Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231322e302f32322d3234203d3e203631313338.roa
File: 3138352e3233362e3231322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: BivrcLvHjAge3teaOY9nUQNFYXcB9JQpb6ITpSZLggk=
Subject key identifier: AA:49:55:F0:5A:4C:1B:95:E9:E4:BB:3E:4B:4E:77:92:3E:92:FB:66
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 7EC2E701C3B851E74C9686B735AC313CD9DD8061
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231322e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:10:37 +0000
ROA not before: Fri 09 Dec 2022 05:05:37 +0000
ROA not after: Fri 08 Dec 2023 05:10:37 +0000
asID: 61138
IP address blocks: 185.236.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c2:e7:01:c3:b8:51:e7:4c:96:86:b7:35:ac:31:3c:d9:dd:80:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:05:37 2022 GMT
Not After : Dec 8 05:10:37 2023 GMT
Subject: CN=AA4955F05A4C1B95E9E4BB3E4B4E77923E92FB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:f9:4d:a7:11:db:3a:31:80:4f:6c:f3:a2:
23:61:bb:cd:11:f4:33:e8:01:79:51:de:1b:ef:56:
41:56:ed:f2:77:f4:47:20:b4:64:a9:d1:01:dc:01:
c0:de:a0:b5:f4:91:0a:35:04:02:dc:27:fb:91:ba:
51:ce:b2:a8:13:f9:a1:bb:55:d6:53:55:b9:bc:cd:
5c:e3:00:94:da:05:a8:c2:6f:50:46:97:12:e2:4e:
fb:23:76:5c:6f:07:e2:3f:ed:5b:c7:1b:f5:53:50:
dc:36:9b:c7:16:98:90:6d:5a:e5:c6:9d:1e:be:10:
4b:f3:19:a2:b0:eb:29:d2:8f:07:b3:ea:79:82:3d:
84:04:95:8e:88:fe:4d:76:e3:da:16:83:16:09:29:
97:83:4c:2e:aa:be:23:c4:f7:3a:e6:fe:13:f4:8b:
5a:85:a7:9a:0b:6e:e1:f3:a3:50:26:f6:0c:f3:82:
13:33:73:da:b6:fa:c5:75:10:30:4e:c8:95:58:3f:
8c:93:a7:ef:2d:f2:1f:14:34:f3:06:52:81:6c:f7:
f2:9a:d8:f8:1c:58:fe:da:61:0a:c2:47:7d:c5:08:
4c:99:cb:bc:bd:5a:b9:04:48:08:ed:15:ff:9f:40:
37:1a:9c:9d:63:6d:a5:41:b0:76:61:bc:0b:7c:cb:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:49:55:F0:5A:4C:1B:95:E9:E4:BB:3E:4B:4E:77:92:3E:92:FB:66
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231322e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:5e:26:4b:c3:e1:fd:b9:0b:21:1d:b4:51:61:31:54:92:ea:
78:77:8b:cc:4a:27:0c:02:b5:58:7a:16:f2:a0:2c:f3:ef:04:
46:9f:eb:b3:53:e5:e2:e4:23:4c:a3:64:d0:95:a7:79:29:49:
3d:12:45:f3:cf:52:ad:34:15:13:79:db:5e:fc:e4:6b:2d:42:
c0:b5:a2:ac:dd:4f:cc:f3:e0:e1:62:ab:cd:6e:c5:1e:9f:c0:
03:5f:b3:93:ee:62:e9:e9:cf:04:7e:df:8c:3d:64:4b:e4:94:
9b:63:a7:12:f3:f8:26:ed:66:2f:7a:4e:d1:ce:3a:f0:35:c5:
c9:14:46:91:dc:9d:f0:fd:c9:58:05:e6:d9:ff:f3:b2:38:17:
3d:37:dd:20:83:e6:12:a2:62:01:8c:b2:57:c6:3b:d9:ed:68:
d5:64:4e:3b:98:ab:e1:db:50:52:c0:38:ba:0a:51:d9:91:83:
a6:44:a5:d7:15:18:32:35:8f:65:ba:cc:f6:69:c8:a9:29:fc:
f5:49:49:76:b5:65:3d:96:2a:d0:6e:75:9b:73:70:20:77:0d:
fc:fb:ad:85:71:f1:25:32:4c:20:f0:3f:dd:26:97:96:38:c5:
79:22:51:72:72:d3:56:24:84:10:63:22:69:8a:dd:08:3c:8e:
44:37:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:45 2025 by rpki-client