Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231332e302f32342d3234203d3e203336333531.roa
File: 3138352e3233362e3231332e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier: Wev69yMUeQf/MV11z3gBjpzUlaYnDwBdwR3XWbT9nOE=
Subject key identifier: 0E:EF:F0:93:A6:3B:4B:0B:45:D1:72:13:8F:31:6F:E8:0D:EC:79:6F
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 26A99E8403AA7E1A3C894A6097CAE7AB55803573
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231332e302f32342d3234203d3e203336333531.roa
Signing time: Fri 09 Dec 2022 05:13:37 +0000
ROA not before: Fri 09 Dec 2022 05:08:37 +0000
ROA not after: Fri 08 Dec 2023 05:13:37 +0000
asID: 36351
IP address blocks: 185.236.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a9:9e:84:03:aa:7e:1a:3c:89:4a:60:97:ca:e7:ab:55:80:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:37 2022 GMT
Not After : Dec 8 05:13:37 2023 GMT
Subject: CN=0EEFF093A63B4B0B45D172138F316FE80DEC796F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:0f:7a:16:7b:28:4b:eb:36:2d:d8:a4:c8:
65:b7:ff:4f:46:60:e7:fd:7f:fd:9a:7d:32:12:df:
a2:2c:a5:0c:87:15:52:46:43:76:c3:89:39:d9:75:
f6:93:f0:a5:db:2b:59:8f:e0:64:68:fb:85:9b:6c:
5e:ea:69:78:f2:fc:d5:29:b7:0b:25:9f:1b:95:cd:
65:20:ad:d9:bf:1f:61:2d:a3:07:bf:b0:b6:02:7b:
b2:95:35:42:43:b9:f3:7e:54:c7:de:ae:44:15:ad:
0b:76:19:e4:7d:ed:b9:d7:ba:51:d9:c0:10:aa:d5:
75:89:c3:fd:7d:8a:95:b2:b1:3d:6e:be:5f:54:7f:
c5:5f:68:4d:8b:7f:cf:c2:37:04:bc:ea:36:bd:3b:
c4:0f:16:74:ce:49:cd:96:94:d1:39:cf:59:e5:44:
7c:bf:75:cd:64:77:9d:66:af:a3:be:53:38:4b:a2:
3e:f5:98:1b:5e:4e:68:39:e2:f8:6f:ba:56:a9:d3:
76:1c:40:02:ac:6c:7f:54:da:50:73:63:e2:4f:36:
49:8e:db:77:09:6b:9f:7a:c1:db:14:04:d2:a3:6e:
2e:7e:e2:3e:12:7f:18:bf:c1:a9:e0:cc:93:c6:be:
83:d3:1e:ec:a9:cf:75:a5:bd:33:cb:eb:b6:9d:59:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:F0:93:A6:3B:4B:0B:45:D1:72:13:8F:31:6F:E8:0D:EC:79:6F
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231332e302f32342d3234203d3e203336333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.213.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e7:09:90:b4:eb:b8:bb:87:4a:e7:82:da:6e:69:50:24:d9:
48:17:82:f9:7f:0e:b7:ea:d6:3f:6f:42:06:b1:d1:72:fd:5b:
d1:c7:35:d7:80:ab:1b:1f:d9:4a:6f:7a:f9:40:9e:d4:56:7e:
59:b3:ec:66:41:aa:9a:c5:d7:97:27:59:34:90:48:08:a5:35:
57:cd:37:ae:cf:b0:22:b6:06:e0:97:5a:1c:1e:f3:43:33:13:
3a:cf:bd:8d:d0:97:93:d0:5a:81:0c:a6:c7:64:7c:6d:cc:a0:
b7:c1:a4:69:bb:9a:25:0c:4d:11:8a:52:03:ca:7a:46:64:8c:
25:5d:bb:b4:dd:4a:f7:f0:3a:87:7c:6d:6f:68:11:43:a7:d8:
6b:cb:8e:1a:16:e1:44:a8:e0:dc:bc:32:9a:95:20:d9:25:0f:
a7:83:19:b3:1b:bd:e7:7c:f5:b1:85:34:4a:7e:3d:f6:6b:cd:
4f:8e:d2:fe:a8:4f:03:97:10:14:1a:28:36:8e:96:59:f7:2c:
17:07:85:44:93:47:89:3a:7a:9a:df:1d:b6:63:0e:fd:66:5a:
41:45:1f:ff:ba:52:8a:56:f8:64:30:b1:1c:11:b5:58:d1:c5:
bc:f4:a7:c0:fa:82:13:1f:4c:43:9c:17:10:9e:1a:6c:9b:46:
b5:ee:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:40 2025 by rpki-client