d:c4:eb:
3f:8e:08:11:ca:42:07:8a:e5:9c:2d:14:ab:8c:55:
5c:13:c5:68:39:48:85:01:fa:43:f0:ec:f6:80:b3:
64:2e:43:f8:46:fe:75:ec:59:09:4b:0e:e3:75:23:
be:29:92:53:34:cc:dc:6a:68:06:7b:f3:42:b8:69:
4f:4d:7d:27:65:46:79:ee:0e:ce:0a:30:56:83:21:
46:16:bd:66:54:ab:4b:af:dd:50:c4:b1:29:ba:49:
78:de:93:81:af:d2:3c:e1:d1:ad:48:72:22:1f:26:
a8:84:41:c4:1a:84:68:60:b7:93:26:1a:bc:01:5a:
dc:6a:fd:4d:1e:cf:1e:ef:ba:e7:c7:5c:5c:38:27:
66:2b:3f:7b:8b:46:29:ee:37:2d:fe:ba:5a:42:ec:
4b:09:c1:e0:13:f7:38:bc:a1:56:5a:9b:02:32:80:
4e:00:29:4b:46:c4:39:e9:a6:f0:8c:fc:33:0f:9a:
53:56:9b:0d:43:4d:9a:c5:98:59:d3:50:67:60:61:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:AD:78:44:2D:1E:BE:BE:2C:D8:E6:AB:15:92:53:D6:6F:77:5A
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233362e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:03:11:74:5f:55:22:d6:01:d3:c0:e1:47:df:a5:a2:49:a3:
37:c8:cb:ac:2a:89:4e:31:7b:a0:9a:89:93:ec:6f:f7:3a:71:
32:68:41:37:99:1d:1a:81:1b:3b:80:aa:9d:9d:63:9d:8f:a6:
41:f9:fb:3f:47:26:d9:2c:e3:ba:8f:eb:7a:18:12:6a:61:a4:
64:47:89:05:a6:65:ab:85:d2:d7:2f:11:53:12:49:57:35:ec:
eb:2f:7c:e1:78:1d:b8:a2:ff:17:b0:75:bb:2a:02:29:06:7f:
50:8a:b0:ec:ff:3b:be:be:01:a0:f2:f5:2f:ce:1c:d3:e6:1c:
f0:d4:59:20:63:32:37:4b:07:a6:84:28:f2:e4:c1:f3:1e:74:
e5:0e:66:f9:13:cd:fc:77:8f:1e:6e:13:73:b2:d7:85:49:9a:
d1:7a:15:92:f9:32:fb:97:40:63:d7:76:19:ff:7a:ae:a2:4d:
ae:43:43:f2:c3:68:40:55:31:e2:2d:99:ad:98:be:9a:32:7e:
8c:db:48:4c:88:87:bb:11:8f:16:a4:ce:a3:62:ad:18:68:54:
d0:1e:e5:6b:cb:ad:14:4a:e0:70:77:f4:cd:e7:15:eb:c0:d7:
6c:cc:67:94:e3:35:e3:6a:c9:8e:1a:87:e4:b2:6c:d6:4a:19:
e9:76:38:02
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUChmyyLteCi123A0E1vDQvVcTm28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNTA4MTRaFw0yMzEyMDgwNTEzMTRaMDMxMTAvBgNV
BAMTKERGMjRBRDc4NDQyRDFFQkVCRTJDRDhFNkFCMTU5MjUzRDY2Rjc3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3vNASb95enr3iEkh9FFoYV2aF
Q/zs1tsNqfcHekHDQddvrCDJ5Xk2xyIjMJ4JChlvwIAS+n8kEY3E6z+OCBHKQgeK
5ZwtFKuMVVwTxWg5SIUB+kPw7PaAs2QuQ/hG/nXsWQlLDuN1I74pklM0zNxqaAZ7
80K4aU9NfSdlRnnuDs4KMFaDIUYWvWZUq0uv3VDEsSm6SXjek4Gv0jzh0a1IciIf
JqiEQcQahGhgt5MmGrwBWtxq/U0ezx7vuufHXFw4J2YrP3uLRinuNy3+ulpC7EsJ
weAT9zi8oVZamwIygE4AKUtGxDnppvCM/DMPmlNWmw1DTZrFmFnTUGdgYa3NAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU3ySteEQtHr6+LNjmqxWSU9Zvd1owHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgYkGCCsGAQUFBwELBH0wezB5BggrBgEFBQcwC4ZtcnN5
bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMi8zMTM4
MzUyZTMxMzkzNTJlMzIzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2
MzgzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAucPsMA0GCSqGSIb3DQEBCwUAA4IBAQCPAxF0X1Ui
1gHTwOFH36WiSaM3yMusKolOMXugmomT7G/3OnEyaEE3mR0agRs7gKqdnWOdj6ZB
+fs/RybZLOO6j+t6GBJqYaRkR4kFpmWrhdLXLxFTEklXNezrL3zheB24ov8XsHW7
KgIpBn9QirDs/zu+vgGg8vUvzhzT5hzw1FkgYzI3SwemhCjy5MHzHnTlDmb5E838
d48ebhNzsteFSZrRehWS+TL7l0Bj13YZ/3quok2uQ0Pyw2hAVTHiLZmtmL6aMn6M
20hMiIe7EY8WpM6jYq0YaFTQHuVry60USuBwd/TN5xXrwNdszGeU4zXjasmOGofk
smzWShnpdjgC
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:24 2025 by rpki-client