Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a393030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a393030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: /QbXrMnjPKpJaU2bFJMxH53Top462RorVQf90NGbUl8=
Subject key identifier: 02:39:73:22:30:1C:88:B8:CF:4F:D4:68:5D:69:DF:1A:11:1E:C7:91
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3E15795C855AEABF822FE2FBE5BFEBB6BC7022CF
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a393030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:37 +0000
ROA not before: Fri 09 Dec 2022 04:57:37 +0000
ROA not after: Fri 08 Dec 2023 05:02:37 +0000
asID: 44570
IP address blocks: 2a06:a000:9000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:15:79:5c:85:5a:ea:bf:82:2f:e2:fb:e5:bf:eb:b6:bc:70:22:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:37 2022 GMT
Not After : Dec 8 05:02:37 2023 GMT
Subject: CN=02397322301C88B8CF4FD4685D69DF1A111EC791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:24:bd:e6:29:26:80:e4:51:eb:a4:a3:4f:
e9:ce:59:7c:49:55:44:e1:b7:19:82:27:c9:c9:c0:
47:7d:c9:dc:c0:f2:1e:a2:c3:2b:93:85:5e:33:68:
fb:68:99:3c:90:e6:95:e0:bf:e3:d8:d6:f6:ac:a9:
55:be:0c:a9:e1:10:b8:ce:81:71:21:2a:26:26:be:
65:81:a5:a1:3c:ff:a1:06:3e:fd:7b:64:2b:42:ed:
dd:2b:85:93:56:82:55:16:11:dc:88:3d:36:b3:3b:
b9:fa:55:39:e8:c9:1c:78:20:95:5d:e4:d6:5e:7a:
7d:3f:f3:c1:a7:f7:2b:fb:cb:38:48:87:cd:8f:42:
2e:2c:b3:a9:fe:fd:7f:d8:91:b5:4d:a0:fc:db:28:
f5:6b:ba:84:25:08:84:9e:c8:ce:28:4e:11:0a:8d:
95:51:07:e7:48:1e:02:2e:7e:be:62:94:26:65:34:
ff:fd:09:bc:66:f1:0f:e1:88:12:09:16:5d:45:97:
ca:3a:69:ab:c2:36:15:75:df:e7:ac:a9:31:a8:6e:
68:e8:20:9e:5c:54:9a:d3:1b:e4:96:0c:15:a6:83:
dd:d7:3f:1b:a5:da:c4:ea:b5:63:41:ca:c3:68:87:
d3:e4:ec:4e:c8:1f:9f:23:30:f8:a1:9a:ec:32:c5:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:73:22:30:1C:88:B8:CF:4F:D4:68:5D:69:DF:1A:11:1E:C7:91
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a393030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:9000::/36
Signature Algorithm: sha256WithRSAEncryption
21:ca:79:44:ef:59:57:40:b4:9e:49:42:93:77:6e:5d:32:42:
55:8f:5b:5f:81:8b:f2:11:8c:2d:46:70:3c:7e:a3:11:b1:e8:
c4:f2:31:b1:ea:60:3e:a2:97:f9:b8:2f:d1:46:b2:fb:93:df:
88:69:b9:5c:87:9e:8f:ba:32:e0:c3:9c:18:eb:0f:c9:f5:e4:
89:21:71:90:78:54:f9:5a:a9:8e:49:bc:8c:94:8e:e8:58:a7:
e2:8e:f4:ee:39:36:89:66:79:06:f6:0f:4c:5b:e6:a7:92:32:
56:5f:51:1c:d2:98:c7:99:70:33:89:51:00:f9:79:c7:e4:33:
45:75:3a:f8:9e:4a:b7:6f:e4:18:1a:51:37:ef:36:d2:a4:8f:
8d:85:5e:2a:4b:13:eb:ef:00:26:3d:1c:e3:67:33:18:9a:28:
5b:de:1d:79:1a:5c:ae:9d:f3:6a:28:b1:94:02:c8:d2:30:1b:
bd:13:6f:17:d5:04:92:74:ca:1b:43:ed:08:59:65:e5:d3:f6:
97:2c:66:57:a0:b9:55:19:20:fd:87:aa:3b:a7:fd:59:2c:d2:
d8:ca:ec:da:18:27:4f:24:1f:4a:c3:6b:47:90:17:5f:73:a0:
55:42:68:a1:44:e7:83:f3:ce:2c:b2:27:30:2a:44:54:60:ce:
06:f0:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:13:44 2025 by rpki-client