Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a323030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a323030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: oSsAA6HK3divJGMgaK6yHA8BJw8QDv5LrleXSYt+tP4=
Subject key identifier: A9:43:49:8D:DC:35:8F:80:C5:CD:21:1A:AA:88:10:90:21:DD:6B:D5
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 189BC3415C04455AE0C816F03ACC0E2B88285BA0
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a323030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:11 +0000
ROA not before: Fri 09 Dec 2022 04:57:11 +0000
ROA not after: Fri 08 Dec 2023 05:02:11 +0000
asID: 44570
IP address blocks: 2a06:a000:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9b:c3:41:5c:04:45:5a:e0:c8:16:f0:3a:cc:0e:2b:88:28:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:11 2022 GMT
Not After : Dec 8 05:02:11 2023 GMT
Subject: CN=A943498DDC358F80C5CD211AAA88109021DD6BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:61:3c:41:0b:bc:83:5f:04:59:89:82:13:
4d:cb:2c:ce:88:2d:81:2e:c9:73:fd:fc:6f:1d:24:
28:8b:20:9b:1b:0a:cf:d9:01:b7:8c:a1:90:75:a8:
ba:8a:bc:41:5b:60:b4:96:a3:ff:99:72:d6:30:e8:
64:4e:67:5d:6e:18:8e:2d:97:40:0c:47:91:f7:43:
24:cf:ea:d6:54:cc:06:a5:af:c6:ec:5a:94:ac:b2:
3c:25:66:95:30:8b:00:81:0f:37:cb:aa:d6:bd:6a:
b3:16:76:ab:ed:9a:18:d9:8a:75:d3:8e:4c:fa:a5:
29:39:72:ee:6d:98:cc:ce:67:0c:95:8e:34:b6:ac:
e9:a5:60:9f:0e:26:6d:27:9d:04:46:dd:35:f0:b1:
7e:cb:7f:57:6f:2f:62:26:54:1b:52:b5:1f:0e:8c:
f8:8e:01:b0:5a:d7:07:be:4c:3c:0d:e3:eb:70:16:
ea:16:e0:7d:1f:34:3c:92:e7:02:e1:78:54:14:60:
63:b3:b1:09:26:ad:e6:dc:62:30:23:2d:3d:53:f1:
0e:e3:3b:a5:0b:33:e6:a3:23:9f:57:d1:6d:cc:c9:
1c:f8:a7:81:98:92:cc:98:f7:aa:d4:f8:1a:41:83:
78:fc:7d:17:b1:9c:5a:14:80:03:af:4a:51:51:07:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:49:8D:DC:35:8F:80:C5:CD:21:1A:AA:88:10:90:21:DD:6B:D5
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a323030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:2000::/36
Signature Algorithm: sha256WithRSAEncryption
17:e2:fa:12:00:48:29:e1:4b:06:c4:22:88:a6:46:10:0b:a6:
5e:8c:94:64:3f:0b:65:b8:3b:d9:3e:00:1d:60:a3:de:93:d5:
fb:6b:52:64:e7:0b:95:0f:99:ec:f0:3f:e8:96:e4:ed:cb:7b:
10:63:5c:b7:ef:58:1d:8c:fb:88:7b:6e:64:bf:33:09:4e:c2:
3f:6c:e8:0c:54:20:80:12:2c:6c:58:cf:2e:3d:c9:f5:eb:1e:
57:72:18:b5:7c:c0:5d:db:5b:2b:1e:ff:58:77:56:54:10:23:
5d:d3:9e:04:c5:d8:d5:64:ac:f1:2a:0a:ff:d8:8a:31:ee:38:
52:10:5f:2d:d8:44:f3:59:ad:47:ad:3c:9a:35:1a:28:3d:4f:
f9:88:b0:af:67:71:72:7b:e7:40:79:e3:5e:0d:27:2b:f5:d3:
99:ef:23:ad:5d:ff:56:db:e6:39:75:ae:b2:ba:f1:64:d8:75:
1b:62:81:6e:1c:8a:ba:1e:a1:c1:29:c6:57:bd:5e:60:dd:8a:
46:2f:ec:b9:ed:c0:d8:a1:a6:25:54:da:a8:1c:86:91:02:57:
45:66:9d:50:18:73:06:0f:dd:92:4f:ed:a4:ad:cb:2b:d2:e2:
a3:14:e3:65:d4:02:47:da:93:41:3b:e8:c8:19:d6:b2:21:f6:
dd:d2:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:36 2025 by rpki-client