Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231322e302f32342d3234203d3e203336333531.roa
File: 3138352e3233362e3231322e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier: OuwLY1F/JPeGJUFa2AbFDGZKKQWcdC65LVLnU8zBUCU=
Subject key identifier: ED:9D:E4:12:9C:A1:D5:BA:A3:BA:95:0A:2F:07:94:8A:69:2A:47:FE
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 797277B66565F5838E1023F4D2F25A9F9E487202
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231322e302f32342d3234203d3e203336333531.roa
Signing time: Fri 09 Dec 2022 05:12:59 +0000
ROA not before: Fri 09 Dec 2022 05:07:59 +0000
ROA not after: Fri 08 Dec 2023 05:12:59 +0000
asID: 36351
IP address blocks: 185.236.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:72:77:b6:65:65:f5:83:8e:10:23:f4:d2:f2:5a:9f:9e:48:72:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:07:59 2022 GMT
Not After : Dec 8 05:12:59 2023 GMT
Subject: CN=ED9DE4129CA1D5BAA3BA950A2F07948A692A47FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7d:dc:7b:d1:52:a3:07:cb:2b:34:30:e6:0b:
87:a8:e5:bd:79:36:6f:98:67:f5:98:0d:6a:73:3e:
12:ca:cd:06:e4:b6:74:77:d5:19:c3:18:34:26:ab:
8f:e3:cc:80:c3:34:93:e5:7a:70:66:5f:6c:85:3b:
2e:2e:4c:f1:d2:dc:a0:e1:d5:82:4d:df:9f:62:4e:
03:9f:15:ea:75:94:eb:1c:32:f1:26:33:ee:da:b1:
ce:42:cc:47:ea:07:3e:58:6c:8d:e1:44:39:6a:b0:
fe:ec:3c:28:9a:72:6f:cc:f5:3e:c9:fb:0b:6a:07:
e1:26:7b:ef:9c:5f:1e:ab:e6:48:4b:43:b3:f5:d2:
5f:a9:ff:54:b0:0e:0e:e2:55:e5:1d:17:68:e6:be:
42:18:06:88:4a:49:72:6d:92:d7:03:70:aa:7b:be:
71:54:be:1a:cd:1c:54:0c:20:34:b4:5a:b0:c2:2f:
a4:57:47:85:ca:0d:a5:44:6f:81:a6:c0:df:96:e0:
77:ce:64:60:3a:62:e8:25:ed:07:5a:cc:c5:ec:a1:
0c:70:da:c3:5b:ee:0c:77:2b:f0:dd:4c:f5:33:79:
2f:a5:67:5c:26:30:cb:b2:b2:bb:16:4f:c7:1e:c4:
ab:be:30:88:fa:d2:66:52:39:be:a0:03:fe:db:3a:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:E4:12:9C:A1:D5:BA:A3:BA:95:0A:2F:07:94:8A:69:2A:47:FE
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231322e302f32342d3234203d3e203336333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0c:05:3d:10:77:91:e9:b7:2b:82:39:ce:ef:87:5c:32:01:
54:0e:e4:12:91:ea:76:71:08:91:d5:59:2b:28:1f:8c:76:39:
2b:ce:d4:fa:5b:bb:21:52:34:cb:b2:ef:01:ba:2b:eb:e3:24:
cd:71:2a:77:f9:3c:e1:c7:d9:7b:96:91:ff:7d:dc:e9:08:54:
9e:ea:15:a5:cf:90:e6:fe:a9:71:8a:da:c3:61:f4:a2:69:75:
15:4a:63:0b:50:ff:bd:75:27:5d:a0:83:9f:a0:10:a3:46:dd:
63:84:f6:8e:60:9d:c4:fd:07:d7:42:94:6e:05:be:69:4f:f5:
83:d8:93:99:16:a3:6f:b3:7f:75:85:bc:ec:d8:71:68:25:5b:
6d:0a:f6:db:70:c1:91:25:ec:5c:da:ad:78:04:05:10:03:e7:
fd:6d:3f:4f:18:7d:72:37:a3:d5:4a:1a:2f:f5:26:8f:16:8e:
4e:2d:5c:d6:25:62:95:c9:01:b3:75:7f:96:86:c9:55:e3:ee:
f2:63:6a:67:9f:03:ea:9d:4b:da:8f:67:54:6b:d2:2f:51:09:
eb:f6:4f:ec:b8:d2:6b:34:91:b7:52:f6:9b:5f:47:7a:40:8e:
bc:ff:83:4e:12:da:87:99:41:ed:a8:0d:b6:4e:2b:29:94:c2:
ac:75:68:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:04 2025 by rpki-client