Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137342e302f32342d3234203d3e20323033303631.roa
File: 3138352e3231342e3137342e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: yDHWZBD2iALlDBVbZ+lqRzNsZhH6fNpDyero+M4Oya4=
Subject key identifier: 31:30:50:9B:0D:29:D8:D7:5B:21:1B:4A:CE:E6:A8:23:A1:DA:34:15
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3E6D30BE98E81FDF5657327EC4CE108CDB5F1034
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137342e302f32342d3234203d3e20323033303631.roa
Signing time: Fri 09 Dec 2022 05:13:34 +0000
ROA not before: Fri 09 Dec 2022 05:08:34 +0000
ROA not after: Fri 08 Dec 2023 05:13:34 +0000
asID: 203061
IP address blocks: 185.214.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6d:30:be:98:e8:1f:df:56:57:32:7e:c4:ce:10:8c:db:5f:10:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:34 2022 GMT
Not After : Dec 8 05:13:34 2023 GMT
Subject: CN=3130509B0D29D8D75B211B4ACEE6A823A1DA3415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:98:7d:4f:f5:21:85:26:32:d1:6a:ed:66:00:
76:67:ae:4e:80:27:bc:39:43:48:1b:8b:96:02:42:
be:fd:04:06:a9:89:b9:d1:64:f3:6b:95:22:e0:40:
99:9b:9b:fa:0b:01:d8:0d:96:cf:ee:6e:76:ab:13:
b0:e1:44:7c:ac:bc:39:f4:e2:85:ac:c3:15:36:d9:
db:fd:82:0d:5c:f9:b2:42:52:ef:e0:a8:e4:79:ab:
9c:9c:2d:bc:09:c9:f6:97:5d:0b:d5:ef:be:55:b8:
8a:66:6c:b6:29:b5:3d:a0:f3:2c:3d:5b:ef:4c:13:
f9:07:ee:99:08:11:37:59:ef:bd:be:a3:64:f3:f1:
28:60:b2:a6:7a:f1:b9:65:27:9d:3c:bd:e2:af:24:
55:ca:68:2a:15:65:46:88:7b:92:92:c0:b4:27:74:
43:ee:72:a8:df:c6:d7:dc:38:76:36:7b:3b:b7:a6:
de:3f:dc:d1:b5:47:bd:13:8f:73:f9:b6:ec:26:bf:
d1:5f:38:25:d4:71:29:a8:e5:24:15:6b:00:f9:e9:
9b:65:68:b3:2b:2e:10:ca:28:2c:f8:6e:2b:99:6a:
a4:af:7e:42:69:ee:cb:09:99:da:f1:df:c6:f0:cd:
f2:4e:f1:7c:5e:b4:e0:cb:d1:73:6c:04:07:40:70:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:50:9B:0D:29:D8:D7:5B:21:1B:4A:CE:E6:A8:23:A1:DA:34:15
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137342e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.174.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0a:08:70:98:c8:7d:6b:fc:d3:61:68:4e:aa:b9:68:26:5f:
96:2e:d8:92:d3:d1:74:27:23:90:09:8c:29:14:ae:94:b9:a7:
1e:73:33:c2:7e:dd:7d:00:cf:e6:f5:52:10:73:60:53:77:c0:
55:72:0c:82:8b:32:b0:83:04:a7:0a:94:7d:70:9e:d8:cd:37:
0a:bb:39:92:01:5e:cb:48:68:c0:8c:f1:58:28:c5:4d:b3:4d:
fb:2e:65:75:1d:e4:d4:c6:fb:89:75:31:68:be:0a:33:81:8f:
49:e4:b5:b2:de:f0:d5:a9:99:d3:b2:3f:09:12:91:30:f6:93:
35:eb:0c:74:c5:e9:a5:14:15:6d:ed:fc:60:be:7a:75:28:c9:
38:c7:fb:81:1b:0f:f0:22:70:96:94:b7:6a:ba:fa:c8:87:48:
6a:e7:8c:c4:ea:e6:5b:14:c4:9c:61:fb:5a:ef:36:ec:ce:c0:
4e:3d:9f:ee:bc:47:6f:40:67:40:78:71:e4:ae:77:cc:5d:65:
6e:af:7b:5c:d6:49:23:39:08:90:61:c8:9c:20:4f:68:2e:98:
32:42:18:0d:36:09:2e:97:9c:d2:34:e0:8a:0d:d8:76:20:af:
0f:1c:41:b9:17:2f:82:2a:44:6d:70:99:e1:0f:ca:dd:8a:40:
7a:e1:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:58 2025 by rpki-client