Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38352e302f32342d3234203d3e20313333343438.roa
File: 352e3235332e38352e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier: knIdaAg5BZ+T36hH79qmgBvTdEeu5mSuWk9V+lGHtv4=
Subject key identifier: 85:17:DA:67:0D:0A:E2:6C:2D:03:01:29:D7:57:95:45:D2:BB:02:18
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 3EE71DB7F1FD310E8EC240A13D4DE200D6065D29
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38352e302f32342d3234203d3e20313333343438.roa
Signing time: Fri 09 Dec 2022 05:05:00 +0000
ROA not before: Fri 09 Dec 2022 05:00:00 +0000
ROA not after: Fri 08 Dec 2023 05:05:00 +0000
asID: 133448
IP address blocks: 5.253.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e7:1d:b7:f1:fd:31:0e:8e:c2:40:a1:3d:4d:e2:00:d6:06:5d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:00:00 2022 GMT
Not After : Dec 8 05:05:00 2023 GMT
Subject: CN=8517DA670D0AE26C2D030129D7579545D2BB0218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:68:cc:07:75:f9:43:9f:28:80:81:e1:40:
34:19:9a:a7:98:a9:61:d1:4d:1f:db:1e:22:cb:ff:
1f:a8:bc:70:09:c4:97:4d:84:81:34:e1:a5:e3:dd:
e5:00:09:db:15:df:3a:f5:2b:94:41:43:8e:73:c3:
aa:50:55:a5:9c:a6:da:be:94:0f:0b:97:8d:96:5a:
75:66:97:ae:72:ea:02:e2:58:d9:14:32:72:23:55:
13:9b:19:68:c1:97:5f:a0:13:d9:7e:a8:09:55:a8:
5a:67:29:2d:3e:8d:8d:e7:c3:30:f6:43:7a:61:12:
25:c4:83:f5:6d:ab:83:27:5a:6e:02:4a:81:12:5d:
dc:ec:7f:c4:02:8d:34:47:96:18:6f:ac:7c:8f:64:
e2:cf:28:52:bd:6e:a8:e3:91:17:d4:eb:d3:4d:53:
08:20:7d:a9:ed:ac:06:56:9f:d7:20:34:b6:cc:a6:
1d:20:2f:79:98:dd:3d:a7:c6:c6:f7:4c:37:7f:d1:
f5:77:53:c5:42:6a:8d:f9:f8:fb:e8:df:bb:23:47:
86:b5:f2:0a:ed:b0:cd:98:3e:e5:9a:0f:20:f0:33:
50:23:e1:dc:bf:4d:ac:13:aa:3b:ad:52:eb:49:5c:
28:64:13:12:2f:7b:df:ba:de:2f:bd:6c:d9:dd:d9:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:DA:67:0D:0A:E2:6C:2D:03:01:29:D7:57:95:45:D2:BB:02:18
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38352e302f32342d3234203d3e20313333343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.85.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6e:b1:74:a8:9d:31:d2:46:b9:5b:a2:a7:72:d6:91:d6:e1:
fa:be:c8:6d:88:3f:5e:78:85:a6:96:23:89:ec:ee:20:2f:d6:
9b:31:cf:c0:38:be:13:f2:7a:e8:83:66:a8:b4:b8:b5:34:a8:
35:08:9f:c4:3b:54:ad:7a:aa:54:7d:1b:ec:e7:c2:e3:dd:58:
ed:5f:b9:44:0e:34:ec:c8:c5:ae:d7:5c:c9:8c:b6:be:34:eb:
6a:17:1c:83:fc:45:5e:59:73:13:5f:7d:32:f4:e6:5a:bd:1e:
db:bf:f2:bd:d3:e5:e3:a4:2f:45:79:f1:46:99:f4:68:78:74:
10:f0:ec:37:95:60:21:d6:75:44:17:0c:49:8b:30:09:47:da:
4d:2b:65:ea:b3:11:88:b9:bc:ce:cb:2c:3a:bb:0b:24:9c:e6:
63:8a:f3:1d:43:0d:e6:f5:72:73:99:41:3f:f7:93:68:58:f6:
75:ce:c2:6b:76:3b:e7:39:90:6e:94:4c:1e:ff:78:75:d3:f8:
e1:04:ea:2a:a8:a5:5d:a8:62:69:64:58:c5:cc:68:03:8e:e9:
1d:d4:5f:ca:98:d5:df:4e:8f:f6:f1:51:ac:b4:0e:e7:c0:a8:
33:80:4a:00:4c:cc:eb:a2:f3:e5:bc:63:36:fe:20:77:b0:6c:
1a:32:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:24 2025 by rpki-client