Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a623030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a623030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: fW0noCAxCIiskgexTzLcZqTPJND45+mM1MtHBjRoOzE=
Subject key identifier: 14:DA:64:0E:C2:C2:30:7E:D5:FD:75:A2:B4:6F:6C:EA:FC:6B:F1:14
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 4F03D269A1228656F69AF4FAC0DF4D0A22C849F9
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a623030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:46 +0000
ROA not before: Fri 09 Dec 2022 04:57:46 +0000
ROA not after: Fri 08 Dec 2023 05:02:46 +0000
asID: 44570
IP address blocks: 2a06:a000:b000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:03:d2:69:a1:22:86:56:f6:9a:f4:fa:c0:df:4d:0a:22:c8:49:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:46 2022 GMT
Not After : Dec 8 05:02:46 2023 GMT
Subject: CN=14DA640EC2C2307ED5FD75A2B46F6CEAFC6BF114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:f0:38:5d:38:2c:7e:f2:72:15:de:e4:a3:
1a:2c:32:11:43:a8:d3:8b:60:75:a6:46:46:8c:b4:
01:76:04:11:d2:a1:42:ec:43:95:a1:80:a5:fb:f1:
96:bc:59:fa:3c:18:9a:8e:0d:41:75:92:72:e1:80:
96:d4:cb:f9:6e:a7:e2:d0:44:72:8a:93:1d:1c:0b:
17:96:ff:6d:b5:1e:d2:f9:64:6e:7c:eb:c1:08:fb:
02:29:b9:d9:93:34:fa:61:2c:ed:6d:f2:44:57:b9:
cb:ab:01:94:05:59:47:af:f7:b6:f5:6b:cd:4c:d5:
46:51:52:80:5c:c0:9b:48:ac:45:26:6a:c6:92:76:
df:fe:d8:8f:15:5f:11:fe:73:7e:8d:7a:72:61:b3:
a9:41:a5:fc:35:08:c6:8e:58:73:b6:5e:5c:a1:30:
6f:25:8d:73:6a:3c:21:19:3c:69:88:d5:a1:e1:6a:
56:8b:aa:82:fc:a6:60:57:82:52:d3:3b:1a:8e:1f:
19:45:46:c5:05:38:aa:85:71:84:a2:3e:1b:5a:17:
3c:c9:db:31:27:7e:51:21:15:d5:de:30:03:f8:ae:
74:dc:85:06:b3:b7:ee:ec:20:c3:f3:3d:99:b9:49:
a7:17:a1:cc:89:3d:a4:26:99:5c:9b:7b:21:9f:85:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:64:0E:C2:C2:30:7E:D5:FD:75:A2:B4:6F:6C:EA:FC:6B:F1:14
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a623030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:b000::/36
Signature Algorithm: sha256WithRSAEncryption
a4:ad:ba:4b:cd:2f:73:ba:39:c5:9f:3e:b2:1f:7b:c3:33:23:
c7:90:74:c3:d1:dc:96:81:3a:06:c6:05:cd:d7:4c:bb:fb:75:
bb:c2:fe:f2:22:6b:ab:26:0f:42:e7:5a:ab:4b:6d:0b:a8:17:
cb:88:b1:e5:8e:a8:05:60:54:91:40:0d:50:ea:79:1e:a6:bd:
b0:30:1b:72:f0:e8:e2:3e:6a:8f:59:55:3d:e8:56:f2:91:c9:
3f:89:1b:01:fe:fd:f0:ae:99:81:52:bb:c4:28:f0:01:8e:d0:
e3:0e:21:c8:26:a0:34:a9:d0:c5:5e:81:46:ed:94:9f:2b:ba:
6a:de:ec:e1:0d:e3:eb:a5:2e:55:86:08:1c:30:37:0c:71:79:
e3:8e:6d:dd:fb:52:cd:1e:78:50:67:c3:e7:ef:62:e6:ae:58:
3e:ae:20:c6:14:2f:89:c2:20:a3:08:27:25:ef:1d:cc:82:b9:
4a:c9:28:d1:39:30:c2:8f:a9:de:a6:84:36:ee:18:8e:62:f2:
d9:73:dc:d0:72:dc:22:7e:2a:95:da:87:1d:53:35:40:c7:30:
e2:ad:8c:f6:82:ad:a1:9f:f4:43:03:64:28:89:5d:d5:a0:8a:
9e:00:47:3f:39:8c:9e:63:ea:2e:d2:6c:d1:02:1c:60:ae:21:
3d:67:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:45 2025 by rpki-client