Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a373030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a373030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: p5jBjr9VYzEmxgMjoUsSweGYlfRACg14o2MAzBtFJwk=
Subject key identifier: 89:23:E6:1B:F7:7F:93:0A:21:93:93:D1:81:FA:B3:F4:C6:B0:1E:1E
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 51C3ABC2402B39EEFA7E15E2B7CB62B4D9716241
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a373030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:24 +0000
ROA not before: Fri 09 Dec 2022 04:57:24 +0000
ROA not after: Fri 08 Dec 2023 05:02:24 +0000
asID: 44570
IP address blocks: 2a06:a000:7000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c3:ab:c2:40:2b:39:ee:fa:7e:15:e2:b7:cb:62:b4:d9:71:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:24 2022 GMT
Not After : Dec 8 05:02:24 2023 GMT
Subject: CN=8923E61BF77F930A219393D181FAB3F4C6B01E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:f4:0e:a9:05:cc:ae:2f:55:b8:cc:b3:3e:
db:58:c7:f3:39:12:8b:1c:be:5f:94:ba:5e:67:d0:
b4:8c:a7:46:ed:f2:75:df:b4:11:17:fc:99:b6:6d:
0e:9e:ed:17:a9:55:55:c3:67:d3:bf:7a:e4:a8:e0:
97:29:4f:ab:f3:5e:97:24:8f:9a:9b:e3:1d:7f:52:
cd:0f:bd:b2:bd:1e:e4:5a:a1:98:c3:ba:b7:27:5d:
4e:0a:c7:bf:49:47:3b:db:17:c2:3a:77:7c:f1:b5:
45:94:51:c1:5d:0f:ed:3e:cd:ed:99:f8:ce:5c:30:
6b:7c:80:5b:77:7a:53:d8:6b:76:7e:1d:18:ec:c7:
38:46:d6:35:18:1b:66:23:73:23:19:dc:ff:ac:72:
81:a2:eb:a2:7d:59:4e:80:2e:4a:8e:45:c3:a7:f7:
e4:b9:4b:34:41:8d:48:63:f3:9b:56:d8:0a:90:6e:
92:30:a5:f8:e5:ba:5c:15:41:33:61:80:ca:b7:33:
3c:a6:4f:91:0e:24:79:cc:eb:e8:82:41:e4:97:10:
86:27:9c:79:f0:de:72:c8:06:0b:69:80:77:aa:89:
45:c5:01:e2:c6:73:10:b1:3c:9b:98:47:cd:dd:e7:
20:70:3a:6e:20:b2:7f:d0:98:8e:95:46:e6:77:c9:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:23:E6:1B:F7:7F:93:0A:21:93:93:D1:81:FA:B3:F4:C6:B0:1E:1E
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a373030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:7000::/36
Signature Algorithm: sha256WithRSAEncryption
5c:13:83:b6:5d:05:e8:c5:20:37:8f:ca:81:18:05:d4:e7:4e:
a7:70:b4:db:67:f7:f3:5c:8a:0a:e7:79:54:40:40:97:e0:43:
56:c5:81:37:49:6f:60:7d:20:0c:f7:a6:b5:4f:fa:0e:65:24:
45:32:3a:94:38:3f:83:3c:d4:75:88:2a:95:bd:34:de:4e:78:
8b:55:89:13:81:c5:d0:82:a4:41:cd:96:2f:28:f8:ec:23:4f:
0a:a4:36:0a:a7:52:fd:d8:d2:ce:ec:de:3a:25:72:8a:5f:55:
90:a2:9e:9e:97:f6:9a:2e:2a:1b:6f:b6:78:21:a2:2e:57:a5:
88:a6:40:28:6b:a5:86:87:93:fb:ee:d2:1c:23:76:d6:df:75:
67:9a:53:92:0f:41:4f:9e:db:28:ca:56:50:87:62:e7:58:4f:
bb:68:31:6a:0a:94:2d:9a:08:d3:39:59:55:27:cb:62:29:98:
81:9f:51:d7:17:58:93:6a:c5:f7:73:7c:a0:ba:3b:ca:ed:49:
fc:9f:97:90:20:0a:50:88:3b:45:80:68:20:a2:42:a0:1c:9e:
17:5f:69:21:de:10:aa:48:bb:65:f6:28:74:95:b3:15:57:37:
93:97:37:51:ba:f8:4f:6f:ba:1b:78:bc:82:86:61:2e:8c:4b:
11:a0:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:19 2025 by rpki-client