Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231342e302f32342d3234203d3e203336333531.roa
File: 3138352e3233362e3231342e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier: dNArpGqe8hcuWg7yhu8WLv1jwpVWITpbkqoRXLjZXEo=
Subject key identifier: 1F:D0:A7:B5:98:69:DA:00:A0:D3:CB:F2:0C:02:CF:AD:41:9C:C9:67
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 5A5D62B38E09BF60F20DB7F3EA80B665197D79EB
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231342e302f32342d3234203d3e203336333531.roa
Signing time: Fri 09 Dec 2022 05:13:39 +0000
ROA not before: Fri 09 Dec 2022 05:08:39 +0000
ROA not after: Fri 08 Dec 2023 05:13:39 +0000
asID: 36351
IP address blocks: 185.236.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5d:62:b3:8e:09:bf:60:f2:0d:b7:f3:ea:80:b6:65:19:7d:79:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:39 2022 GMT
Not After : Dec 8 05:13:39 2023 GMT
Subject: CN=1FD0A7B59869DA00A0D3CBF20C02CFAD419CC967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:dc:f1:ff:95:ec:2a:54:9b:6c:fd:f7:67:
21:93:89:2a:13:88:b0:e0:2d:b9:48:d1:ab:ab:c0:
d1:1b:ca:bf:f9:5f:76:8c:65:ef:9f:81:42:96:57:
56:22:92:58:11:fb:4c:5c:34:65:d4:a5:91:f9:c0:
89:61:f2:1f:92:ff:7f:04:f6:4d:85:ed:f7:5e:77:
cd:91:31:07:d4:d8:5f:bb:46:68:cd:e2:d5:d7:c1:
bc:5d:6f:f7:28:b4:6c:d1:6f:f8:66:48:08:bd:7a:
c7:d5:9e:ea:e5:43:86:e4:fb:09:11:6b:e4:e8:25:
d3:3b:d8:fc:88:c3:11:15:18:db:c3:2a:bc:38:43:
e8:46:4c:fa:a7:fd:1c:fe:c1:69:1a:90:a9:f5:99:
3d:22:b2:cc:ec:14:15:38:c4:bf:54:03:24:89:bb:
ac:18:d3:43:8c:e8:fc:a0:e0:e5:11:c5:57:dc:06:
9d:4f:7b:7a:77:6d:af:12:1a:9f:1e:27:f8:22:6f:
82:29:0f:a5:ed:42:e3:e2:8d:34:75:2c:78:67:bc:
fa:60:0d:0a:21:8a:e3:44:cf:90:05:ac:02:27:d2:
86:72:9c:7d:50:23:98:c7:24:f3:f9:ef:4e:92:98:
98:92:3a:89:e2:3f:19:46:d4:3a:02:e3:4b:ac:14:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:A7:B5:98:69:DA:00:A0:D3:CB:F2:0C:02:CF:AD:41:9C:C9:67
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231342e302f32342d3234203d3e203336333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.214.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bf:f4:30:b8:4a:72:fe:ab:d2:43:32:79:2e:ac:15:af:20:
07:8a:a5:d0:dc:90:59:80:72:f2:00:99:cb:fd:5d:f4:fe:bb:
20:c9:2a:68:2b:7f:5f:e2:c6:d5:fb:37:8a:0d:14:89:b5:bd:
af:68:97:2f:8e:5a:a3:35:f6:1c:de:98:01:7f:b3:0b:e7:15:
cf:bb:18:92:8f:1f:02:e2:c8:c1:7f:2c:2e:21:d3:6b:1a:a6:
65:e4:00:40:2e:33:38:a7:ba:c9:28:85:05:7e:98:aa:b3:20:
45:6d:0b:43:f8:8f:9f:dc:a3:70:2b:11:a8:67:9b:8c:40:64:
3b:8b:73:7e:f9:dc:85:33:7e:f0:88:ed:7b:49:23:96:6b:a9:
7c:75:5e:57:c3:6f:3a:af:85:9d:8b:16:0c:c8:57:31:c8:aa:
58:8d:46:25:b9:fd:c1:20:ad:3f:88:91:77:36:d0:73:ec:77:
3e:b1:5d:b2:77:db:5d:a7:8d:db:31:a0:64:be:fd:92:6c:1a:
4b:d7:93:f8:f4:24:ea:75:7d:20:0f:11:4a:ce:39:ca:20:73:
eb:6e:2a:78:ce:44:b8:c6:ce:44:7e:85:d6:ca:42:ee:82:b9:
5d:65:2e:d6:33:04:88:90:bb:86:8f:7b:7e:f2:7c:3c:0c:a7:
70:44:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:03 2025 by rpki-client