Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36312e302f32342d3234203d3e20313336323538.roa
File: 3138352e39302e36312e302f32342d3234203d3e20313336323538.roa (raw, json)
Hash identifier: m4K9s2f/E4D0szjmDkUlVGSNyDOzQAputvZKHPzcO9Q=
Subject key identifier: 9C:5F:96:82:94:F3:B6:34:55:CF:F3:97:F8:8B:73:0D:E4:6C:CF:27
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 5C3B4F94AB1EB7CDE9F1B538E8424F7A0BF1BD25
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36312e302f32342d3234203d3e20313336323538.roa
Signing time: Fri 09 Dec 2022 05:08:06 +0000
ROA not before: Fri 09 Dec 2022 05:03:06 +0000
ROA not after: Fri 08 Dec 2023 05:08:06 +0000
asID: 136258
IP address blocks: 185.90.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3b:4f:94:ab:1e:b7:cd:e9:f1:b5:38:e8:42:4f:7a:0b:f1:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:03:06 2022 GMT
Not After : Dec 8 05:08:06 2023 GMT
Subject: CN=9C5F968294F3B63455CFF397F88B730DE46CCF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:bd:2a:f7:31:27:cb:31:b7:8c:cc:50:7c:
a5:4e:48:38:02:f6:d4:51:ad:8b:62:65:56:d1:f1:
65:8a:20:dc:3c:80:24:ff:ee:2c:82:8c:fd:c1:b0:
58:7e:e0:1e:27:a7:0c:c5:bd:a3:13:8d:28:6c:0c:
3a:3a:2c:3b:d3:35:39:3c:e8:e7:f4:67:44:da:47:
6f:77:d4:b2:cc:32:f9:04:4a:45:e1:fa:2d:74:ba:
78:10:32:98:bb:50:11:1d:d0:3e:67:a8:5e:66:78:
12:70:c5:20:98:88:55:69:8b:d9:8d:d9:1c:cd:ad:
75:ac:4e:86:14:f6:7a:1c:11:25:c2:12:6c:1a:e0:
b2:ec:37:14:9f:8c:07:c1:dc:96:2c:91:d2:0d:bf:
8d:f4:78:1a:49:7f:88:06:5f:34:55:3d:04:fa:7d:
79:01:c2:0a:25:74:3b:9e:13:76:53:bb:38:0a:59:
cf:70:9f:77:b2:ce:f7:16:93:6c:83:31:b7:ea:be:
14:44:f4:96:fe:af:8a:47:26:22:5a:97:d5:ca:3d:
fe:72:f5:16:6f:65:ab:a1:52:d4:96:7a:33:2d:84:
ca:fa:3b:47:3f:6b:b2:49:16:fa:a2:44:ef:77:41:
d4:1e:58:c3:bc:19:a0:c7:9d:04:ca:24:de:0c:db:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5F:96:82:94:F3:B6:34:55:CF:F3:97:F8:8B:73:0D:E4:6C:CF:27
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36312e302f32342d3234203d3e20313336323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.61.0/24
Signature Algorithm: sha256WithRSAEncryption
49:47:3d:d4:9c:c1:b5:71:56:8d:a6:25:ca:c6:4e:cc:65:3b:
f1:80:90:a5:7e:65:ce:8d:75:9d:5d:11:a3:33:fa:8c:93:7f:
f5:4f:ab:16:c9:51:f7:4a:3b:b5:ec:4a:f9:66:71:16:a4:00:
fe:d9:23:e9:b1:40:e8:4c:e7:5c:1d:23:2a:79:e4:51:02:e9:
24:09:33:bf:5f:38:e1:c8:19:de:63:db:f6:c5:c0:f7:ab:f7:
6e:d2:3e:42:97:a8:49:d1:58:0e:7e:da:bb:dd:65:20:bc:d3:
9e:10:67:8a:f0:49:57:2d:ed:ed:b5:e8:81:c5:11:b5:25:c8:
ee:c4:eb:19:b5:6f:06:c6:2c:16:6a:38:df:50:9a:72:5c:af:
db:8f:08:ec:50:8c:58:27:2d:a1:3f:cd:06:20:7c:2d:eb:32:
ea:bf:37:b3:55:93:93:24:6b:82:79:ef:7e:45:d5:dd:42:45:
02:05:2d:88:3d:82:4e:5e:c7:33:69:96:78:92:46:30:63:d7:
5b:af:36:b8:00:08:f5:8c:e7:e0:65:e0:d7:cb:84:24:0e:e6:
2a:23:d1:64:02:e0:05:aa:ec:46:e7:c2:2c:0b:15:8e:ac:7a:
08:e9:cc:a6:c9:d9:42:e7:9b:27:f5:2d:72:cb:25:73:9c:b4:
42:ed:31:be
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUXDtPlKset83p8bU46EJPegvxvSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNTAzMDZaFw0yMzEyMDgwNTA4MDZaMDMxMTAvBgNV
BAMTKDlDNUY5NjgyOTRGM0I2MzQ1NUNGRjM5N0Y4OEI3MzBERTQ2Q0NGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe0r0q9zEnyzG3jMxQfKVOSDgC
9tRRrYtiZVbR8WWKINw8gCT/7iyCjP3BsFh+4B4npwzFvaMTjShsDDo6LDvTNTk8
6Of0Z0TaR2931LLMMvkESkXh+i10ungQMpi7UBEd0D5nqF5meBJwxSCYiFVpi9mN
2RzNrXWsToYU9nocESXCEmwa4LLsNxSfjAfB3JYskdINv430eBpJf4gGXzRVPQT6
fXkBwgoldDueE3ZTuzgKWc9wn3eyzvcWk2yDMbfqvhRE9Jb+r4pHJiJal9XKPf5y
9RZvZauhUtSWejMthMr6O0c/a7JJFvqiRO93QdQeWMO8GaDHnQTKJN4M219/AgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUnF+WgpTztjRVz/OX+ItzDeRszycwHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4ZpcnN5
bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMi8zMTM4
MzUyZTM5MzAyZTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMjM1
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC5Wj0wDQYJKoZIhvcNAQELBQADggEBAElHPdScwbVxVo2m
JcrGTsxlO/GAkKV+Zc6NdZ1dEaMz+oyTf/VPqxbJUfdKO7XsSvlmcRakAP7ZI+mx
QOhM51wdIyp55FEC6SQJM79fOOHIGd5j2/bFwPer927SPkKXqEnRWA5+2rvdZSC8
054QZ4rwSVct7e216IHFEbUlyO7E6xm1bwbGLBZqON9QmnJcr9uPCOxQjFgnLaE/
zQYgfC3rMuq/N7NVk5Mka4J5735F1d1CRQIFLYg9gk5exzNplniSRjBj11uvNrgA
CPWM5+Bl4NfLhCQO5ioj0WQC4AWq7EbnwiwLFY6segjpzKbJ2ULnmyf1LXLLJXOc
tELtMb4=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:20 2025 by rpki-client