Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a633030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a633030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: jxsdcU4zzE8+6QOhOw29akPA9MF9IWDuby6d1bo4WNk=
Subject key identifier: BB:F0:D0:7A:C3:4C:06:DD:85:0E:D3:52:17:36:54:56:17:2C:18:7F
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 25CE7C2D5C3988F798D879147898D3AA7736AA4A
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a633030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:50 +0000
ROA not before: Fri 09 Dec 2022 04:57:50 +0000
ROA not after: Fri 08 Dec 2023 05:02:50 +0000
asID: 44570
IP address blocks: 2a06:a000:c000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ce:7c:2d:5c:39:88:f7:98:d8:79:14:78:98:d3:aa:77:36:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:50 2022 GMT
Not After : Dec 8 05:02:50 2023 GMT
Subject: CN=BBF0D07AC34C06DD850ED35217365456172C187F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:0d:3f:d6:d0:b9:46:ca:c8:fe:85:ca:f4:
0d:20:81:f1:cf:50:dd:6c:98:e8:18:b1:35:3a:a5:
cf:c8:f6:ac:2b:96:d8:86:6a:d6:28:5d:65:71:97:
a2:ae:dd:6d:30:d5:1e:f3:48:47:dc:48:bf:54:a8:
ed:ae:dd:a0:e8:3d:22:bb:8c:da:07:8e:c7:80:21:
68:92:d4:45:52:9f:39:03:6f:d8:50:a0:b1:9d:6d:
80:45:ce:92:14:ac:30:24:1d:04:f0:38:32:d2:98:
79:0d:5c:db:54:83:6b:dc:f2:bc:f5:cd:f4:06:23:
aa:ac:c1:b5:91:c0:c4:ae:9d:68:78:6c:39:8a:8f:
ef:c5:00:93:56:00:da:46:dc:04:b9:27:e7:89:cc:
f1:3f:83:7f:f4:1a:d0:80:bd:e7:1d:16:10:ae:a6:
35:11:e7:11:6b:c4:7a:75:ca:0c:2b:ba:3f:46:fe:
e7:37:c3:c9:67:c7:2e:c7:f8:68:a9:d0:f9:74:58:
05:ac:2b:93:f2:81:1e:6a:b3:e3:e3:1a:fb:83:b6:
da:8d:0c:f0:6a:34:72:b2:1c:56:97:07:79:37:b4:
c4:88:3b:e7:b9:a8:c4:27:f1:17:c3:20:a4:57:23:
c2:2d:1c:32:55:78:6e:d2:41:d2:e5:80:77:d1:e5:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:D0:7A:C3:4C:06:DD:85:0E:D3:52:17:36:54:56:17:2C:18:7F
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a633030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:c000::/36
Signature Algorithm: sha256WithRSAEncryption
72:ae:10:13:5e:01:4f:a4:d2:5a:2a:fc:6b:7f:e1:3b:3d:e1:
3d:44:8a:e7:1e:58:b6:88:bc:13:7a:63:92:37:c2:a0:7e:a7:
70:58:56:41:d5:5f:c0:2b:4c:85:65:9f:ef:96:16:a5:5e:57:
e1:a6:c4:34:13:3b:74:a7:49:0b:c7:c3:ff:c5:da:21:25:fe:
46:6a:62:7d:d4:79:c6:86:c1:fe:07:80:9c:59:5a:38:b4:8e:
72:30:c5:5b:80:8c:18:5b:4a:25:41:01:40:47:a2:da:3c:4c:
d6:21:0a:54:7e:ff:67:9d:c1:d0:46:81:dc:37:33:26:d8:08:
6e:ce:3e:39:4c:b0:c7:c1:60:89:44:62:51:00:fc:ce:20:aa:
24:aa:57:a6:97:60:58:36:16:50:00:0c:07:a5:8b:b7:29:ff:
73:88:a6:cd:8a:ce:a7:ca:7a:b3:81:50:cb:f6:f7:da:e4:4c:
b4:a1:f1:bb:24:ae:4e:cc:59:ae:30:7a:99:46:43:15:3e:cc:
4d:9a:5f:02:a8:62:6b:3d:59:31:3e:32:4a:21:61:12:79:73:
47:ac:27:cc:2e:90:94:ff:8c:64:0a:52:e4:17:1b:6c:f4:90:
a4:12:24:34:62:bb:4c:d9:93:f0:7f:12:c6:1f:a9:75:f7:2a:
a5:d4:5c:12
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUJc58LVw5iPeY2HkUeJjTqnc2qkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNDU3NTBaFw0yMzEyMDgwNTAyNTBaMDMxMTAvBgNV
BAMTKEJCRjBEMDdBQzM0QzA2REQ4NTBFRDM1MjE3MzY1NDU2MTcyQzE4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ng0/1tC5RsrI/oXK9A0ggfHP
UN1smOgYsTU6pc/I9qwrltiGatYoXWVxl6Ku3W0w1R7zSEfcSL9UqO2u3aDoPSK7
jNoHjseAIWiS1EVSnzkDb9hQoLGdbYBFzpIUrDAkHQTwODLSmHkNXNtUg2vc8rz1
zfQGI6qswbWRwMSunWh4bDmKj+/FAJNWANpG3AS5J+eJzPE/g3/0GtCAvecdFhCu
pjUR5xFrxHp1ygwruj9G/uc3w8lnxy7H+Gip0Pl0WAWsK5PygR5qs+PjGvuDttqN
DPBqNHKyHFaXB3k3tMSIO+e5qMQn8RfDIKRXI8ItHDJVeG7SQdLlgHfR5XhrAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUu/DQesNMBt2FDtNSFzZUVhcsGH8wHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJz
eW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1SUEtJLzIvMzI2
MTMwMzYzYTYxMzAzMDMwM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2Uy
MDM0MzQzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqBqAAwDANBgkqhkiG9w0BAQsFAAOCAQEA
cq4QE14BT6TSWir8a3/hOz3hPUSK5x5Ytoi8E3pjkjfCoH6ncFhWQdVfwCtMhWWf
75YWpV5X4abENBM7dKdJC8fD/8XaISX+RmpifdR5xobB/geAnFlaOLSOcjDFW4CM
GFtKJUEBQEei2jxM1iEKVH7/Z53B0EaB3DczJtgIbs4+OUywx8FgiURiUQD8ziCq
JKpXppdgWDYWUAAMB6WLtyn/c4imzYrOp8p6s4FQy/b32uRMtKHxuySuTsxZrjB6
mUZDFT7MTZpfAqhiaz1ZMT4ySiFhEnlzR6wnzC6QlP+MZApS5BcbbPSQpBIkNGK7
TNmT8H8Sxh+pdfcqpdRcEg==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:43 2025 by rpki-client