Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030363a623030623a3a2f34382d3438203d3e20393435.roa
File: 326130363a613030363a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: uq4aOVSky688XhKQNo2P5OzW/VAKXb5Lt0hH1aIBDTk=
Subject key identifier: A5:04:A0:E9:58:BE:08:63:C5:D3:11:24:47:69:CA:15:07:1F:03:F1
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 30B4235EFA86CABA6FECE881C97594D554E6AF72
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030363a623030623a3a2f34382d3438203d3e20393435.roa
Signing time: Fri 09 Dec 2022 04:56:24 +0000
ROA not before: Fri 09 Dec 2022 04:51:24 +0000
ROA not after: Fri 08 Dec 2023 04:56:24 +0000
asID: 945
IP address blocks: 2a06:a006:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b4:23:5e:fa:86:ca:ba:6f:ec:e8:81:c9:75:94:d5:54:e6:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 04:51:24 2022 GMT
Not After : Dec 8 04:56:24 2023 GMT
Subject: CN=A504A0E958BE0863C5D311244769CA15071F03F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:2b:8e:77:3c:6c:a6:75:58:a3:18:ba:20:
08:68:40:3e:80:20:48:38:d8:96:35:fc:19:16:1e:
e7:e4:46:3e:11:88:d4:a6:7c:d8:e9:da:64:2d:55:
66:85:a5:c1:74:fb:2f:1b:02:f6:7a:5a:20:74:3e:
78:f6:de:cd:9f:c8:34:cd:8e:a2:e0:3a:4e:f2:18:
15:e9:22:60:99:55:77:6e:ef:4f:67:21:ec:ae:05:
af:ef:d5:0e:ae:dd:9a:a9:42:5c:0c:10:20:0b:7d:
b0:ed:e7:83:9b:da:99:3d:7d:19:ce:90:c3:f8:43:
bc:13:dc:32:7b:7e:55:e7:f6:ae:08:b0:ff:a6:dc:
e0:20:d5:14:57:47:5a:5b:83:59:8d:69:81:3e:fd:
62:21:58:56:de:ef:ba:0f:a4:3e:ad:28:1a:6e:e2:
3e:0a:c8:7c:b9:55:5c:fa:d8:4c:7c:ab:f5:57:e4:
25:b8:b4:2a:53:fc:ad:90:17:ea:2d:fd:65:57:23:
3b:55:67:b7:46:b5:97:2f:c6:74:c5:1a:b5:81:75:
c8:6e:19:67:eb:45:58:5e:ba:bb:07:d3:c1:12:c9:
ca:e4:38:5b:1d:7e:18:20:be:6d:d6:8c:a5:a5:ad:
a0:40:8d:f3:22:39:7a:87:48:67:a7:43:2a:f5:23:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:A0:E9:58:BE:08:63:C5:D3:11:24:47:69:CA:15:07:1F:03:F1
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030363a623030623a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a006:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
a5:94:0b:16:59:4f:d9:a5:8c:ee:e4:e8:da:57:0e:77:81:bf:
0c:62:38:d9:95:3c:8c:de:2d:91:a8:7e:ae:32:b5:72:c4:bd:
de:ca:08:05:41:ab:d0:b0:f6:22:0b:9a:b7:73:85:4b:55:de:
95:14:0c:3e:44:a8:a4:53:4e:2e:54:54:38:69:35:b3:dd:51:
96:2c:cb:f8:82:c0:b2:a5:c8:8a:f8:ac:9f:14:e0:8f:4f:88:
cf:9d:0b:78:07:87:ac:a3:af:49:eb:a8:d6:13:c5:8f:26:c6:
3d:98:e2:10:5c:ab:fd:33:d7:7b:a5:2d:a8:5d:90:85:8c:34:
53:91:3d:7a:e8:a7:d5:37:78:27:fa:ab:b3:d0:5f:a4:da:8f:
9f:2e:ad:bb:fc:2b:a4:02:5c:16:bb:95:af:27:d6:27:f0:84:
85:de:a7:6f:5d:31:b2:25:a1:46:59:fa:16:0a:b9:3c:d4:f8:
ad:15:a7:f4:69:68:ed:06:98:1f:9c:7a:6f:c3:87:57:72:a7:
a1:23:a1:2f:37:e6:ab:de:e0:7d:a6:42:4f:82:ca:ec:d0:88:
94:94:86:38:d5:02:5d:26:f7:f1:3a:32:ec:6b:c1:4f:7d:60:
db:cc:d6:82:b5:84:ab:43:26:69:bd:b9:d6:64:36:8d:08:ef:
c9:2e:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:42 2025 by rpki-client