Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a333030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a333030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: Po1CxJlBPpbqonmQNHu6b5PyQEv7y5+hecL2lWhkH6A=
Subject key identifier: 5B:F8:D3:AC:1D:12:CD:9D:92:60:9D:96:00:03:8B:E6:50:B6:D4:22
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 483CF32D3FE198C47B32169543EE9301A7588A14
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a333030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:01:58 +0000
ROA not before: Fri 09 Dec 2022 04:56:58 +0000
ROA not after: Fri 08 Dec 2023 05:01:58 +0000
asID: 44570
IP address blocks: 2a06:a000:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3c:f3:2d:3f:e1:98:c4:7b:32:16:95:43:ee:93:01:a7:58:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:56:58 2022 GMT
Not After : Dec 8 05:01:58 2023 GMT
Subject: CN=5BF8D3AC1D12CD9D92609D9600038BE650B6D422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:21:95:ed:7a:98:3a:34:70:f2:bd:a0:bb:
c6:2e:57:8e:15:65:15:af:e9:1d:2d:0c:ff:c6:99:
4d:32:35:90:b1:bf:83:bb:d1:98:e5:e8:2d:dd:50:
39:de:58:13:60:dc:c8:e2:ba:56:bb:f8:02:75:79:
13:5f:54:60:d9:fe:31:42:c4:62:2a:64:6c:8d:fb:
a6:14:66:e6:7e:60:f7:62:c5:39:70:64:03:2a:70:
a6:c5:7c:5f:cb:cc:cf:4b:80:25:db:37:82:14:00:
6c:57:cd:62:d2:ff:53:06:46:85:a5:a5:7b:9b:b1:
85:57:3c:ae:68:ae:b3:a6:35:b2:f9:43:85:a0:90:
05:69:7b:84:e8:a0:06:af:88:11:57:cc:1f:94:b5:
64:25:0b:48:7a:4d:c1:52:f6:94:43:7a:55:cc:ff:
43:72:e3:9e:1b:ef:cd:be:12:fd:91:f8:54:6e:2a:
e0:49:62:be:02:7c:2b:7b:6c:4a:e8:97:85:40:7e:
24:04:b4:67:cc:ff:d5:c6:8a:ec:56:4b:56:24:25:
05:b4:d4:0d:f1:d1:15:8e:b7:97:c6:fe:bb:af:04:
b1:d5:c3:47:65:14:d5:7e:5c:5d:4c:c2:6c:0f:a4:
7d:05:cd:f4:04:96:64:91:33:60:95:7e:66:47:b2:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:D3:AC:1D:12:CD:9D:92:60:9D:96:00:03:8B:E6:50:B6:D4:22
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a333030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:3000::/36
Signature Algorithm: sha256WithRSAEncryption
58:65:4b:f9:50:17:61:b6:06:dc:da:72:83:00:69:9a:49:c0:
c3:9d:4c:b1:12:5f:71:44:a2:1c:c3:dd:95:db:af:02:66:88:
7f:59:dd:9d:d2:ed:9f:2e:03:f2:6f:3c:46:24:43:31:12:55:
c1:ef:95:78:49:fa:29:7b:18:c1:8e:59:c0:30:94:66:b8:bd:
0b:ad:eb:3a:03:08:4f:92:75:bf:da:fb:cf:cc:02:d3:1c:61:
e5:69:d7:0a:a1:f5:50:07:2c:98:d3:10:c4:5c:35:65:3f:c7:
c6:28:0a:3d:59:9b:3b:46:35:8d:c3:8a:bc:55:2b:02:fa:39:
74:98:de:cc:07:73:f1:d7:c0:83:c9:a8:4f:52:f7:c0:25:6e:
2f:ad:d7:16:a5:fc:95:ac:15:c3:86:87:59:ff:14:09:94:56:
90:c3:b2:4b:15:01:b4:d2:af:bf:41:73:6b:fc:a9:c6:4b:75:
16:7b:34:52:ca:54:1e:4c:da:e8:25:22:47:8f:74:04:8c:30:
da:62:fe:1c:30:8e:d4:7d:43:38:db:44:0d:a0:4f:b0:ae:0f:
1f:86:d1:c1:d8:29:8d:07:80:00:61:60:4d:5a:b3:ed:c5:cc:
1d:a6:04:3f:07:24:7a:e1:05:f2:bd:e2:48:15:67:9e:27:81:
5f:8a:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:59 2025 by rpki-client