Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a663030303a3a2f33362d3438203d3e203434353730.roa
File: 326130363a613030303a663030303a3a2f33362d3438203d3e203434353730.roa (raw, json)
Hash identifier: pI3uCeVSMUXAnim+mKD2dk1SpYpj90Txk0ni6WICNJk=
Subject key identifier: 7E:6A:F1:06:77:CB:8E:07:8D:CA:88:A6:F4:64:84:08:91:EF:EE:51
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 7C676028336BDA23D767420B713522B3FFCC2C03
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a663030303a3a2f33362d3438203d3e203434353730.roa
Signing time: Fri 09 Dec 2022 05:03:00 +0000
ROA not before: Fri 09 Dec 2022 04:58:00 +0000
ROA not after: Fri 08 Dec 2023 05:03:00 +0000
asID: 44570
IP address blocks: 2a06:a000:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:67:60:28:33:6b:da:23:d7:67:42:0b:71:35:22:b3:ff:cc:2c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:58:00 2022 GMT
Not After : Dec 8 05:03:00 2023 GMT
Subject: CN=7E6AF10677CB8E078DCA88A6F464840891EFEE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:7f:73:8a:fc:5f:3f:07:e3:a9:d4:c4:23:
7e:aa:49:93:00:1f:2c:3c:84:d5:64:25:19:42:94:
74:0f:9a:68:80:63:1b:5e:95:9b:cb:0e:ae:d2:3d:
d2:16:0e:a0:f3:58:f7:04:27:f8:4c:59:e6:4d:16:
75:03:9c:15:33:9c:50:fc:a3:e9:b5:a0:2e:84:28:
1d:68:5d:70:6b:d2:22:7c:a8:78:cf:a3:7f:95:c2:
1a:c4:81:8a:86:da:f9:d9:28:2d:4a:47:65:a5:46:
ea:f7:aa:f4:33:cd:30:9a:cc:3e:15:56:4d:68:dd:
68:46:65:3a:39:32:c4:30:cb:bc:a9:57:71:78:31:
08:5a:82:3d:48:63:8a:7a:ab:fa:7b:87:b0:1a:0f:
78:4e:ff:47:63:e8:aa:28:e5:8d:44:32:aa:c5:84:
c2:fb:78:3b:13:5d:47:4a:60:c7:05:a2:fa:d3:9a:
4c:5f:6c:ca:b4:fb:69:d9:29:70:4a:69:64:ff:53:
03:c7:29:08:71:87:ad:18:1b:47:c8:69:14:9d:da:
69:f8:51:c6:b1:00:16:f2:0b:08:52:d1:8b:f6:36:
16:ff:b1:a5:46:9c:71:b7:a1:db:e9:62:6f:dd:5b:
d5:79:bf:8a:d1:51:4f:39:9a:1d:62:73:e6:74:05:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6A:F1:06:77:CB:8E:07:8D:CA:88:A6:F4:64:84:08:91:EF:EE:51
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030303a663030303a3a2f33362d3438203d3e203434353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:f000::/36
Signature Algorithm: sha256WithRSAEncryption
c5:84:7e:99:5b:65:71:23:70:a1:16:7b:29:df:a5:c5:56:3c:
9c:71:ce:7f:24:97:98:d1:e6:67:bc:ad:4b:db:a8:0d:9a:4f:
41:0c:b9:32:93:6e:09:70:86:c1:70:ee:88:a9:8b:9c:83:7d:
c4:f7:61:ef:6c:6a:47:c0:b9:01:ea:4a:c6:c7:83:37:7e:e1:
5c:bb:04:e5:a0:c9:88:ff:64:fd:8f:25:96:c3:75:82:35:10:
c9:14:f2:b7:cf:7c:8d:a6:e0:d4:f9:11:5f:67:d8:98:b4:7b:
46:f9:8a:22:c3:1d:15:aa:da:c9:52:7c:bc:3d:fe:44:5d:40:
89:99:4a:a1:7b:7d:b8:37:64:07:75:0d:68:da:18:40:86:c3:
51:a4:40:4f:27:78:ca:6f:24:c7:9f:21:54:4a:8e:a3:d6:85:
79:24:54:04:3d:83:79:d3:12:aa:4f:99:f7:8a:be:64:e1:56:
9c:b4:c6:7c:27:9b:82:66:a4:c8:cd:cb:da:03:9e:60:b1:2e:
af:69:08:5b:a9:51:42:2b:f4:da:88:62:42:ba:ac:f1:9b:3a:
fb:a7:64:7e:88:e2:8b:b7:e9:5e:dd:71:f9:78:b4:8f:e7:85:
93:b1:a5:cd:dc:1e:2d:b1:ba:c3:f5:b1:d8:ef:d0:24:2b:53:
f0:85:e4:fc
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUfGdgKDNr2iPXZ0ILcTUis//MLAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNDU4MDBaFw0yMzEyMDgwNTAzMDBaMDMxMTAvBgNV
BAMTKDdFNkFGMTA2NzdDQjhFMDc4RENBODhBNkY0NjQ4NDA4OTFFRkVFNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIr39zivxfPwfjqdTEI36qSZMA
Hyw8hNVkJRlClHQPmmiAYxtelZvLDq7SPdIWDqDzWPcEJ/hMWeZNFnUDnBUznFD8
o+m1oC6EKB1oXXBr0iJ8qHjPo3+VwhrEgYqG2vnZKC1KR2WlRur3qvQzzTCazD4V
Vk1o3WhGZTo5MsQwy7ypV3F4MQhagj1IY4p6q/p7h7AaD3hO/0dj6Koo5Y1EMqrF
hML7eDsTXUdKYMcFovrTmkxfbMq0+2nZKXBKaWT/UwPHKQhxh60YG0fIaRSd2mn4
UcaxABbyCwhS0Yv2Nhb/saVGnHG3odvpYm/dW9V5v4rRUU85mh1ic+Z0BYSZAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUfmrxBnfLjgeNyoim9GSECJHv7lEwHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJz
eW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1SUEtJLzIvMzI2
MTMwMzYzYTYxMzAzMDMwM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2Uy
MDM0MzQzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqBqAA8DANBgkqhkiG9w0BAQsFAAOCAQEA
xYR+mVtlcSNwoRZ7Kd+lxVY8nHHOfySXmNHmZ7ytS9uoDZpPQQy5MpNuCXCGwXDu
iKmLnIN9xPdh72xqR8C5AepKxseDN37hXLsE5aDJiP9k/Y8llsN1gjUQyRTyt898
jabg1PkRX2fYmLR7RvmKIsMdFarayVJ8vD3+RF1AiZlKoXt9uDdkB3UNaNoYQIbD
UaRATyd4ym8kx58hVEqOo9aFeSRUBD2DedMSqk+Z94q+ZOFWnLTGfCebgmakyM3L
2gOeYLEur2kIW6lRQiv02ohiQrqs8Zs6+6dkfojii7fpXt1x+Xi0j+eFk7Glzdwe
LbG6w/Wx2O/QJCtT8IXk/A==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:12 2025 by rpki-client