Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a623030623a3a2f34382d3438203d3e20393435.roa
File: 326130363a313238303a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: thSbsU84FG8Zwolca82OgndFegrKNarrMxtAdcl9RTk=
Subject key identifier: 02:3B:AE:7D:18:D7:39:6E:C1:F8:C9:27:74:12:43:AD:31:06:5E:76
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3E007E5AF23C99961D1418074DD9B0DD5C906AD4
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a623030623a3a2f34382d3438203d3e20393435.roa
Signing time: Fri 09 Dec 2022 05:07:52 +0000
ROA not before: Fri 09 Dec 2022 05:02:52 +0000
ROA not after: Fri 08 Dec 2023 05:07:52 +0000
asID: 945
IP address blocks: 2a06:1280:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:00:7e:5a:f2:3c:99:96:1d:14:18:07:4d:d9:b0:dd:5c:90:6a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:02:52 2022 GMT
Not After : Dec 8 05:07:52 2023 GMT
Subject: CN=023BAE7D18D7396EC1F8C927741243AD31065E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:56:d4:61:97:5d:31:9d:ee:ec:d2:fa:a0:
16:32:c2:0b:bc:40:ca:02:63:75:24:0a:5c:b9:d0:
8f:d3:df:10:77:ee:94:61:c6:09:3a:f2:4e:91:ac:
2c:97:bb:4c:a8:10:8e:0d:0b:27:fa:89:f8:c4:f4:
90:1c:bd:28:70:b9:2e:1b:ea:e9:a7:07:b3:11:a2:
87:7f:a0:19:15:68:d5:f2:b0:0a:36:6c:b5:13:3f:
19:93:1d:e2:0e:57:3d:41:c3:85:b7:47:ef:e7:e7:
29:1f:bf:55:eb:d4:13:29:4e:2e:38:94:26:3a:7d:
56:18:1a:d6:ea:14:16:e5:ee:52:a5:e9:21:4f:d0:
a9:75:73:08:2e:a9:d9:8b:41:1d:fa:83:60:01:49:
34:43:17:82:19:b5:66:1a:cd:ad:cb:5b:d5:52:fb:
f2:bb:ce:2a:6b:14:2e:6f:0b:c8:f4:6e:49:49:c8:
ed:37:f8:b5:4a:bd:46:50:99:6c:1a:67:9e:61:4c:
0b:24:2e:81:d1:11:b7:ab:ff:4f:26:02:66:14:ea:
d3:6a:53:68:77:39:47:9c:55:6b:90:8f:ff:4f:a9:
fa:c0:f7:6f:97:92:c6:a1:cb:71:9a:d5:4f:60:69:
90:2e:ce:50:1f:ad:7a:7a:a5:d4:cb:f9:79:2d:4a:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:AE:7D:18:D7:39:6E:C1:F8:C9:27:74:12:43:AD:31:06:5E:76
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a623030623a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
67:c2:23:ff:c2:2c:21:75:53:de:2a:e2:6d:cf:11:bb:66:eb:
83:ae:ab:a0:1b:a4:df:6f:4f:54:6e:f9:73:66:17:30:4a:7e:
52:2b:03:dd:7d:38:7f:bb:a8:7a:42:6b:18:a8:56:a0:af:ca:
1a:13:c5:5a:07:c8:9c:0e:4a:09:ca:db:fa:f9:a4:e7:63:30:
13:2d:9a:a5:fc:84:81:61:88:f9:ea:e6:55:ce:0d:39:75:4c:
90:e3:79:4d:aa:01:03:41:ff:4a:6c:03:a1:82:80:c5:89:ee:
85:96:7b:8d:db:45:24:ff:d1:cf:cf:b8:4c:f1:25:d4:e9:81:
7b:93:c0:35:fb:fb:5a:b0:8b:8b:49:db:66:af:29:10:eb:58:
97:8d:74:0b:61:a6:94:a5:92:13:8c:16:0b:d4:07:ef:d8:6f:
74:33:18:14:19:df:28:94:2b:c9:06:44:7c:c6:f1:05:c3:0a:
a9:6d:83:2a:e2:d6:8f:9b:45:98:c4:a0:4d:f3:ef:14:69:b8:
8d:bd:46:82:2b:09:bd:e4:6d:59:bc:5e:ed:a9:2d:f8:04:f6:
c7:dd:b6:83:cb:45:2a:f6:01:b2:47:18:16:ce:86:6b:60:2f:
8d:fb:0d:c8:a2:fe:63:a7:d8:3d:1c:b4:2e:e0:a9:a0:91:50:
24:02:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:52 2025 by rpki-client