Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a343030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a343030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: RxATBznC80RbhrB8Y/q/fYyhNCZDRNKj92j7WaZ+ydQ=
Subject key identifier: 97:D9:CC:7B:28:E3:D3:96:81:BE:25:AE:E9:1E:9C:34:03:B5:A7:E7
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 1B4FD9097FEC70BB237829BC09787902E9BAE1B7
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a343030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:08 +0000
ROA not before: Fri 09 Dec 2022 04:57:08 +0000
ROA not after: Fri 08 Dec 2023 05:02:08 +0000
asID: 44570
IP address blocks: 2a06:a000:4000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4f:d9:09:7f:ec:70:bb:23:78:29:bc:09:78:79:02:e9:ba:e1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:08 2022 GMT
Not After : Dec 8 05:02:08 2023 GMT
Subject: CN=97D9CC7B28E3D39681BE25AEE91E9C3403B5A7E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:02:b5:59:be:ab:a0:cc:35:3f:39:86:4c:
8f:ea:15:f2:43:f6:e6:38:bc:7b:f2:04:0c:73:ad:
a1:16:d6:89:ea:25:d4:08:1a:25:9c:f1:8b:6c:76:
ad:66:04:2d:47:8c:a1:eb:9d:83:00:3c:e9:45:3d:
8a:15:fc:57:13:07:16:4f:21:07:77:6b:9a:f5:4b:
56:44:0d:73:45:85:de:ac:d7:a7:63:0f:43:f0:f8:
c5:66:99:24:d6:4a:2f:65:70:8b:5e:26:29:58:2a:
34:7f:fa:58:14:a2:9e:81:03:1b:cf:49:74:98:8d:
e5:c3:49:d0:d8:d9:0b:1c:db:ee:24:b3:b3:33:c6:
7d:54:6b:b7:47:24:73:d8:2f:b9:73:50:09:91:80:
57:d6:9e:8a:b4:d6:63:bb:b8:e6:a4:8b:bc:38:d1:
c9:68:98:7e:3e:23:50:53:1b:7b:13:76:d6:cc:20:
5e:31:6f:6c:81:9e:24:85:35:a4:68:9a:c3:43:2d:
5e:84:66:e1:db:b4:ed:90:84:40:e4:ea:b0:46:43:
eb:cc:c9:ea:0c:0a:b7:78:6d:ad:90:4a:ef:8c:57:
56:0e:c9:3b:56:4c:cb:1f:f3:3a:3f:87:26:a3:6d:
b3:a4:e7:a7:93:53:dc:a3:3f:34:ad:78:37:e4:b3:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:CC:7B:28:E3:D3:96:81:BE:25:AE:E9:1E:9C:34:03:B5:A7:E7
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a343030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:4000::/36
Signature Algorithm: sha256WithRSAEncryption
65:99:6a:cd:b4:46:83:90:d7:f3:18:e2:f5:8f:73:20:56:cb:
30:f7:fd:16:65:9e:51:a9:c8:9f:4b:8a:c8:34:c5:40:a3:05:
6f:b5:66:84:c1:3f:d0:9c:76:66:d3:1a:a7:19:fd:a1:66:76:
67:39:4e:4b:e9:78:c0:d0:54:2e:91:5d:7f:25:80:cd:cb:f2:
e7:ae:58:f7:7a:b3:ed:0d:08:08:98:57:9d:97:80:e8:9f:b3:
bc:95:cf:ba:ff:5d:53:f6:38:8d:d3:4c:53:f4:33:49:26:e8:
d4:ea:b5:96:b7:a6:e1:02:5f:72:ac:c4:66:2c:19:87:dc:06:
02:bf:bf:97:ce:69:8f:dc:d7:41:af:ef:7b:f8:64:44:8f:ed:
c7:81:7b:55:de:62:d0:e6:6d:05:a7:d1:21:21:35:76:1f:73:
7f:48:36:cd:37:3e:4b:cc:d3:84:14:28:14:53:47:d7:11:7f:
72:f9:2e:a4:b4:71:67:27:eb:fa:f8:da:f4:7b:7b:02:3b:1b:
e3:88:27:74:80:69:67:4b:d8:9c:54:09:0a:2b:cd:a0:df:20:
4d:f6:46:e9:92:c4:30:a5:f7:27:47:2a:9c:7e:8e:70:1e:90:
a7:e3:bd:9c:1b:a0:fa:23:82:55:bf:54:80:d4:3c:2d:c3:9e:
7f:48:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:50 2025 by rpki-client