Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133342e302f32342d3234203d3e20313333343438.roa
File: 3138352e39392e3133342e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier: /NtzTEhtZxHyf3/Nz640CWW1r9lY/f67UwpPGW3f8q4=
Subject key identifier: 41:9A:B9:A1:90:81:AC:3D:AB:60:ED:A1:10:2C:FA:13:32:7B:AA:19
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 4B3629E15F40452D9449500F89977767374DABE5
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133342e302f32342d3234203d3e20313333343438.roa
Signing time: Fri 09 Dec 2022 05:06:43 +0000
ROA not before: Fri 09 Dec 2022 05:01:43 +0000
ROA not after: Fri 08 Dec 2023 05:06:43 +0000
asID: 133448
IP address blocks: 185.99.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:36:29:e1:5f:40:45:2d:94:49:50:0f:89:97:77:67:37:4d:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:01:43 2022 GMT
Not After : Dec 8 05:06:43 2023 GMT
Subject: CN=419AB9A19081AC3DAB60EDA1102CFA13327BAA19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:4a:ca:a3:6a:5a:ac:14:cf:82:79:ad:a7:
1b:38:76:a5:4c:55:da:f7:1c:59:10:5c:db:93:b3:
d7:da:87:47:40:3e:ac:7b:2b:fe:54:6a:ec:a9:f7:
22:74:5e:e2:09:ef:9b:a9:3b:0a:a4:99:46:33:c8:
45:94:c0:26:a9:44:5f:c6:6c:35:1f:91:35:fe:b3:
34:d4:9f:4c:5d:39:a9:21:7d:96:6e:82:fc:b5:b6:
fc:ed:f5:16:80:9c:a7:f8:d0:03:4b:c9:81:3d:61:
b6:af:02:79:be:d3:d8:1f:c8:73:8f:f4:a9:08:28:
9c:7d:56:e2:8b:8f:5e:66:68:ac:54:9e:38:65:27:
96:20:00:f2:f2:d2:37:89:a8:38:17:79:44:6a:67:
4c:4c:f0:8a:6f:a9:e2:6a:3f:9d:eb:6c:09:71:94:
5c:0d:89:1f:ca:11:73:02:72:b8:30:85:63:fb:3b:
06:15:78:95:a2:ec:fe:e9:11:b2:11:31:1e:fb:ec:
4c:a2:c8:b5:33:63:fa:66:35:96:37:28:cf:32:bc:
5a:b2:06:ab:49:2e:bb:6e:54:54:bc:7b:b5:0c:e5:
a5:bc:48:23:0f:3f:71:e8:22:95:05:ba:f8:42:b8:
f5:7c:2b:68:71:fc:29:a1:5f:4a:f9:e5:bc:2f:a0:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:B9:A1:90:81:AC:3D:AB:60:ED:A1:10:2C:FA:13:32:7B:AA:19
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133342e302f32342d3234203d3e20313333343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:42:22:fa:97:f2:df:a1:6e:8c:26:e2:6d:82:25:6a:6c:06:
75:89:c8:70:92:95:9b:2c:55:ca:be:84:9b:c5:09:11:2f:cf:
82:20:1d:7c:51:6c:5a:8d:de:4d:22:76:2c:e5:c3:81:9a:a0:
75:6b:42:7c:7a:cc:83:90:37:dc:c4:72:d4:2b:f8:e2:1d:f0:
e1:6c:28:ed:6c:07:59:ec:37:69:99:4b:5c:ff:1f:38:b7:32:
c9:27:84:9f:3b:2a:87:e7:31:5b:e9:a2:37:31:a7:7c:f3:db:
a4:72:91:e2:44:c4:76:03:dc:25:e7:5e:22:c8:a0:0c:c9:23:
f2:01:a1:81:45:98:ec:f9:9a:48:ee:9c:a0:6e:4d:cb:d5:dc:
40:8f:5f:dd:50:4d:cd:f1:f6:85:81:b3:49:8e:1e:c1:83:bf:
76:ba:59:55:2b:34:01:7a:26:e1:55:d4:c8:c6:c9:88:86:0d:
ee:68:12:f3:9a:22:fb:4a:6d:70:d8:b5:75:87:b1:31:c0:71:
e5:bf:a8:fd:38:03:59:4c:df:7d:aa:e6:75:ee:49:b4:e3:6c:
ae:69:58:39:a8:ce:bd:7e:87:ef:54:e4:ee:2b:25:40:bc:93:
99:7d:a4:33:03:6d:d4:7a:25:11:1e:6c:6e:e7:d4:a3:33:06:
74:40:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:28 2025 by rpki-client