Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233382e302f32342d3234203d3e20333936333139.roa
File: 3138352e3139352e3233382e302f32342d3234203d3e20333936333139.roa (raw, json)
Hash identifier: qjlAFp6eSg9aPHUcRgiiFIL1r4bsVq0Qe1Rvf7+NMmA=
Subject key identifier: AC:26:42:B4:D5:26:62:5F:8C:2D:68:DA:62:9B:BE:D2:59:4F:F1:30
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 219DE7910C1787AA46D314E01184D8FD5065A54A
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233382e302f32342d3234203d3e20333936333139.roa
Signing time: Fri 09 Dec 2022 05:13:20 +0000
ROA not before: Fri 09 Dec 2022 05:08:20 +0000
ROA not after: Fri 08 Dec 2023 05:13:20 +0000
asID: 396319
IP address blocks: 185.195.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9d:e7:91:0c:17:87:aa:46:d3:14:e0:11:84:d8:fd:50:65:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:20 2022 GMT
Not After : Dec 8 05:13:20 2023 GMT
Subject: CN=AC2642B4D526625F8C2D68DA629BBED2594FF130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:44:e2:1a:54:38:c8:06:d5:32:56:fa:37:
b2:e1:4d:34:98:a4:b5:71:8d:c9:f8:73:ad:e1:e5:
0d:14:42:88:2f:5a:05:58:f0:0d:fc:91:ce:b6:4a:
cb:89:fc:74:7f:2d:b7:f9:71:29:5b:ea:1f:da:b0:
22:93:09:04:89:d4:c6:82:31:3b:e6:03:72:4b:bf:
ab:40:9a:2f:b7:ca:56:1d:ac:c9:f2:fd:db:05:1a:
0e:53:ac:68:fc:17:e9:2d:fc:57:f8:fe:f8:9a:41:
87:17:aa:4e:96:7b:0f:7e:b9:da:43:26:e7:5b:d7:
5c:bf:07:80:2f:17:71:ae:8c:92:67:2f:68:77:7c:
0d:c6:ec:fa:2b:ca:1d:85:81:38:ba:f5:a0:8d:a3:
a7:68:63:77:95:6d:a8:d2:f2:f2:45:3e:42:48:09:
68:22:e8:d9:a7:1c:60:01:07:01:08:c4:50:95:67:
94:21:79:2a:cc:13:e9:15:62:2c:39:8b:5e:a2:48:
b6:a3:85:9c:ee:62:5a:10:99:ef:dc:1b:02:18:ab:
38:99:69:e7:84:d3:a2:91:52:51:2d:1e:22:e1:a9:
18:63:3f:d9:49:aa:00:d0:3e:4f:37:39:90:0b:ce:
0f:f0:3a:72:b3:9e:83:38:90:74:5a:03:7c:44:eb:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:42:B4:D5:26:62:5F:8C:2D:68:DA:62:9B:BE:D2:59:4F:F1:30
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233382e302f32342d3234203d3e20333936333139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:52:4f:22:d5:76:6d:bd:0d:8d:aa:d9:bf:c1:9d:7d:af:27:
86:89:95:0d:4d:0d:3c:2d:3e:32:68:c5:18:05:4c:22:92:ab:
e3:c7:fc:36:69:2e:01:e6:64:65:4a:e5:7c:f3:5d:d5:35:05:
ae:43:ce:7f:ca:61:22:95:02:f3:cb:36:22:27:d2:b3:06:26:
da:f4:7a:60:be:c0:e1:9c:62:10:08:ef:b9:da:b3:ac:d4:c5:
7d:7b:77:6f:88:e4:02:3e:e9:31:22:ac:af:b9:ab:48:d5:37:
21:d5:20:89:66:c7:b9:80:ff:6d:72:56:cd:81:c5:6b:23:df:
3c:02:6f:d8:ba:e5:fc:03:7d:f8:35:98:63:08:3c:0d:0c:a3:
e0:49:54:b1:44:51:ef:db:29:13:65:c0:90:f2:9d:79:a2:c4:
85:c4:c3:0b:97:90:ec:e1:31:1c:84:0b:b6:98:6b:53:96:cd:
25:ab:3b:fd:84:78:0e:e5:aa:b0:a7:12:c2:69:60:81:a4:21:
92:42:cc:7b:37:bb:bd:b5:f0:17:b6:f7:67:c8:e9:1a:da:c6:
df:91:1f:7e:61:2d:52:51:4c:a3:71:7a:c5:5a:27:ee:1d:6d:
cd:9f:ff:36:79:36:e5:c8:f8:11:07:00:4e:25:14:1a:95:fe:
d0:6c:db:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:26 2025 by rpki-client