Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133352e302f32342d3234203d3e20323038303436.roa
File: 3138352e39392e3133352e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier: EgloEVZf+iswNIQ0yrk/ppROb5XGh6ZQfONVa+bVAq0=
Subject key identifier: 43:6F:3E:67:80:36:8B:DF:10:43:D8:0D:65:E1:20:73:4B:74:C6:69
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 23594921810B56FC7F051E04EFB48846258B4D17
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133352e302f32342d3234203d3e20323038303436.roa
Signing time: Fri 09 Dec 2022 05:06:45 +0000
ROA not before: Fri 09 Dec 2022 05:01:45 +0000
ROA not after: Fri 08 Dec 2023 05:06:45 +0000
asID: 208046
IP address blocks: 185.99.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:59:49:21:81:0b:56:fc:7f:05:1e:04:ef:b4:88:46:25:8b:4d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:01:45 2022 GMT
Not After : Dec 8 05:06:45 2023 GMT
Subject: CN=436F3E6780368BDF1043D80D65E120734B74C669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:30:c1:47:6e:9f:ce:f7:f1:52:13:e6:55:
14:56:09:82:01:f3:53:0c:eb:07:42:20:b5:1f:a2:
d3:1e:28:11:a0:94:c5:ab:1d:90:0f:52:d3:8f:22:
e0:9b:4d:9b:fd:c8:4b:95:db:ec:9a:bc:cd:2c:26:
fc:b4:f6:00:fb:5f:84:9f:54:f6:c8:57:a2:57:5b:
cc:60:d4:8d:6d:79:69:9b:57:3d:38:45:89:25:12:
6f:41:39:c2:39:d6:32:0c:d7:f7:60:7f:e3:1a:dd:
cd:ce:69:f0:04:7d:dd:6d:2c:1e:61:3e:c9:3e:ee:
a1:06:64:5f:67:21:43:e6:e2:3c:72:13:af:7f:3e:
67:12:86:b2:9c:eb:0d:98:19:ab:be:6c:b2:9c:a5:
01:53:74:1c:3c:80:dd:57:d7:d9:32:ce:77:d4:01:
5c:ff:d7:e0:30:43:ff:b1:10:d1:c5:47:68:66:de:
7c:ad:6c:21:0a:3a:7f:3a:37:0b:a6:e2:5d:6b:65:
67:1e:06:9d:b7:66:88:52:4a:d3:65:f5:c7:a7:2a:
48:d3:ab:c2:9f:b9:29:60:77:df:1a:c0:3b:84:58:
1d:be:ac:ae:2c:5c:a2:25:66:29:c4:78:c6:52:94:
51:22:dd:62:70:7e:45:c0:cd:c5:b6:c4:c6:c1:b2:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6F:3E:67:80:36:8B:DF:10:43:D8:0D:65:E1:20:73:4B:74:C6:69
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e39392e3133352e302f32342d3234203d3e20323038303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:25:d4:3c:c9:d5:47:cb:5d:18:d3:a6:6f:3b:03:af:ff:05:
87:3d:30:73:40:bf:39:dd:d8:65:50:a1:e2:1a:13:aa:31:d6:
09:33:1f:01:cb:45:ac:c3:b8:93:f3:ca:2d:1b:6e:00:d2:d0:
5e:b4:3a:d0:8d:59:f4:2a:e5:f3:e4:ca:2d:9f:0e:ba:97:91:
02:ee:d4:c7:6b:9a:45:5f:97:75:d5:70:ae:b3:31:14:35:82:
fe:e5:a4:86:3d:de:45:e7:a1:76:70:5d:eb:36:80:ef:59:48:
a3:0f:0e:30:28:5b:79:b4:4b:16:31:00:05:66:56:83:7b:68:
8d:b4:95:08:31:a0:75:02:2b:39:e1:7d:aa:88:9c:4f:1e:5f:
d7:6f:c7:62:b2:c9:23:4c:85:f2:ba:08:fb:ba:9d:f1:a7:a5:
f8:a7:c2:db:62:7c:04:8f:1a:46:04:9e:11:b1:63:94:f1:e7:
81:39:10:8b:b5:47:64:d5:80:51:66:55:17:f5:c0:dc:23:47:
a4:17:f7:44:83:35:ad:c4:62:2c:0c:34:c3:2c:00:6f:1e:84:
12:63:de:81:19:df:cf:a8:ba:20:c1:f0:88:2e:ce:57:13:29:
44:0a:76:ce:9b:63:90:1c:32:c6:9d:7c:92:1d:67:25:a9:58:
9f:f0:5a:53
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUI1lJIYELVvx/BR4E77SIRiWLTRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNTAxNDVaFw0yMzEyMDgwNTA2NDVaMDMxMTAvBgNV
BAMTKDQzNkYzRTY3ODAzNjhCREYxMDQzRDgwRDY1RTEyMDczNEI3NEM2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClzDBR26fzvfxUhPmVRRWCYIB
81MM6wdCILUfotMeKBGglMWrHZAPUtOPIuCbTZv9yEuV2+yavM0sJvy09gD7X4Sf
VPbIV6JXW8xg1I1teWmbVz04RYklEm9BOcI51jIM1/dgf+Ma3c3OafAEfd1tLB5h
Psk+7qEGZF9nIUPm4jxyE69/PmcShrKc6w2YGau+bLKcpQFTdBw8gN1X19kyznfU
AVz/1+AwQ/+xENHFR2hm3nytbCEKOn86Nwum4l1rZWceBp23ZohSStNl9cenKkjT
q8KfuSlgd98awDuEWB2+rK4sXKIlZinEeMZSlFEi3WJwfkXAzcW2xMbBsixfAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUQ28+Z4A2i98QQ9gNZeEgc0t0xmkwHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgYcGCCsGAQUFBwELBHsweTB3BggrBgEFBQcwC4ZrcnN5
bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMi8zMTM4
MzUyZTM5MzkyZTMxMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODMw
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALljhzANBgkqhkiG9w0BAQsFAAOCAQEAayXUPMnVR8td
GNOmbzsDr/8Fhz0wc0C/Od3YZVCh4hoTqjHWCTMfActFrMO4k/PKLRtuANLQXrQ6
0I1Z9Crl8+TKLZ8OupeRAu7Ux2uaRV+XddVwrrMxFDWC/uWkhj3eReehdnBd6zaA
71lIow8OMChbebRLFjEABWZWg3tojbSVCDGgdQIrOeF9qoicTx5f12/HYrLJI0yF
8roI+7qd8ael+KfC22J8BI8aRgSeEbFjlPHngTkQi7VHZNWAUWZVF/XA3CNHpBf3
RIM1rcRiLAw0wywAbx6EEmPegRnfz6i6IMHwiC7OVxMpRAp2zptjkBwyxp18kh1n
JalYn/BaUw==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:02 2025 by rpki-client