Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a313030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a313030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: tLbAq+pK46AQOXjrkQltBWBORIACmkaogNM+QxzX/VU=
Subject key identifier: 4F:CE:DE:0E:EE:F5:EC:48:47:69:DD:5A:F9:98:1A:2D:94:EE:10:CE
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 77E7A0CB7B78354C210C50B8C37A40785C6BCFAA
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a313030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:02 +0000
ROA not before: Fri 09 Dec 2022 04:57:02 +0000
ROA not after: Fri 08 Dec 2023 05:02:02 +0000
asID: 44570
IP address blocks: 2a06:a000:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e7:a0:cb:7b:78:35:4c:21:0c:50:b8:c3:7a:40:78:5c:6b:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:02 2022 GMT
Not After : Dec 8 05:02:02 2023 GMT
Subject: CN=4FCEDE0EEEF5EC484769DD5AF9981A2D94EE10CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:57:9b:53:5f:2b:40:03:9c:3a:9c:fe:be:
b4:f7:73:90:ee:62:10:9c:ef:2c:10:c7:2c:52:f2:
a8:2c:0e:59:fa:22:c8:d0:c1:0a:b8:09:99:47:b4:
bb:4f:63:b8:92:a4:0e:d5:41:f5:b9:a5:15:eb:fc:
2c:b1:09:53:44:5e:df:c9:1b:c4:f9:9a:a9:64:58:
a5:9a:09:6c:20:40:c0:82:c7:61:72:9b:61:3d:d4:
01:dd:50:f9:02:43:52:4f:8b:9e:6c:ee:df:c6:32:
0d:70:34:78:05:e8:6d:92:11:83:84:8b:5a:83:89:
81:5e:9c:65:eb:61:55:f1:27:de:75:66:f2:07:5f:
c7:58:91:5b:56:23:98:f9:1c:34:0b:b2:e0:33:bb:
bb:a7:4c:73:bf:94:73:a1:8f:62:da:42:a1:d8:b5:
1c:52:0f:27:77:37:c8:f6:53:82:44:b7:84:6e:78:
54:ae:ce:5e:31:e9:f3:62:d8:07:45:a8:97:84:06:
46:5a:af:01:27:29:ec:3b:67:95:e1:ef:04:9a:a4:
a1:22:e2:b5:31:08:d3:f5:eb:a6:76:1b:ea:1a:23:
df:86:d8:88:c5:db:f7:59:2b:ce:fc:77:b5:cf:4f:
d3:dc:d7:45:6a:46:48:d8:02:d1:48:83:24:91:b0:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:DE:0E:EE:F5:EC:48:47:69:DD:5A:F9:98:1A:2D:94:EE:10:CE
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a313030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:1000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:d2:8e:80:d4:ee:42:04:ac:65:cc:80:27:72:8d:b5:2c:7d:
50:82:7d:ba:46:a5:a0:1c:dc:a8:9c:7c:1c:98:5b:ea:05:34:
c2:0e:3b:ea:f1:cf:2c:3a:95:48:31:93:9a:c2:67:dd:57:ae:
f2:f9:b5:ef:af:09:f3:1d:93:f9:b7:ce:da:67:65:dd:62:a4:
08:74:5d:a4:db:79:b3:ee:08:50:09:2d:7b:d8:fb:a3:c7:25:
73:bd:42:6f:37:b5:b9:8a:0a:ce:bd:c8:f0:6d:f9:6a:16:1e:
13:24:3d:f4:1d:d2:28:cd:23:72:a2:9c:79:d3:14:77:90:71:
00:54:ce:07:84:5d:79:8c:3d:6e:4b:9b:0f:6f:f7:ab:fe:d1:
a8:72:4b:e1:46:ba:0c:01:5f:ea:81:2a:28:e0:68:71:61:37:
49:ce:e0:33:8d:93:fa:12:c2:8d:7d:8c:25:4f:dd:c2:3b:44:
5f:76:16:2b:ce:c7:70:69:14:e3:60:36:0b:41:22:41:c8:3d:
1c:23:cf:55:00:9b:a4:2f:ed:64:ed:4b:23:17:22:b9:c3:d8:
9e:6a:d5:b4:90:fb:cf:85:88:55:24:5e:3a:69:1a:d8:92:aa:
28:4d:84:61:0f:1e:1d:b0:2c:65:90:19:2e:32:81:2e:47:fe:
67:2b:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:46 2025 by rpki-client