Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32342d3234203d3e2039303039.roa
File: 3138352e39302e36302e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: qxZlk3Nz5zlS+wOAeJYFp02LE2i1+7GNfRqqTqFrenM=
Subject key identifier: CF:31:D1:EF:24:39:03:A8:E2:71:AD:C2:4C:D3:2B:01:A8:96:57:FB
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 0A8560BAC24B2A5CE5A2AFB67F15AF13E04A5F6D
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32342d3234203d3e2039303039.roa
Signing time: Fri 09 Dec 2022 05:05:25 +0000
ROA not before: Fri 09 Dec 2022 05:00:25 +0000
ROA not after: Fri 08 Dec 2023 05:05:25 +0000
asID: 9009
IP address blocks: 185.90.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:85:60:ba:c2:4b:2a:5c:e5:a2:af:b6:7f:15:af:13:e0:4a:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:00:25 2022 GMT
Not After : Dec 8 05:05:25 2023 GMT
Subject: CN=CF31D1EF243903A8E271ADC24CD32B01A89657FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:60:9a:17:9b:df:c6:ff:0b:7b:c1:a6:18:
30:4e:03:39:7d:f0:b8:fa:3d:eb:55:ef:98:6d:91:
fa:9a:7e:c8:79:ac:69:23:6e:a4:c5:73:89:9c:cb:
11:d6:1a:1e:d9:66:72:e5:72:e3:8d:d1:71:64:7f:
3f:bf:b6:4c:a6:83:da:a3:e3:21:b3:d7:90:ea:0a:
28:8d:2a:a2:e5:68:22:9e:6c:aa:49:ce:3c:bc:4b:
d8:0d:6b:57:49:54:2a:6e:36:12:46:71:10:fa:73:
ca:47:59:a8:68:20:a4:f4:4b:6b:61:f1:38:80:fc:
27:30:f1:47:91:30:d3:5b:80:1a:a5:25:c2:95:ca:
e4:db:ec:ee:50:22:8a:75:42:65:17:46:36:99:40:
ca:7e:06:8a:79:4f:10:69:53:80:ec:35:0a:57:85:
cb:e3:76:b3:f7:49:b5:8f:51:04:42:2f:0d:17:fe:
51:af:f1:d0:0d:fe:33:c1:cc:2e:8a:fd:20:66:ec:
0b:b0:65:0f:6b:34:f1:ae:22:4f:6d:9d:f2:b6:2f:
c5:bf:11:36:91:af:fe:7f:66:a1:94:3b:53:74:58:
fe:3b:44:89:88:6a:e1:51:12:1d:80:36:73:44:76:
82:ce:da:40:da:9c:e2:14:6c:58:a9:5f:16:3e:ab:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:D1:EF:24:39:03:A8:E2:71:AD:C2:4C:D3:2B:01:A8:96:57:FB
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36302e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b2:a9:47:94:06:36:fb:cb:6d:a0:23:54:ec:9f:21:db:87:
05:a1:8d:01:5a:36:91:9a:30:14:97:c2:12:10:55:3a:32:f5:
b6:7f:9d:dd:8e:1e:3d:83:8c:ea:11:d0:82:9d:bc:35:4d:3f:
a3:2d:de:0f:1b:19:c6:f2:be:94:f1:c0:d8:4a:fa:33:36:22:
ec:7b:e5:fd:14:17:18:64:8a:70:28:a8:e4:68:43:ae:68:e3:
74:fd:39:ca:4c:2b:d7:73:60:c7:6b:87:27:88:6d:c4:84:0a:
b3:cb:da:0f:88:05:d0:05:4a:0d:78:a3:91:11:c1:96:99:ad:
a8:63:07:40:c9:43:cf:fd:9e:91:27:ac:b9:8f:04:45:6e:8c:
f2:2a:9f:e9:9c:32:5a:8d:12:dd:49:4f:12:57:14:0e:3e:62:
10:d6:5f:20:99:30:d4:5d:6f:16:f3:ff:fc:b9:f0:a8:78:6a:
d7:3a:87:01:20:30:fe:79:de:46:b0:ee:70:66:5a:97:e3:66:
db:84:f8:9c:2d:2a:14:e1:f4:5b:b4:a8:4a:58:ed:ed:6e:71:
4c:c8:b1:c0:78:69:ab:d3:ea:83:33:05:4d:ee:01:4b:d4:ec:
33:a5:d9:e2:3c:87:25:5a:77:24:eb:4a:12:ae:c1:b2:5b:33:
4a:4a:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:07 2025 by rpki-client