Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137322e302f32342d3234203d3e20323033303631.roa
File: 3138352e3231342e3137322e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: sEeLleQMXZh7LwD1hWhWMr8XMCiEM6lEtv3zBuPNijQ=
Subject key identifier: 54:9B:C5:CD:99:CB:27:1E:1F:6C:41:86:82:B7:0A:EB:0A:7B:08:8E
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 0D7F22ABFC895FF5A1E43CBF984B165ECCB64C4A
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137322e302f32342d3234203d3e20323033303631.roa
Signing time: Fri 09 Dec 2022 05:13:28 +0000
ROA not before: Fri 09 Dec 2022 05:08:28 +0000
ROA not after: Fri 08 Dec 2023 05:13:28 +0000
asID: 203061
IP address blocks: 185.214.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7f:22:ab:fc:89:5f:f5:a1:e4:3c:bf:98:4b:16:5e:cc:b6:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:28 2022 GMT
Not After : Dec 8 05:13:28 2023 GMT
Subject: CN=549BC5CD99CB271E1F6C418682B70AEB0A7B088E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:ce:e4:06:9f:0c:02:35:5c:bf:33:7e:85:
ff:7c:7c:2f:e8:49:87:92:3c:34:de:39:04:fd:0b:
04:08:55:e9:5a:a4:ea:bf:bc:73:98:a4:d4:6d:a2:
42:9d:28:d9:c0:fe:74:e2:ff:72:7d:fb:4e:34:0c:
79:07:89:4d:2f:f4:01:fc:46:ea:03:b9:2f:77:d0:
60:03:b7:31:e5:8d:fe:79:a0:8b:92:ac:43:88:7b:
d0:f2:95:65:32:84:be:6c:96:d2:1f:00:19:15:02:
3b:77:ef:1c:b5:9b:9d:52:22:44:f1:03:19:43:9c:
8f:28:ff:4f:4b:f4:66:3d:5c:24:06:24:28:f3:26:
3a:db:4f:93:a3:b4:ac:82:18:84:03:10:c5:63:a1:
ea:81:b8:66:73:08:91:d8:b5:c2:37:50:00:a8:f4:
02:29:50:db:4a:88:4f:25:e4:0a:04:4e:41:a2:7f:
2f:44:a2:16:94:70:ab:b8:54:aa:9c:49:fb:17:50:
52:95:1a:87:f1:df:a4:37:03:10:b4:4c:12:08:c7:
6e:42:16:36:5e:3a:c0:e9:e4:4c:f8:aa:10:8b:26:
6c:74:82:1a:7f:d3:f2:8f:22:8d:e3:e3:75:22:7a:
93:d5:38:be:6d:1c:4e:0f:24:42:36:3d:fd:09:e4:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9B:C5:CD:99:CB:27:1E:1F:6C:41:86:82:B7:0A:EB:0A:7B:08:8E
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137322e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.172.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:62:93:79:36:51:18:e0:46:df:7b:40:58:12:7f:ec:fe:96:
2c:d2:a4:89:2c:6e:5e:dc:96:d2:b2:f7:95:92:ff:bf:3c:f5:
f7:8c:ae:f5:04:8a:80:d0:ba:49:89:d5:d6:85:0b:b9:e3:66:
18:21:49:3d:9a:cc:9a:d3:43:2f:ea:61:4f:2c:17:47:a8:7d:
54:d0:ed:8b:53:a5:f4:5e:b3:3a:27:a2:1e:dd:5e:cb:11:a2:
7f:97:5c:03:0f:1b:60:4b:58:12:cf:c0:24:79:4d:d5:43:83:
de:c9:6b:24:ed:95:10:33:92:c3:c8:6a:e3:1f:df:a6:3c:54:
09:ce:c0:b1:73:3a:2f:d8:74:49:67:92:01:0f:53:29:2e:1c:
93:90:c6:ac:a5:52:91:df:45:ff:7a:9d:49:cc:9c:db:d7:dc:
4f:03:f9:e0:87:2e:40:30:4b:8c:fd:56:0a:aa:9b:70:4b:fe:
5d:7b:e5:4b:14:33:41:04:ec:26:d6:cb:1c:59:b4:38:27:9d:
c6:9f:b6:88:d2:23:99:74:cd:bd:e6:0d:d2:5e:b8:a1:b8:26:
72:2d:94:52:eb:39:95:fa:83:39:c4:c4:87:4a:19:90:66:74:
ab:50:e7:1e:8d:3a:62:4c:c9:fe:6c:47:b0:a7:05:54:db:13:
bd:6f:bc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:05 2025 by rpki-client