Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36332e302f32342d3234203d3e20323033303938.roa
File: 3138352e39302e36332e302f32342d3234203d3e20323033303938.roa (raw, json)
Hash identifier: ttmQDSodo7pByA3toU1AdFOPyK1gDDUxTipKswMnXPM=
Subject key identifier: C8:5A:E3:7F:65:5B:A5:48:5F:21:CA:2C:21:32:CA:FF:0E:43:46:B8
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 322140221B4E0BA389AB2D57421CF407F8F5B6FE
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36332e302f32342d3234203d3e20323033303938.roa
Signing time: Fri 09 Dec 2022 05:04:47 +0000
ROA not before: Fri 09 Dec 2022 04:59:47 +0000
ROA not after: Fri 08 Dec 2023 05:04:47 +0000
asID: 203098
IP address blocks: 185.90.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:21:40:22:1b:4e:0b:a3:89:ab:2d:57:42:1c:f4:07:f8:f5:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:59:47 2022 GMT
Not After : Dec 8 05:04:47 2023 GMT
Subject: CN=C85AE37F655BA5485F21CA2C2132CAFF0E4346B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:3b:ab:43:d0:3f:90:85:52:3e:6a:68:53:
73:2b:14:3d:21:f3:e0:f3:27:93:e7:71:53:e0:9e:
80:5c:18:25:c1:00:49:72:51:60:0a:e7:fb:d9:9e:
c4:bf:2f:70:c1:06:cf:f2:37:2a:bc:a7:d0:50:c5:
2c:25:ce:d4:8a:93:e3:74:4e:6a:ff:01:2b:f6:a7:
fe:48:f1:f8:ad:c5:ac:eb:b8:6e:25:fe:50:fc:24:
31:08:77:ac:a1:7c:37:db:94:0a:9c:28:9b:fe:a3:
c9:91:05:45:fe:9d:5d:47:41:87:a8:f7:3e:7b:06:
9f:e3:99:aa:cf:b5:7b:54:a1:9d:7e:c2:7e:75:d7:
f9:6c:fb:46:80:bf:ba:33:39:79:96:70:31:c1:a2:
f4:25:c4:fd:44:e0:25:e7:4a:5f:c8:49:ff:6c:6e:
34:69:0b:29:65:2c:d7:4a:61:02:13:e2:2e:a0:ff:
1d:7c:c4:73:ed:57:ef:f6:f3:b6:6c:c8:5c:93:5d:
e5:aa:31:cc:dd:48:40:a1:f6:99:4c:bd:11:ba:dd:
35:51:36:8b:ec:63:a7:50:5b:ad:31:3a:1b:da:fc:
05:da:60:82:2d:c4:7f:e4:07:ce:79:9f:9d:6b:f7:
19:ba:e7:3b:2e:b8:bc:72:98:51:78:61:f5:a7:3f:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:E3:7F:65:5B:A5:48:5F:21:CA:2C:21:32:CA:FF:0E:43:46:B8
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39302e36332e302f32342d3234203d3e20323033303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:80:e6:e8:38:6f:ed:f6:d5:12:54:4a:ce:f1:73:83:0e:ac:
92:36:b5:aa:c2:62:eb:58:1f:4e:0c:6f:86:72:28:57:44:74:
b5:e3:b4:74:a5:c6:98:c6:4d:c5:9e:9a:22:e7:2e:a8:79:06:
ca:3c:c7:44:32:1b:03:4b:5c:70:01:f4:29:e9:66:82:ba:1f:
45:6d:5a:4d:07:24:76:cb:7f:12:b1:a8:b6:28:a3:c1:2d:2a:
e7:bd:fa:cc:04:aa:db:94:22:4d:3a:ec:3b:86:d8:32:2f:67:
c0:66:0d:ce:42:8f:14:29:eb:f3:24:6f:59:60:b0:e5:c1:c2:
41:49:18:02:ee:59:e4:20:01:26:97:d2:b3:76:dd:22:bc:f6:
22:cf:83:97:e2:23:eb:33:1e:7b:6f:93:e9:46:3d:ce:5e:80:
ac:04:a9:f3:b1:16:ac:a3:13:f1:e1:ac:ac:a1:58:54:52:31:
ef:e8:16:28:53:e6:b9:d7:3e:c4:ae:90:f4:07:d7:2b:3b:00:
0e:e2:c0:97:4c:dd:5e:9b:71:15:e3:8c:ed:99:c5:38:fa:4f:
8d:f5:bd:22:dd:25:23:5d:ba:0b:bb:f3:c6:89:2e:3c:6d:82:
8f:72:f1:94:74:ec:20:e8:96:f7:83:81:fe:f2:ba:44:93:7a:
27:d6:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:47 2025 by rpki-client