Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32322d3234203d3e203631313338.roa
File: 3138352e39302e36302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: ZBRnDWACYC+hdF8SVctcibEniZBkXh9uyGwYtRn/mE8=
Subject key identifier: 6A:0E:32:88:2E:EC:3D:64:6A:EA:1D:09:C0:01:E6:71:2A:E5:C5:9B
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 6D38ED6060757E33F5926F00875D45E4932B056C
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:06:29 +0000
ROA not before: Fri 09 Dec 2022 05:01:29 +0000
ROA not after: Fri 08 Dec 2023 05:06:29 +0000
asID: 61138
IP address blocks: 185.90.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:38:ed:60:60:75:7e:33:f5:92:6f:00:87:5d:45:e4:93:2b:05:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:01:29 2022 GMT
Not After : Dec 8 05:06:29 2023 GMT
Subject: CN=6A0E32882EEC3D646AEA1D09C001E6712AE5C59B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:e9:e1:47:59:55:72:15:25:f8:c2:30:e0:
87:09:01:c0:9c:ef:8e:71:1a:79:49:c9:f0:19:24:
c3:b4:ec:dd:67:e2:54:eb:25:e6:8c:8d:bc:a5:33:
af:60:26:74:36:f8:84:2a:59:8a:ca:a2:82:21:d5:
2f:42:cc:90:81:f0:e9:e0:3d:fd:2c:d8:ed:d4:72:
d0:f3:78:e6:55:c8:ae:de:9a:d4:14:f0:44:e2:11:
31:90:63:67:13:23:1a:2c:ae:f0:16:78:81:57:e8:
46:7a:14:0e:17:fd:fd:43:b7:fe:ef:e4:2c:1b:ad:
f4:7d:f2:f9:48:1c:cf:fe:18:d1:67:af:0a:57:19:
18:80:52:56:85:f2:16:c1:c1:f6:3c:eb:b7:64:01:
a8:28:64:d1:f0:36:60:16:13:f4:58:8b:90:3b:fa:
8c:02:e2:e3:56:a0:e6:52:6b:a6:f6:13:4c:4b:b8:
ef:1d:c3:82:78:ab:53:8a:09:38:29:ad:2b:8e:a6:
f4:7a:31:df:7c:61:f0:43:aa:ed:d5:87:01:11:36:
9c:b0:52:1f:c0:6f:05:c5:d0:6f:d6:3f:36:e0:0c:
8b:53:01:de:10:ff:0d:7d:11:8a:c6:4b:7c:3a:bd:
19:7d:df:65:94:19:1c:ba:c8:e5:1e:8f:14:55:04:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:32:88:2E:EC:3D:64:6A:EA:1D:09:C0:01:E6:71:2A:E5:C5:9B
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:d3:27:22:57:52:8f:68:a9:3d:26:b7:3b:b7:ce:5a:ac:e9:
40:93:69:87:7c:7b:c5:c0:ce:20:10:19:3e:cc:d2:cd:6a:77:
de:53:a2:43:12:cd:1c:ab:c2:51:bb:3e:16:74:d2:39:2e:a0:
2f:66:8f:b8:d8:7d:27:7c:4f:2e:55:1b:06:fa:e4:87:b9:93:
5a:bc:dd:88:56:23:c3:ed:c6:51:ab:d8:78:35:3d:9f:0b:20:
e7:70:f3:47:1c:4f:18:4b:ff:96:53:9c:35:ed:b5:4c:36:94:
1c:ad:b7:2f:74:66:9c:d6:ed:41:bf:3a:cd:be:da:23:8c:91:
b0:61:e8:fb:31:89:10:3e:14:bf:b0:91:2f:54:a3:30:eb:1b:
18:19:2a:a0:f0:8c:ed:4f:26:75:23:9b:8f:57:90:34:3a:20:
bd:93:22:ba:df:ed:5d:99:24:42:b8:77:4f:11:bc:c9:8e:59:
19:d6:31:8a:40:fc:ae:d0:ae:32:44:41:28:e8:17:97:07:59:
31:11:98:b9:6e:8f:24:95:2d:5d:9c:b4:2a:1e:3e:fb:3b:f2:
5c:87:1a:1b:eb:29:ff:02:33:4f:5f:91:55:77:1e:99:86:f6:
f3:c1:62:32:ba:2f:6f:2a:dd:51:4e:84:e3:3c:ef:d3:7c:15:
71:88:1d:60
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUbTjtYGB1fjP1km8Ah11F5JMrBWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNTAxMjlaFw0yMzEyMDgwNTA2MjlaMDMxMTAvBgNV
BAMTKDZBMEUzMjg4MkVFQzNENjQ2QUVBMUQwOUMwMDFFNjcxMkFFNUM1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+genhR1lVchUl+MIw4IcJAcCc
745xGnlJyfAZJMO07N1n4lTrJeaMjbylM69gJnQ2+IQqWYrKooIh1S9CzJCB8Ong
Pf0s2O3UctDzeOZVyK7emtQU8ETiETGQY2cTIxosrvAWeIFX6EZ6FA4X/f1Dt/7v
5CwbrfR98vlIHM/+GNFnrwpXGRiAUlaF8hbBwfY867dkAagoZNHwNmAWE/RYi5A7
+owC4uNWoOZSa6b2E0xLuO8dw4J4q1OKCTgprSuOpvR6Md98YfBDqu3VhwERNpyw
Uh/AbwXF0G/WPzbgDItTAd4Q/w19EYrGS3w6vRl932WUGRy6yOUejxRVBEJfAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUag4yiC7sPWRq6h0JwAHmcSrlxZswHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggrBgEFBQcwC4ZncnN5
bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMi8zMTM4
MzUyZTM5MzAyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzEzMzM4
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCuVo8MA0GCSqGSIb3DQEBCwUAA4IBAQAd0yciV1KPaKk9Jrc7
t85arOlAk2mHfHvFwM4gEBk+zNLNanfeU6JDEs0cq8JRuz4WdNI5LqAvZo+42H0n
fE8uVRsG+uSHuZNavN2IViPD7cZRq9h4NT2fCyDncPNHHE8YS/+WU5w17bVMNpQc
rbcvdGac1u1BvzrNvtojjJGwYej7MYkQPhS/sJEvVKMw6xsYGSqg8IztTyZ1I5uP
V5A0OiC9kyK63+1dmSRCuHdPEbzJjlkZ1jGKQPyu0K4yREEo6BeXB1kxEZi5bo8k
lS1dnLQqHj77O/Jchxob6yn/AjNPX5FVdx6ZhvbzwWIyui9vKt1RToTjPO/TfBVx
iB1g
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:42 2025 by rpki-client