Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38342e302f32342d3234203d3e20323038303436.roa
File: 352e3235332e38342e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier: qa+GZ+l5cNaYEgRbMZP7v+b/1MWxdRPp6iJ2KY66mBQ=
Subject key identifier: AB:E2:98:FD:65:64:72:F4:9A:D7:31:50:9D:D8:51:68:7D:11:AB:CD
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3AB02B9515AEF8D6E2752BEC4EF2EA198206C5BC
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38342e302f32342d3234203d3e20323038303436.roa
Signing time: Fri 09 Dec 2022 05:05:03 +0000
ROA not before: Fri 09 Dec 2022 05:00:03 +0000
ROA not after: Fri 08 Dec 2023 05:05:03 +0000
asID: 208046
IP address blocks: 5.253.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b0:2b:95:15:ae:f8:d6:e2:75:2b:ec:4e:f2:ea:19:82:06:c5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:00:03 2022 GMT
Not After : Dec 8 05:05:03 2023 GMT
Subject: CN=ABE298FD656472F49AD731509DD851687D11ABCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:14:74:ed:67:b5:cb:bf:e9:a0:ba:a4:89:
5f:b5:74:47:e7:82:45:cc:9c:4c:0e:fb:43:8e:ab:
b0:3b:75:68:92:ae:b8:47:bf:1b:6c:a8:a6:b9:b6:
a8:29:46:27:af:18:b8:f9:0a:5b:8c:5a:24:15:9a:
21:62:d8:7a:a4:74:dc:19:d2:11:91:a6:d6:a6:5d:
e9:88:62:a0:71:7b:61:6f:bd:61:e3:10:32:9f:57:
b0:a7:fe:33:99:be:5f:b1:79:31:6f:4a:58:46:01:
71:2b:9a:23:51:76:7d:41:cb:a6:87:5d:e0:5e:35:
dc:f6:74:06:a3:ab:bf:26:ba:dc:6f:a7:d3:ce:06:
16:6a:66:97:74:ea:e5:79:ee:45:75:78:57:e2:5e:
72:29:47:e1:ee:d3:2a:fe:a4:c6:13:f2:a7:c6:ea:
3d:78:8a:a0:ad:5f:2f:c7:70:d8:20:de:38:c0:ab:
6b:45:91:65:20:7b:0b:c2:67:4f:e9:ba:a6:21:7d:
48:a5:ef:e3:18:b5:d8:b2:14:57:1e:19:a1:2c:ca:
1a:6e:66:71:3c:de:3e:98:26:2c:f0:0f:51:3a:26:
6b:71:fd:93:2e:80:41:6d:51:46:e8:28:ae:68:ef:
e2:96:df:2f:ed:8e:b7:80:0d:de:1a:e5:67:f9:5e:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:98:FD:65:64:72:F4:9A:D7:31:50:9D:D8:51:68:7D:11:AB:CD
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38342e302f32342d3234203d3e20323038303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f5:8a:80:6e:03:cc:3f:12:2b:05:7e:94:35:7c:1b:d3:6a:
81:56:7b:19:99:1c:a2:99:f1:aa:e0:fa:b4:f0:f4:01:f5:2a:
e5:a8:9a:6d:71:ae:39:c6:db:94:26:a1:5f:eb:6c:2f:2c:f7:
18:15:cc:ce:b4:2a:eb:2d:76:55:06:c7:94:64:e1:b7:fc:df:
3f:cc:00:e0:d7:32:e8:1f:38:32:71:25:35:bf:df:e0:0a:c6:
d9:de:31:c1:d6:d5:87:6a:99:91:43:63:b1:ed:f8:d1:ed:9e:
b9:50:7a:a8:6b:1b:49:dc:b6:e2:b0:5e:52:6a:a6:09:bf:c9:
8c:4e:4c:4b:70:b3:2e:c6:35:0c:cb:c8:cc:f6:5e:5c:4e:b3:
db:3e:c8:9d:d5:8c:89:ca:5e:96:61:81:6a:64:2d:c3:11:fc:
22:e0:98:e1:82:ce:aa:c9:28:ee:9a:44:f1:07:b1:55:39:b4:
d3:99:2d:d6:33:0e:e1:d2:82:0e:94:5b:0c:e8:a7:10:f7:a7:
c5:08:9d:80:f3:93:ec:4e:e9:ec:b7:4b:45:a9:f3:ff:d1:b0:
73:86:27:ab:81:34:07:98:37:9f:54:e6:8a:6f:06:40:a2:cf:
af:8d:15:0f:ff:04:68:b8:58:7a:21:d6:52:cd:b2:86:7e:c6:
50:9b:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:21 2025 by rpki-client