Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a3137303a3a2f34382d3438203d3e203230343733.roa
File: 326130363a613030303a3137303a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier: uHfjBITmoqtWIZpDj9dz3kMj/gMDh5PQcMDeZR3xWgw=
Subject key identifier: 41:BB:45:3A:64:E8:54:07:00:A4:73:25:EA:80:5A:B8:B8:E0:BF:AC
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 24C73D5954D5CA097852937C5EB04626E5CA07B9
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a3137303a3a2f34382d3438203d3e203230343733.roa
Signing time: Fri 09 Dec 2022 04:59:42 +0000
ROA not before: Fri 09 Dec 2022 04:54:42 +0000
ROA not after: Fri 08 Dec 2023 04:59:42 +0000
asID: 20473
IP address blocks: 2a06:a000:170::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c7:3d:59:54:d5:ca:09:78:52:93:7c:5e:b0:46:26:e5:ca:07:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:54:42 2022 GMT
Not After : Dec 8 04:59:42 2023 GMT
Subject: CN=41BB453A64E8540700A47325EA805AB8B8E0BFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:28:b2:90:89:a9:be:35:92:db:20:ca:01:
50:7c:ef:01:d4:06:00:3e:e2:f5:64:a8:be:44:96:
93:92:76:03:dd:4a:c0:20:0f:97:16:30:42:c0:70:
ed:94:42:30:f9:47:d9:2d:f9:6b:a8:37:84:71:26:
82:14:16:33:1d:ed:1b:91:21:4d:34:b2:0b:7d:2f:
b7:aa:45:51:ae:52:03:8e:60:ef:83:03:42:ac:ad:
4f:56:f5:1f:fe:d5:4f:37:a4:c4:5b:59:c4:da:4e:
7f:3e:49:96:aa:6b:b8:b4:6c:07:fa:68:f1:f8:5c:
2a:c3:22:4f:4b:66:ca:77:64:ab:e0:33:22:2e:08:
2b:e9:7e:5c:64:03:be:fb:5f:76:6c:10:3e:c4:9e:
7d:c5:85:7a:a1:40:5f:a6:f6:24:a5:84:d4:9e:e6:
e2:00:27:f0:c5:54:15:9d:16:6a:df:a4:2e:cf:c3:
cb:24:93:4b:64:38:46:74:1d:c7:ed:84:90:33:a2:
e7:7c:ea:77:00:70:69:bc:3a:a4:4f:9f:57:2d:4c:
d7:84:4f:56:df:c4:dd:e4:99:4c:fd:3b:a4:05:f7:
17:cc:2a:b0:d2:c6:7d:7c:d2:ba:74:da:c7:84:c7:
60:f4:1c:6b:18:d6:44:ac:50:6b:a6:b2:cc:97:13:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BB:45:3A:64:E8:54:07:00:A4:73:25:EA:80:5A:B8:B8:E0:BF:AC
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a3137303a3a2f34382d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:170::/48
Signature Algorithm: sha256WithRSAEncryption
75:4d:f5:20:ae:c8:87:f8:d9:6d:be:e9:f8:4f:96:9b:57:64:
ca:4f:4c:ca:fc:8a:ee:66:45:ca:05:0c:ed:6b:53:f8:91:cc:
5a:8f:ce:99:f1:33:21:cc:eb:40:cc:f7:0f:68:4c:6b:82:dc:
96:2e:16:f0:24:8e:26:81:f7:ae:9a:50:1a:23:dd:05:c8:03:
04:85:50:57:bb:be:da:af:28:09:20:c7:34:45:b3:0d:7f:ac:
fb:ca:b6:7e:83:8b:53:e0:bd:03:7f:b7:b1:cb:04:21:c6:81:
78:81:51:1f:a5:e8:6d:85:00:71:f1:28:60:70:28:04:57:06:
af:5d:12:6c:92:cb:67:b3:77:83:af:5f:74:fc:aa:2f:4a:22:
d2:6f:0b:9a:f6:f9:b8:0e:08:92:69:84:9a:cb:f3:f8:08:b1:
fa:1c:db:ef:d4:9c:78:5e:bf:f9:36:db:35:07:9d:f9:2c:76:
37:84:1d:e0:ee:66:41:00:f6:06:13:b4:3a:fc:87:e6:46:a9:
06:d3:22:50:1c:e5:e4:25:54:03:b8:13:c0:b4:07:f9:e0:64:
01:0c:ca:35:11:ff:bc:46:fe:e2:f5:fa:03:25:44:7b:c2:19:
09:50:36:cf:cb:56:64:20:12:2a:47:b0:39:0d:7c:c3:fd:cf:
2b:0c:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:19 2025 by rpki-client