Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36322e302f32342d3234203d3e20313333343438.roa
File:                     3138352e39302e36322e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier:          7J2ZjYe0kBBo1WC6kL+WeLD49Y14x94faCzV2bvv4aE=
Subject key identifier:   E0:3A:68:49:2A:9C:56:5D:37:DD:9B:E7:9B:82:C1:6E:C1:51:5C:5B
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       573145740E8733432C865054DB8433ADB2FEC5EC
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36322e302f32342d3234203d3e20313333343438.roa
Signing time:             Fri 09 Dec 2022 05:08:10 +0000
ROA not before:           Fri 09 Dec 2022 05:03:10 +0000
ROA not after:            Fri 08 Dec 2023 05:08:10 +0000
asID:                     133448
IP address blocks:        185.90.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:31:45:74:0e:87:33:43:2c:86:50:54:db:84:33:ad:b2:fe:c5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 05:03:10 2022 GMT
            Not After : Dec  8 05:08:10 2023 GMT
        Subject: CN=E03A68492A9C565D37DD9BE79B82C16EC1515C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:7c:3f:31:43:ba:7e:7e:a3:90:2b:b4:ca:
                    12:1a:15:41:bd:a1:f9:da:ff:62:90:13:ab:c9:d0:
                    4b:10:39:a9:ea:db:f8:be:28:e7:dd:b8:9f:77:f8:
                    52:83:9b:00:a1:99:08:c6:4d:89:c2:76:03:7c:6f:
                    7d:ab:f4:c5:c6:04:05:43:2d:08:50:39:3c:e1:57:
                    ee:49:42:79:bd:c2:23:1b:ae:c1:5d:d3:ef:7c:34:
                    67:1a:95:5f:9f:e3:68:fa:c6:5d:df:19:88:75:5a:
                    e2:9f:a4:e4:cb:6d:78:e4:1c:6b:f3:b0:08:b3:8c:
                    64:70:c4:3a:8e:58:92:14:0c:61:ec:b7:9e:00:07:
                    a2:00:07:c6:76:93:82:f0:bd:9e:8e:36:6e:7a:4b:
                    dc:96:ff:a8:67:98:cb:d4:0b:ba:7a:a7:ba:11:7d:
                    e7:18:33:cb:48:84:36:ac:bd:0f:9f:7b:69:38:16:
                    1b:3a:f1:6d:de:8c:86:2d:c8:79:7e:0d:4f:fc:6e:
                    ad:2e:71:cc:eb:6d:e4:64:99:d5:24:74:05:bf:09:
                    9c:4b:fe:ce:20:7c:3a:4e:31:bb:db:ff:51:d4:e9:
                    7b:c7:90:75:f1:37:07:5a:0c:0d:20:1a:b0:52:94:
                    41:61:ab:ef:97:91:fb:97:62:9c:ba:11:3d:d9:b3:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:68:49:2A:9C:56:5D:37:DD:9B:E7:9B:82:C1:6E:C1:51:5C:5B
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36322e302f32342d3234203d3e20313333343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:35:1a:3f:0a:f4:36:38:cb:4e:b6:b5:3a:79:76:fc:a3:94:
         d9:e2:f8:2d:cd:7a:74:89:47:77:b9:e8:7f:91:d9:e1:f1:4f:
         27:95:30:5b:56:60:fa:0e:f4:46:bf:f9:29:ea:cb:7c:a9:44:
         ed:00:e4:f0:b7:82:8d:56:b2:97:9a:0d:56:2d:07:f7:f4:e3:
         c4:17:bc:ff:5a:f9:ae:30:13:b4:3a:5c:dc:ab:7c:e8:b5:a6:
         17:94:8b:c3:7b:ac:a1:72:28:57:78:11:00:16:c5:dd:6e:0c:
         2c:d3:b4:8d:47:9e:62:1e:96:b4:7b:0a:a3:b7:96:5d:9b:6c:
         05:fe:79:84:7c:b7:f6:2b:b0:a5:81:df:1f:0d:6b:57:a2:c6:
         43:96:f9:75:2a:f0:5c:09:45:15:18:c9:d3:24:a5:36:da:13:
         b0:42:38:92:0b:38:13:94:e7:4c:6b:02:08:d8:b5:22:a4:94:
         58:65:55:8e:f8:68:bd:0d:ae:80:6e:62:ff:33:ad:87:97:5a:
         b7:df:7e:40:b4:85:f2:8a:d7:52:80:19:a0:8d:b6:d7:16:85:
         ae:77:85:b0:12:a7:73:63:e4:7b:c9:22:f4:46:39:69:f5:81:
         d2:31:37:d2:92:97:43:07:e4:df:4f:36:5d:5f:f4:56:77:2e:
         0c:dd:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:42 2025 by rpki-client