Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a313030303a3a2f33362d3336203d3e203434353730.roa
File: 326130363a313238303a313030303a3a2f33362d3336203d3e203434353730.roa (raw, json)
Hash identifier: ZPVp8ht40nMPHvFmZ18ywB0HDL5WDnrgBo1EgKqBWsQ=
Subject key identifier: 11:27:4B:8E:BA:58:36:50:EA:73:A1:12:BA:7E:D4:2A:A4:27:B2:7F
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 4EA5AB2566E10F3C1DDD5298CE44F268C333677D
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a313030303a3a2f33362d3336203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:07:58 +0000
ROA not before: Fri 09 Dec 2022 05:02:58 +0000
ROA not after: Fri 08 Dec 2023 05:07:58 +0000
asID: 44570
IP address blocks: 2a06:1280:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a5:ab:25:66:e1:0f:3c:1d:dd:52:98:ce:44:f2:68:c3:33:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:02:58 2022 GMT
Not After : Dec 8 05:07:58 2023 GMT
Subject: CN=11274B8EBA583650EA73A112BA7ED42AA427B27F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:58:f1:34:23:a2:b1:78:8b:4f:2c:9b:18:
b5:b8:a8:94:23:66:07:08:7e:24:81:06:6f:9e:93:
c8:05:05:06:ff:bb:55:95:7f:5b:03:25:1e:c4:82:
73:41:4a:e6:34:8c:39:6d:4f:b6:67:c9:4f:48:f6:
a3:53:82:ff:66:03:cc:c8:f5:bc:61:78:a2:91:7c:
5e:14:b0:ce:88:7b:58:62:1c:76:99:a4:f3:ae:5d:
5b:50:ca:92:bf:a0:c3:44:ac:d6:b5:3b:0a:72:d3:
28:c2:97:9e:8d:c1:36:1b:37:2b:bc:d8:70:c1:fb:
d7:07:2b:e9:e9:d3:dd:9a:39:e1:e9:df:fb:6a:cf:
7b:fc:3f:09:c5:29:33:b1:c1:23:09:59:28:bd:a6:
c1:d6:9b:a3:c8:39:10:96:fb:b6:81:70:ec:e6:52:
54:da:a5:73:cc:2f:51:f8:f5:7e:06:74:31:68:a4:
a9:86:7c:79:da:59:cc:b5:17:a8:da:11:4e:86:c2:
d6:0a:42:9c:46:03:0e:61:8a:9e:2a:97:c6:b1:7a:
cd:d6:61:80:9e:49:dd:6a:e5:1e:04:45:e5:05:ed:
6a:ec:3c:fe:75:5e:fd:8c:e8:ae:c5:ed:d2:d0:19:
15:86:64:eb:fc:72:a7:68:3b:a2:c9:be:dc:11:80:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:27:4B:8E:BA:58:36:50:EA:73:A1:12:BA:7E:D4:2A:A4:27:B2:7F
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a313030303a3a2f33362d3336203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:1000::/36
Signature Algorithm: sha256WithRSAEncryption
60:b4:fd:be:20:7a:a5:22:e4:b3:84:7a:e4:7a:98:6e:f5:44:
2f:46:54:d2:b7:3b:8b:49:7e:a8:94:21:6b:46:37:a3:9c:56:
e3:30:27:4c:e4:6f:87:7f:0b:3c:3f:fb:82:44:11:1f:99:54:
f3:96:18:e9:59:da:e9:6d:36:cf:07:50:0b:8d:42:99:cb:ac:
39:f5:e7:06:47:de:41:4a:c9:75:f7:ca:4b:df:c6:c4:70:c3:
69:b6:e9:e5:e2:2b:aa:07:29:72:c4:19:0d:5a:4f:66:4a:1e:
b3:86:f0:2a:c5:fa:47:fc:0e:0e:77:68:f5:19:04:1b:65:46:
57:da:7d:80:57:ca:eb:99:23:e2:b3:f8:04:78:df:70:28:1a:
c7:1e:ce:5a:6a:fd:d0:cc:06:30:39:50:52:2e:30:29:6d:fe:
33:7a:0d:b4:d2:5d:98:41:e5:e7:bf:bb:44:52:6e:a9:ef:5d:
fc:97:79:4d:0b:d1:74:d3:f2:a0:33:fa:f6:38:cd:fb:d9:1f:
30:78:55:80:2b:c3:e3:82:6a:fa:18:0d:c5:2d:42:04:46:11:
69:64:5b:00:a4:21:30:8c:8b:fd:73:b6:b9:70:2b:40:47:50:
55:3c:77:5d:92:a7:51:9c:4f:b6:90:56:ed:de:54:12:fe:c8:
3e:17:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:50 2025 by rpki-client