Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a363030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a363030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: dbM/+jOpi8s2SVaf3z8tR+8RlsqWog1rkq3dRpjVd/Q=
Subject key identifier: 31:CC:6A:39:82:0F:11:9A:FF:89:EA:68:F2:A5:A0:98:7C:71:B5:1D
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 6F3C3B3B24B25675F4C558FDE93D0607E2ECA26C
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a363030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:19 +0000
ROA not before: Fri 09 Dec 2022 04:57:19 +0000
ROA not after: Fri 08 Dec 2023 05:02:19 +0000
asID: 44570
IP address blocks: 2a06:a000:6000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3c:3b:3b:24:b2:56:75:f4:c5:58:fd:e9:3d:06:07:e2:ec:a2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:19 2022 GMT
Not After : Dec 8 05:02:19 2023 GMT
Subject: CN=31CC6A39820F119AFF89EA68F2A5A0987C71B51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:43:a2:33:9e:c8:12:cf:50:cc:d1:64:09:
e8:a5:75:82:98:a0:d4:c2:81:77:10:e1:4b:8c:83:
63:cf:f7:6e:4b:be:7b:9a:6d:fe:ea:11:6a:d3:9f:
83:f5:5b:87:89:09:dd:98:e4:d6:fb:9e:0f:cb:71:
a0:4c:88:ad:5a:b9:e0:44:0a:49:fe:4a:05:b1:7f:
52:99:40:67:fa:91:51:88:61:00:3e:37:45:99:eb:
72:62:9c:aa:f0:67:19:96:87:a0:01:ea:b1:ba:d9:
f6:48:68:ba:9a:c9:76:a8:84:16:c6:10:f7:ba:42:
26:10:1d:46:77:fd:38:91:2b:f0:f5:04:f2:59:6e:
ba:54:17:5b:cc:28:de:39:62:cf:94:a0:8d:89:3c:
0d:38:3d:7b:6a:32:39:5c:b2:e2:1a:be:9b:bf:f7:
03:1d:38:36:e2:d1:7b:b9:d9:a3:e9:04:49:f4:3d:
1a:e5:31:28:2f:80:19:40:51:b6:c6:b8:03:c0:a7:
39:e4:14:c2:a9:d8:c2:94:fb:5b:55:3c:5b:ba:e5:
59:f2:d3:8d:ec:46:9c:47:50:58:e9:a5:67:9c:f8:
98:70:5c:9c:a2:53:70:60:26:6b:ef:74:a4:ad:26:
1c:ef:9d:d3:a4:77:fe:e3:a5:44:02:35:e6:44:32:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CC:6A:39:82:0F:11:9A:FF:89:EA:68:F2:A5:A0:98:7C:71:B5:1D
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a363030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:6000::/36
Signature Algorithm: sha256WithRSAEncryption
73:3e:43:ec:41:3f:7e:af:69:1a:62:4a:35:49:37:45:f2:3e:
c5:c1:48:20:c4:bc:39:a7:79:ca:89:fa:63:32:bb:30:f9:13:
db:6e:ef:df:c3:7a:7c:6c:9b:7a:5c:c6:46:ad:ac:b2:b7:cd:
41:b3:e5:a8:0e:68:e7:65:6a:f6:23:0e:c7:78:1e:4c:4a:df:
6a:a5:32:d3:8a:9f:b0:15:b0:5b:2b:ee:13:89:82:8e:15:46:
4f:b9:92:c1:9f:e5:fe:18:14:8f:bf:19:b0:ac:99:d4:a3:1f:
5a:95:01:6c:2e:45:4d:00:65:b5:26:25:89:fb:79:e7:d0:c7:
b6:cd:fe:db:f1:35:32:e1:d7:0c:42:22:dc:c4:eb:c2:1c:00:
6c:06:a8:ec:00:31:a4:58:28:d8:87:7b:a0:d1:e6:93:b3:1c:
f7:49:86:cc:0b:97:c5:35:25:eb:14:85:88:db:80:f7:55:4b:
43:5e:65:16:1c:54:f8:8c:e4:43:59:40:9d:74:8c:20:b3:ca:
e0:de:aa:3f:19:29:09:2e:20:5f:7b:4a:f7:27:ee:63:50:ef:
7d:3c:21:82:86:75:ea:9d:dc:af:04:b4:ee:78:1d:51:9f:ba:
92:16:ee:9f:9b:22:84:13:68:6b:e5:38:6c:c4:49:4e:06:22:
f8:cb:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:01 2025 by rpki-client