Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137352e302f32342d3234203d3e20323033303631.roa
File: 3138352e3231342e3137352e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: mji3bdvKiYdkFIoFDduCY9+PT7Ar4wiK9we8YP/T3ZE=
Subject key identifier: A9:CB:27:5F:A8:61:90:2A:ED:37:ED:DB:DB:81:D7:BC:3A:C8:49:AD
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 1200D32146673696CECA0409E1D91B5C29B7615A
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137352e302f32342d3234203d3e20323033303631.roa
Signing time: Fri 09 Dec 2022 05:13:25 +0000
ROA not before: Fri 09 Dec 2022 05:08:25 +0000
ROA not after: Fri 08 Dec 2023 05:13:25 +0000
asID: 203061
IP address blocks: 185.214.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:00:d3:21:46:67:36:96:ce:ca:04:09:e1:d9:1b:5c:29:b7:61:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:25 2022 GMT
Not After : Dec 8 05:13:25 2023 GMT
Subject: CN=A9CB275FA861902AED37EDDBDB81D7BC3AC849AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:da:1b:0f:c4:2d:48:fb:3f:fc:07:60:c1:
1d:6c:fe:20:60:ec:cf:0a:d1:8a:d2:70:7a:48:e4:
f3:61:de:9b:55:5e:c3:bf:42:74:28:ef:91:c6:2b:
a9:2f:5f:01:84:ca:5a:d5:30:68:54:42:c7:4a:3c:
57:d3:4b:8d:1d:0d:1a:63:8b:6d:ab:c3:ee:06:10:
b0:9c:75:c9:b7:87:ec:f4:9f:12:d9:15:ad:06:17:
00:54:bd:66:61:e7:7b:89:21:4f:b5:aa:8c:fa:fe:
00:a9:6d:ae:13:ee:3e:24:be:34:58:24:01:38:a8:
f8:28:a2:1a:ba:bd:e4:35:f8:88:49:1e:fe:80:31:
ec:33:1f:19:95:4a:fe:2d:fa:4a:3c:4f:37:49:3d:
e1:48:45:44:a1:dd:44:0a:81:ab:05:54:ad:fb:ad:
82:ca:41:12:3d:1f:16:07:32:7e:04:0c:3b:73:4d:
c5:6f:c2:86:71:52:ac:e1:c5:60:ad:6d:f9:3d:c3:
93:cd:8a:fc:fe:c2:b9:88:76:a3:a0:c4:72:bc:73:
e1:3d:62:cd:1d:f0:33:66:31:45:a0:54:72:3a:af:
a0:85:aa:7a:bf:00:20:64:2b:7d:3b:16:48:cb:c5:
ac:e1:93:40:83:86:54:94:f8:34:e1:c0:1a:79:c3:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:27:5F:A8:61:90:2A:ED:37:ED:DB:DB:81:D7:BC:3A:C8:49:AD
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3231342e3137352e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.175.0/24
Signature Algorithm: sha256WithRSAEncryption
33:59:42:a0:b1:42:3d:ab:ce:6f:dd:a5:19:ac:d7:1d:68:93:
2a:14:c6:85:72:e1:5e:51:22:83:c7:f5:d5:90:a4:7d:32:53:
96:20:16:56:75:fc:39:ce:b1:25:b2:b4:b3:1b:06:56:e3:5a:
88:48:06:4b:d0:21:d1:20:59:a0:81:94:d3:53:22:54:66:93:
d7:58:ee:8b:84:1a:bc:19:39:0c:72:cd:6c:24:43:b8:65:44:
2f:89:24:44:64:2c:1f:14:a8:2f:1e:bb:66:bf:0a:4c:63:b9:
12:be:44:a2:3d:8d:42:47:45:47:fb:b1:3b:10:d3:79:41:5e:
67:84:1a:43:f9:ab:12:47:62:83:88:8a:ca:0a:99:a0:49:fd:
f0:be:5c:ff:db:82:f4:e4:07:79:fb:c1:0f:2e:5a:9c:e3:e1:
da:2a:f3:30:04:bb:3a:77:9b:ab:92:85:bb:b1:7c:aa:5e:f2:
fe:2e:d1:05:76:ea:eb:4e:b8:7f:c5:db:f1:9b:43:e8:45:4f:
18:89:84:d5:c6:ea:61:1d:32:3b:3d:6e:39:e8:bd:1e:33:a3:
f2:58:ac:3c:b1:5a:0c:10:72:36:f7:39:22:7c:03:67:41:76:
cc:2e:c3:37:dd:70:83:6c:fd:92:f7:ae:a6:38:8a:9b:82:83:
73:0f:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:50 2025 by rpki-client