Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a643030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a643030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: IPx5FZzmbnvt18iE8FMtYP0UnSn+Va+AYMX18eVHtRA=
Subject key identifier: B3:87:03:9E:5D:9B:0A:57:78:BE:98:EE:05:C0:A3:E8:6B:8C:01:50
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 50AB407702034EF642C56787FBB3D179B4221D55
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a643030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:02:56 +0000
ROA not before: Fri 09 Dec 2022 04:57:56 +0000
ROA not after: Fri 08 Dec 2023 05:02:56 +0000
asID: 44570
IP address blocks: 2a06:a000:d000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ab:40:77:02:03:4e:f6:42:c5:67:87:fb:b3:d1:79:b4:22:1d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:57:56 2022 GMT
Not After : Dec 8 05:02:56 2023 GMT
Subject: CN=B387039E5D9B0A5778BE98EE05C0A3E86B8C0150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:76:41:28:b5:5b:c5:c7:9d:ee:1b:e5:26:
cb:f6:a1:5f:57:9c:1f:79:c1:63:ed:4b:8d:3c:64:
c9:80:e2:62:92:99:ad:29:67:31:0b:16:1c:5d:7e:
c9:33:f8:a1:00:3f:47:d9:f7:09:90:cc:b5:6e:ea:
97:e2:46:d6:5d:2e:fa:d7:78:f3:5e:96:57:88:cc:
19:f7:1f:fd:75:82:b1:7c:a2:62:05:d5:69:8c:84:
91:75:69:bf:be:b6:f9:ea:93:b4:d9:1c:47:a3:ac:
f3:d2:09:22:2b:ab:15:ed:d2:33:31:0a:cc:47:08:
cd:e5:a6:36:7f:e0:5b:db:6d:88:c2:c1:b9:1f:c9:
1d:38:8b:02:7d:99:ee:9c:a7:82:24:34:23:df:1b:
2b:f1:9c:df:e2:2d:8f:55:2d:5e:40:d5:89:2f:e5:
6b:d9:34:5f:14:07:26:68:8f:1c:57:ee:e6:b3:a2:
7d:e9:b7:7a:8c:c4:a8:e9:61:5b:6a:2b:14:b8:a1:
ae:8d:70:82:35:e0:9c:4c:4d:b0:6d:fc:df:30:ee:
dc:5b:95:ba:c6:f3:89:ec:82:fd:93:0b:bc:27:90:
bc:ab:83:7a:db:12:38:77:bc:f3:9f:12:7f:9c:52:
a0:40:d9:e8:85:22:ff:67:b4:ea:ff:61:8c:a0:82:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:03:9E:5D:9B:0A:57:78:BE:98:EE:05:C0:A3:E8:6B:8C:01:50
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a643030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:d000::/36
Signature Algorithm: sha256WithRSAEncryption
0d:b2:d4:a7:41:36:fc:12:7b:37:ba:6b:38:d0:93:b3:6c:9a:
98:40:8e:39:7b:e7:09:fc:a1:08:76:94:28:7d:d0:92:88:92:
b0:ec:2c:17:39:0f:ba:69:9a:be:cd:fd:81:80:a4:f9:e2:d1:
d2:e7:50:da:25:c7:5c:97:01:56:0c:1a:7c:2c:c0:dc:77:4c:
80:49:89:85:66:8f:2f:45:d0:25:1c:da:c9:9a:38:44:6a:20:
26:93:50:54:89:ad:3b:a1:34:32:6f:5d:69:cd:d0:53:8b:3c:
e5:62:dc:fe:5d:08:21:e2:c2:a9:94:94:c8:4b:6d:62:63:26:
a4:21:e4:77:8d:be:e5:72:13:5d:1b:14:33:3c:b6:91:52:3e:
14:2e:88:58:89:6d:ba:ed:b8:fe:36:a9:23:01:d7:21:fd:fb:
da:0d:eb:d1:21:99:f8:3f:57:e8:c2:0e:e9:a1:4f:e0:fb:2b:
76:37:2b:37:2d:4d:57:4a:f4:6a:42:50:83:f3:ef:b0:bf:b6:
ed:42:13:57:f5:79:34:a4:f6:66:a3:59:00:e8:60:2d:f1:e0:
e6:e0:24:73:d7:dc:7d:34:70:08:88:f3:4e:7a:c0:f0:d3:5e:
b5:eb:5a:9d:f6:70:0f:0d:13:7d:c3:e4:d6:58:c2:b0:7d:98:
eb:5e:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:09:36 2025 by rpki-client