Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133322e302f32322d3234203d3e203631313338.roa
File: 3138352e39392e3133322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: eAEEb4xqqJU/mXXwBRwPMhjRPgogZ6RilKXORPTeoxM=
Subject key identifier: 50:77:95:FE:4E:37:DC:24:CB:07:82:6E:BB:75:87:E2:05:43:86:F6
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 4D1FFC4E07640328682F6B5FA10074FB050B4190
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133322e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:07:14 +0000
ROA not before: Fri 09 Dec 2022 05:02:14 +0000
ROA not after: Fri 08 Dec 2023 05:07:14 +0000
asID: 61138
IP address blocks: 185.99.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1f:fc:4e:07:64:03:28:68:2f:6b:5f:a1:00:74:fb:05:0b:41:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:02:14 2022 GMT
Not After : Dec 8 05:07:14 2023 GMT
Subject: CN=507795FE4E37DC24CB07826EBB7587E2054386F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:8c:3c:21:cc:80:e8:dc:af:0c:e8:c5:dd:
36:77:d4:1b:d2:85:19:a7:87:05:72:8d:03:59:b4:
d8:ec:7f:d5:28:9d:f3:bc:15:7d:f7:9f:a4:4c:9a:
ac:c6:8f:a8:44:2d:90:f3:48:2e:04:65:77:64:73:
a7:fd:9e:2d:ad:45:53:e3:47:c4:dd:d3:cc:03:db:
c2:f3:ab:5f:5a:1c:86:49:09:91:7d:aa:60:fe:e3:
74:b7:da:b0:41:28:bd:ff:79:e3:31:e1:6c:6a:2b:
7e:66:9e:fa:02:3c:c8:b9:1d:82:d2:73:0c:b1:05:
a3:c6:ba:fa:6e:79:ca:bc:8c:cd:ae:a8:73:35:72:
2e:79:6a:a1:2a:05:08:f3:82:a3:4f:52:c5:d7:c6:
7c:f1:0a:7d:46:3b:7a:42:ca:0c:25:79:cf:95:81:
5c:56:1b:90:ca:e4:75:73:71:1b:28:7b:bb:3c:0c:
27:66:28:50:73:72:5e:33:78:33:c9:2f:14:48:02:
18:0a:f0:e1:6e:40:c6:1d:12:ac:5d:da:da:fc:fa:
de:8f:04:1d:4e:fc:de:e4:78:23:08:91:6d:91:ac:
7f:31:48:78:07:5e:d7:8a:ce:7d:5c:71:e6:b3:e3:
c2:8f:8e:33:5d:a0:67:4d:7a:78:72:03:66:91:02:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:95:FE:4E:37:DC:24:CB:07:82:6E:BB:75:87:E2:05:43:86:F6
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133322e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.132.0/22
Signature Algorithm: sha256WithRSAEncryption
99:31:e1:3c:ca:c3:53:ab:fe:a7:00:57:a5:12:bb:7b:5c:5f:
ec:50:bd:23:8d:81:65:6f:02:13:14:f2:c4:67:8f:1a:94:47:
12:f3:db:3f:30:0b:37:ae:91:e5:4e:e8:1f:ad:58:13:f9:ad:
77:48:ee:16:a8:d1:42:24:21:91:a1:d8:7a:a2:bd:2c:d0:78:
1f:5a:e6:6b:0f:b1:ba:1c:29:cb:9a:e0:bb:14:9f:76:b2:d2:
38:b0:7e:c6:11:b3:a1:8f:c3:5b:c7:fb:5f:cb:dd:4c:bc:d7:
1e:74:5f:a2:ed:68:2b:4c:52:3f:2f:e0:ed:12:eb:0b:a7:bf:
57:a2:2b:24:31:b3:4f:eb:6b:b6:97:0b:16:70:07:5a:ce:62:
d8:11:d8:bc:e1:1a:b1:b0:44:5a:91:36:70:2d:ed:8b:c3:64:
5e:09:8b:a3:f3:03:31:f2:c0:53:1a:b8:86:f5:32:77:f4:ab:
5e:d5:72:21:8d:51:7f:02:ff:18:0e:ac:a0:69:05:fc:a4:89:
95:f7:3c:2b:ac:a5:13:dd:ec:e3:11:1d:64:1c:f3:5e:bb:f7:
05:13:04:bf:0d:be:5e:d1:3c:b2:48:79:df:76:3b:08:7c:55:
c7:4d:d9:0c:b8:02:d3:8d:80:80:8a:6f:ef:a1:02:c2:53:76:
ca:13:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:58 2025 by rpki-client