Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231352e302f32342d3234203d3e203336333531.roa
File: 3138352e3233362e3231352e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier: 8N81V9+K3rF+GgFYnI2GxJOo+3puODdKrr0tqubr32A=
Subject key identifier: E8:20:24:EC:45:31:A6:19:FF:83:7C:EB:7D:C1:D9:AC:FD:17:BD:BC
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3DAA115A3B0034C088273093BA7E290C693B7619
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231352e302f32342d3234203d3e203336333531.roa
Signing time: Fri 09 Dec 2022 05:13:42 +0000
ROA not before: Fri 09 Dec 2022 05:08:42 +0000
ROA not after: Fri 08 Dec 2023 05:13:42 +0000
asID: 36351
IP address blocks: 185.236.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:aa:11:5a:3b:00:34:c0:88:27:30:93:ba:7e:29:0c:69:3b:76:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:08:42 2022 GMT
Not After : Dec 8 05:13:42 2023 GMT
Subject: CN=E82024EC4531A619FF837CEB7DC1D9ACFD17BDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:13:f2:9d:ee:d8:1c:85:d7:a6:10:04:1b:be:
b2:a4:6c:c9:e2:07:0b:81:b7:a3:b6:12:c0:5e:25:
4b:c4:04:8c:ba:79:55:c5:73:a8:41:44:91:4c:bb:
41:3a:97:86:7b:08:d6:1a:dd:fc:0b:f8:f1:f9:77:
50:c3:16:91:5d:41:a5:b1:b9:79:ae:a6:3a:41:6a:
5a:3f:94:a5:5e:9b:72:f4:e1:1a:59:28:1e:56:1e:
92:7c:d7:07:e6:42:a6:f3:5e:fb:ac:4d:48:6b:12:
7f:e5:80:e2:80:b5:a8:ff:40:6d:d6:40:53:49:32:
b9:dd:ae:62:9d:e6:75:cd:d3:26:ca:6e:0a:e1:6d:
98:df:1b:49:50:e7:66:af:a9:49:f2:4a:0b:f8:2b:
b4:20:b9:63:2c:d1:b6:1c:f7:cc:89:4e:b9:1e:4d:
ce:73:a2:c8:34:f2:84:71:af:5c:38:7f:12:f5:47:
cb:58:00:81:a8:dc:82:77:11:56:38:74:9c:12:0d:
5b:2c:ac:41:69:f1:38:4e:d7:f9:3c:ce:48:57:b3:
ed:56:14:b4:67:77:90:4d:70:a7:41:0f:87:8f:9c:
5c:11:58:f4:97:5b:09:b4:bd:7c:36:82:23:9e:fc:
37:ca:ef:fd:15:4c:a5:4f:97:09:7d:1d:b1:d7:41:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:20:24:EC:45:31:A6:19:FF:83:7C:EB:7D:C1:D9:AC:FD:17:BD:BC
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3233362e3231352e302f32342d3234203d3e203336333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.215.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4a:1d:68:b6:ee:31:76:71:ee:9f:24:0f:4d:dc:1e:69:3a:
b5:ba:f4:d9:16:63:5a:e4:89:b6:48:00:40:18:f2:3a:67:32:
61:87:ab:a1:39:95:9b:ce:ce:c7:6b:a8:54:3e:3a:83:86:6a:
09:59:f9:91:ba:4b:c5:cc:f2:7b:ce:e0:65:e1:4f:39:2e:45:
20:9e:5e:a9:5e:c9:97:7b:f8:16:35:cf:12:8d:bb:79:4a:fd:
ae:21:c6:03:76:67:3e:4c:aa:90:93:e8:4b:34:d3:44:71:68:
48:cc:be:5e:4e:89:a4:62:ee:49:da:42:5a:3d:10:a2:c2:5d:
97:ed:1f:6a:cb:5f:12:4d:f9:c1:01:dd:16:74:56:9f:38:33:
b1:82:e6:24:6a:a5:9b:9a:29:ac:3b:40:fc:8c:0a:74:d3:6a:
69:f4:66:f8:65:e8:d2:eb:70:23:f3:a2:b3:02:f7:5a:91:d2:
cd:a8:ce:02:5d:79:8e:a2:b8:bc:f6:b6:3e:33:84:7c:14:e9:
24:c7:a8:df:0d:97:87:ab:03:82:ce:3f:62:9e:85:4e:4b:6a:
40:d3:1b:18:98:e9:e1:d7:dd:05:f6:55:9d:da:81:e4:94:f5:
1e:20:06:a2:9f:b4:f1:91:c5:47:ab:f0:91:d8:4a:c3:d7:c0:
c1:9d:4a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:24 2025 by rpki-client