Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32342d3234203d3e20323036383034.roa
File: 3138352e39302e36302e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: dxIXZ/rBgaara2fz97cQZVPV5aLLVmrjzioZ2mKi7VI=
Subject key identifier: 67:93:F8:F6:BF:03:E7:96:85:D3:A8:E6:D0:D4:D7:BD:64:27:85:C7
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 4331116B46D9FB97C335AB276925BD7919A64172
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 09 Dec 2022 05:05:28 +0000
ROA not before: Fri 09 Dec 2022 05:00:28 +0000
ROA not after: Fri 08 Dec 2023 05:05:28 +0000
asID: 206804
IP address blocks: 185.90.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:31:11:6b:46:d9:fb:97:c3:35:ab:27:69:25:bd:79:19:a6:41:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:00:28 2022 GMT
Not After : Dec 8 05:05:28 2023 GMT
Subject: CN=6793F8F6BF03E79685D3A8E6D0D4D7BD642785C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:30:39:d4:0b:9f:43:d0:cd:0b:97:ba:a9:5a:
4a:13:dd:ce:51:84:ac:04:2c:92:05:e1:a7:56:f2:
0b:b4:56:03:d1:d2:4f:26:9d:a7:40:4a:2d:10:51:
25:8f:4a:98:85:93:da:78:75:50:32:a8:8c:27:3b:
f6:06:5f:5a:e7:5b:10:62:1f:f2:b0:81:75:19:be:
74:0f:a2:d6:c4:9c:ac:93:00:f7:54:08:8d:f3:10:
a8:76:fe:bc:0e:8e:c9:ad:24:60:2c:b0:0b:a3:8d:
64:81:1c:fd:06:fb:58:ab:d1:cb:dc:93:7b:93:9f:
3b:e2:fd:74:e2:13:f9:03:87:a0:f6:5b:16:6d:11:
cf:b1:e8:e3:7b:0b:84:e5:b3:08:c8:9c:08:07:2e:
b1:08:6d:0d:9b:07:13:1d:78:79:5d:0a:6a:bf:ae:
af:82:22:9d:1a:1a:86:48:85:4c:5b:8c:e1:be:3b:
07:65:e1:fb:5e:07:e0:55:8c:f8:db:1a:da:1f:d7:
d2:07:6c:07:22:1b:df:34:87:ea:22:05:dd:df:0f:
2c:21:59:5f:41:12:e3:09:e9:17:be:44:f7:d0:ae:
aa:e4:db:fd:92:ea:84:b5:e0:e0:83:40:e6:3b:34:
c0:ea:74:1a:8b:66:94:1b:99:47:75:6f:9e:ca:f6:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:F8:F6:BF:03:E7:96:85:D3:A8:E6:D0:D4:D7:BD:64:27:85:C7
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:22:3a:71:c8:a7:7b:46:13:1a:b6:79:6b:db:61:3b:df:59:
d8:7f:fa:b3:0d:76:5e:d3:7e:8e:45:31:03:0b:b2:79:b3:7c:
a0:39:4d:11:a2:ac:bb:f2:a7:cf:e1:c5:d1:ab:12:40:eb:f5:
d4:a4:c0:22:8b:cc:cd:cd:bf:50:02:5a:4a:df:57:08:0c:fc:
b5:43:65:3b:66:2f:e4:f6:bc:a3:d1:f6:a0:01:4b:8d:32:30:
0b:fe:1d:96:a5:5f:3c:71:fc:ee:80:71:0b:c2:fd:de:29:3c:
d6:f2:5c:2e:3e:ba:b1:e6:f2:3a:bb:99:10:a4:fd:cc:68:68:
5d:b0:7f:44:64:35:a7:4a:48:5e:28:f3:2e:8d:7f:e7:be:46:
16:22:32:7e:fb:db:14:af:fb:e6:76:27:56:1f:ce:a5:30:3d:
f6:32:42:a5:e5:c0:6d:61:a8:09:76:df:8a:49:e1:bb:2c:b8:
45:b1:cf:8c:86:15:cf:c2:e0:0c:e5:1c:fd:6a:5c:62:7e:df:
c7:7b:0d:8f:20:e7:64:6c:da:f4:b6:9c:7b:d2:c4:02:37:b3:
5b:7c:48:c9:c3:43:f7:8c:49:15:c5:04:c5:43:69:55:87:28:
2a:1e:93:87:16:dd:a8:8d:89:d8:1a:68:76:b3:70:77:a7:37:
d2:72:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:19 2025 by rpki-client