Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137322e302f32322d3234203d3e203631313338.roa
File: 3138352e3231342e3137322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: GL+z93KtcRzcmGiHqAnYnZPDQqoNE0veodBwclbLm1I=
Subject key identifier: 43:BF:44:9C:01:89:15:8E:32:FC:44:26:8F:4B:38:7E:D9:D6:06:62
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 750886B24BFA28325CD0BDD4A0B9A46B076A8545
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137322e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:10:26 +0000
ROA not before: Fri 09 Dec 2022 05:05:26 +0000
ROA not after: Fri 08 Dec 2023 05:10:26 +0000
asID: 61138
IP address blocks: 185.214.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:08:86:b2:4b:fa:28:32:5c:d0:bd:d4:a0:b9:a4:6b:07:6a:85:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:05:26 2022 GMT
Not After : Dec 8 05:10:26 2023 GMT
Subject: CN=43BF449C0189158E32FC44268F4B387ED9D60662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:1d:85:3a:e1:53:e8:53:52:30:fa:c0:b9:
8c:7d:4c:a2:dd:3a:d6:3d:33:8d:e0:e4:d5:e1:81:
41:7d:38:66:a0:f1:e4:a9:d8:cd:94:91:e2:e2:7a:
e7:cf:e0:5c:26:76:b8:24:0d:d4:92:40:9f:3a:a6:
91:f1:12:ab:1b:e5:37:07:81:7b:d2:2c:29:32:72:
68:5f:e4:e8:40:2e:e7:0b:40:f9:8d:0c:c1:a6:f1:
6b:33:52:96:23:ac:7f:47:35:48:31:1b:41:a9:65:
a8:4e:71:f3:71:eb:f4:47:5a:b5:64:38:4a:2b:d6:
95:f1:bf:81:b1:00:e2:ff:90:f0:f0:1f:26:86:17:
5e:1c:73:4d:ba:54:ae:ec:f5:38:1d:55:71:ee:8b:
8b:f5:19:b1:30:41:7f:d9:fb:fe:e9:b6:3f:70:6b:
dd:0a:ae:ca:02:c7:43:b2:fc:f8:a0:a7:6f:b1:f5:
b8:3a:65:39:94:12:a8:29:33:41:e2:85:7e:80:27:
2a:6c:92:1d:78:f6:f5:c6:15:14:72:69:31:a4:01:
c5:0b:ea:f7:81:d4:bf:f3:5f:57:f6:c5:8a:18:15:
7a:f8:c5:b5:14:bb:e0:b6:d6:3b:71:62:50:14:c5:
0b:b4:c8:3e:24:69:2d:9c:13:ab:8c:df:c5:a9:16:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:44:9C:01:89:15:8E:32:FC:44:26:8F:4B:38:7E:D9:D6:06:62
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137322e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c1:fb:10:e3:2f:d2:51:ac:49:40:cc:3f:af:0e:9c:eb:e4:
48:f9:8f:72:70:7f:1d:40:13:2d:e4:1e:5c:03:ef:53:f1:f1:
80:f2:68:2b:19:0f:80:91:68:28:c1:70:e2:52:72:f2:a5:3e:
fa:d5:af:a9:ea:52:73:0c:01:5b:db:fb:07:df:6c:36:68:89:
b5:29:52:91:1a:6a:80:66:bc:22:50:c9:00:2d:02:27:f8:48:
35:f1:a3:61:8a:c6:69:8e:e4:f0:8d:db:46:f1:37:b1:74:b7:
72:9b:43:fd:67:52:43:87:f6:cd:2d:2e:6d:e5:8f:a9:1f:39:
40:87:5f:e7:23:3f:db:77:cf:5a:5a:17:9c:06:0f:8f:c0:2e:
e3:c4:95:31:e2:7c:b8:54:a2:a1:b4:d1:02:6a:3b:19:60:6b:
98:34:8a:1c:b1:16:72:1a:2e:62:d9:11:7c:16:54:e7:60:b3:
2a:06:49:93:14:a4:5e:8f:1a:b8:29:40:1d:ba:35:38:d4:c1:
31:d8:e2:84:d1:77:8a:a5:3b:68:77:86:c9:d8:ec:e3:74:84:
f7:c7:89:bd:51:10:38:eb:70:4d:35:a1:0b:46:a2:d9:00:6b:
c2:7b:68:e0:38:e4:a7:ef:9d:8f:82:df:3e:59:80:68:b6:87:
c2:f1:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:56 2025 by rpki-client