Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233392e302f32342d3234203d3e203631313338.roa
File: 3138352e3139352e3233392e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: hmVu6mtVPWktfRC+eqvc66jLqqIJSGKxChEKbNPxCeg=
Subject key identifier: C1:66:F7:8E:21:67:65:01:FA:CA:98:BE:D4:F8:BC:89:DD:5E:55:7E
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 64C7E1C579E17DE781F60D37B476DD27C408C990
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233392e302f32342d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 04:54:50 +0000
ROA not before: Fri 09 Dec 2022 04:49:50 +0000
ROA not after: Fri 08 Dec 2023 04:54:50 +0000
asID: 61138
IP address blocks: 185.195.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c7:e1:c5:79:e1:7d:e7:81:f6:0d:37:b4:76:dd:27:c4:08:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:49:50 2022 GMT
Not After : Dec 8 04:54:50 2023 GMT
Subject: CN=C166F78E21676501FACA98BED4F8BC89DD5E557E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:9a:c6:2c:c5:20:e9:45:70:5c:75:54:88:
9c:e4:6a:d4:8c:b6:00:24:8d:bd:6d:37:ac:69:ff:
3c:88:aa:f8:02:0a:7a:af:c3:5e:ac:13:59:b7:a6:
37:c3:ba:f4:0a:dc:50:6e:57:ca:a1:2d:19:b9:6a:
1b:35:ce:cd:fa:9c:9f:46:c3:ae:d2:1c:fa:35:49:
cf:85:0e:da:eb:0f:a0:8b:4f:ca:03:aa:1b:09:61:
e1:2b:10:fa:66:ee:9c:d8:7e:58:22:50:82:9d:0c:
b5:6d:fd:fe:2e:a5:4e:9f:51:95:a1:76:8d:d1:6e:
35:f4:bd:ae:23:a8:d1:34:97:0d:72:2b:a0:74:b7:
64:3b:da:41:6f:2e:12:67:8c:af:b4:2f:6b:86:87:
35:89:92:8d:53:f3:53:30:aa:84:d5:66:72:bf:7b:
fb:8b:c8:da:fe:f2:fb:fe:7f:74:c3:9a:79:cb:e5:
c3:d9:a1:4b:81:d6:b5:d5:c1:67:0b:ed:bd:21:fa:
a8:fe:0a:c4:ee:40:6d:4e:5d:1e:7c:93:05:ef:5c:
98:f9:9a:0b:25:05:32:9b:0a:57:e0:4f:6a:4f:54:
35:f0:4e:2f:ce:61:df:ba:51:23:60:da:78:16:52:
7b:02:93:a6:ee:38:5b:8d:6c:28:07:bc:06:e0:3e:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:F7:8E:21:67:65:01:FA:CA:98:BE:D4:F8:BC:89:DD:5E:55:7E
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233392e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a8:92:d9:c0:15:0e:81:e6:22:7f:11:04:c0:11:08:91:fb:
5b:c8:7e:21:fe:dc:83:7d:c8:98:f4:2b:d8:82:ad:2b:85:87:
fd:52:89:b4:73:18:0f:6e:1e:f3:65:d2:f5:68:0b:19:c5:e1:
6d:2b:5b:fa:12:92:f2:8b:4c:b4:b4:74:8b:68:8d:0b:e5:ca:
af:f7:79:09:4d:c1:d0:6b:42:67:cd:e5:10:90:76:a4:16:c8:
74:6d:2e:c9:f0:b0:fc:34:c1:40:f4:fd:77:2f:6c:a2:f3:96:
81:9a:32:3e:89:86:f9:ec:ff:7e:c4:72:41:92:90:65:ab:98:
28:dd:fc:56:d4:c8:db:b0:4f:17:e6:2e:a4:73:d0:eb:56:f6:
8a:e5:44:e2:e8:3c:a2:07:2f:34:df:e4:4d:72:dc:8b:51:21:
05:d9:a8:87:4e:68:56:ed:1e:d9:9c:4d:af:9c:4d:5b:69:c1:
c2:30:9d:e4:41:f6:23:71:14:63:5d:4f:81:c3:61:c2:b6:ec:
84:98:97:f2:0c:64:7e:a4:bd:e2:94:2e:e1:89:1e:4c:b3:c2:
6a:41:08:92:ba:68:76:2f:34:66:3c:6f:b9:e1:08:21:68:4c:
c6:fc:92:81:a0:82:b5:33:e3:00:ef:0c:16:75:66:43:5f:3e:
98:79:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:16 2025 by rpki-client