Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a353030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a353030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: EgnykVSctA4GmlnDT4S68KdrMoEAUjbRKjl4ZrycVAg=
Subject key identifier: E1:10:44:DD:E6:5C:1F:BA:5F:B7:11:12:7D:10:37:22:FB:7B:13:24
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3860AFBB5929C324C871DF29594180BD88E1657B
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a353030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:15 +0000
ROA not before: Fri 09 Dec 2022 04:57:15 +0000
ROA not after: Fri 08 Dec 2023 05:02:15 +0000
asID: 44570
IP address blocks: 2a06:a000:5000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:60:af:bb:59:29:c3:24:c8:71:df:29:59:41:80:bd:88:e1:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:15 2022 GMT
Not After : Dec 8 05:02:15 2023 GMT
Subject: CN=E11044DDE65C1FBA5FB711127D103722FB7B1324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:01:38:3c:ab:70:28:04:8b:e0:19:5a:0d:
62:72:2c:39:7d:8c:a9:b8:c8:50:5c:18:74:7e:fc:
ef:43:98:42:33:e8:65:2b:e0:94:60:b0:6a:a9:dc:
98:32:cd:01:8d:8b:f8:f7:f8:3b:f2:bb:cd:78:0a:
e4:d1:c7:70:87:bb:d7:21:c1:d0:da:76:97:c3:15:
74:60:18:d9:33:ba:89:ac:62:b2:66:2e:d0:5d:e8:
97:a2:ed:7f:8d:bf:9e:45:dd:92:93:b8:ff:5e:71:
d6:1a:05:4d:8b:c1:84:39:08:ef:67:72:34:23:4d:
69:a8:71:83:bc:14:23:10:f9:66:ba:09:6c:82:34:
2e:e0:8c:64:2e:c6:dd:96:b8:85:a5:e4:47:b6:fe:
ed:02:e1:13:af:22:03:f7:d0:20:c5:f0:d1:ed:26:
1b:e4:77:f4:a0:4c:8e:c2:dd:3d:03:70:2d:48:3a:
13:98:64:3f:b5:c0:ed:42:51:e5:94:b5:6e:0f:bf:
02:2b:61:74:b0:8d:38:29:06:00:ba:13:5f:96:f5:
9e:5d:93:f4:a8:51:b9:52:2e:71:d4:31:67:d9:0b:
80:68:d1:f5:85:6b:c7:16:49:88:ce:81:59:9d:17:
2d:72:bd:6b:ba:6e:a0:62:54:96:f8:87:e1:8b:f6:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:44:DD:E6:5C:1F:BA:5F:B7:11:12:7D:10:37:22:FB:7B:13:24
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a353030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:5000::/36
Signature Algorithm: sha256WithRSAEncryption
c8:d3:8d:2a:0f:6a:51:78:21:4f:7b:60:3e:65:4f:79:89:a1:
ee:65:2a:eb:8c:22:80:17:cf:b0:83:11:5f:dc:d2:b1:0b:76:
39:58:3f:66:06:49:f5:34:36:20:27:45:82:f4:34:bd:e4:16:
84:62:ca:71:bc:c5:a7:02:f8:19:ff:cd:40:b8:ac:75:25:6d:
38:42:73:bd:fa:33:b6:2f:f4:df:c1:1e:da:07:cd:b4:79:ff:
96:11:da:a2:a5:60:d5:eb:54:af:33:1e:c2:c1:dd:01:8d:c0:
ea:e5:c0:ab:60:57:0d:94:67:58:4a:f8:98:59:6a:60:a9:9c:
a2:a7:16:8b:8a:6d:01:ad:7a:99:1b:96:a6:6b:98:5b:1e:83:
ea:06:35:d1:38:15:59:1f:c8:6a:5f:83:8b:be:e7:aa:b0:b3:
72:9e:02:76:a1:37:c8:28:ae:51:31:f3:35:71:fa:25:21:5f:
d3:f9:12:dd:94:11:14:ff:a9:04:31:a9:81:cc:16:fa:49:d1:
30:ac:46:03:7d:af:28:5d:ca:d8:1d:3b:74:dc:9e:7e:18:9c:
48:e5:8c:63:b1:a2:95:73:84:fd:ba:87:39:ef:2a:f9:9e:57:
88:de:e7:cd:d3:b6:1c:ad:02:49:ed:13:26:b1:6e:ce:b4:7f:
e4:ee:a6:e6
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUOGCvu1kpwyTIcd8pWUGAvYjhZXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNDU3MTVaFw0yMzEyMDgwNTAyMTVaMDMxMTAvBgNV
BAMTKEUxMTA0NERERTY1QzFGQkE1RkI3MTExMjdEMTAzNzIyRkI3QjEzMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHAE4PKtwKASL4BlaDWJyLDl9
jKm4yFBcGHR+/O9DmEIz6GUr4JRgsGqp3JgyzQGNi/j3+Dvyu814CuTRx3CHu9ch
wdDadpfDFXRgGNkzuomsYrJmLtBd6Jei7X+Nv55F3ZKTuP9ecdYaBU2LwYQ5CO9n
cjQjTWmocYO8FCMQ+Wa6CWyCNC7gjGQuxt2WuIWl5Ee2/u0C4ROvIgP30CDF8NHt
Jhvkd/SgTI7C3T0DcC1IOhOYZD+1wO1CUeWUtW4PvwIrYXSwjTgpBgC6E1+W9Z5d
k/SoUblSLnHUMWfZC4Bo0fWFa8cWSYjOgVmdFy1yvWu6bqBiVJb4h+GL9oInAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU4RBE3eZcH7pftxESfRA3Ivt7EyQwHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJz
eW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1SUEtJLzIvMzI2
MTMwMzYzYTYxMzAzMDMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2Uy
MDM0MzQzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqBqAAUDANBgkqhkiG9w0BAQsFAAOCAQEA
yNONKg9qUXghT3tgPmVPeYmh7mUq64wigBfPsIMRX9zSsQt2OVg/ZgZJ9TQ2ICdF
gvQ0veQWhGLKcbzFpwL4Gf/NQLisdSVtOEJzvfozti/038Ee2gfNtHn/lhHaoqVg
1etUrzMewsHdAY3A6uXAq2BXDZRnWEr4mFlqYKmcoqcWi4ptAa16mRuWpmuYWx6D
6gY10TgVWR/Ial+Di77nqrCzcp4CdqE3yCiuUTHzNXH6JSFf0/kS3ZQRFP+pBDGp
gcwW+knRMKxGA32vKF3K2B07dNyefhicSOWMY7GilXOE/bqHOe8q+Z5XiN7nzdO2
HK0CSe0TJrFuzrR/5O6m5g==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:32 2025 by rpki-client