Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38372e302f32342d3234203d3e20333939313134.roa
File: 352e3235332e38372e302f32342d3234203d3e20333939313134.roa (raw, json)
Hash identifier: 47zqXLSUG6vMsCT147DyVZZBX13uYInCLMSjwih+r9o=
Subject key identifier: 2A:11:C2:A3:A3:00:DA:07:DB:72:72:B6:7D:07:8A:B9:04:D5:FB:BB
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 22C6C3081F6601F189DB4DF1EF2105DCC9838E23
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38372e302f32342d3234203d3e20333939313134.roa
Signing time: Fri 09 Dec 2022 05:05:08 +0000
ROA not before: Fri 09 Dec 2022 05:00:08 +0000
ROA not after: Fri 08 Dec 2023 05:05:08 +0000
asID: 399114
IP address blocks: 5.253.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c6:c3:08:1f:66:01:f1:89:db:4d:f1:ef:21:05:dc:c9:83:8e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:00:08 2022 GMT
Not After : Dec 8 05:05:08 2023 GMT
Subject: CN=2A11C2A3A300DA07DB7272B67D078AB904D5FBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:4f:db:0f:a1:48:15:ac:71:0b:53:ac:ed:
5e:42:b2:3b:01:36:f5:7d:10:6a:40:da:b1:dd:49:
cc:64:35:69:7a:32:1d:d5:18:68:a8:22:99:20:54:
a4:7b:d0:9b:09:64:1a:a7:b5:50:77:f1:9a:31:71:
ac:b0:0b:32:7e:26:c1:7a:cb:ac:d9:61:96:af:55:
96:f3:d2:81:bb:cd:f1:cb:c2:3a:4c:57:e3:e3:72:
a3:da:aa:91:76:f0:9f:ff:3f:ff:62:50:4d:d5:58:
d7:3a:f7:9f:76:50:a6:8c:c4:44:7c:a8:8e:5e:ea:
5c:0a:d5:2d:2c:5c:ac:6f:50:a0:a9:0a:3e:c7:a1:
07:40:97:3f:68:1b:a9:6a:01:0f:52:7b:ac:04:65:
5b:05:35:74:a3:bc:fc:eb:2c:1c:93:cf:fd:57:c9:
32:b0:41:1a:65:bc:68:dc:9c:83:49:46:78:06:be:
e8:ce:33:a6:70:0f:fb:84:dd:f9:bb:56:21:ce:6f:
06:a5:11:25:6b:e1:af:d5:57:07:16:f7:71:1f:de:
c3:ae:91:12:0c:b5:37:64:19:b7:07:91:12:5f:2c:
3a:dc:77:50:e7:7e:b3:c9:f5:ac:8d:60:43:64:63:
0e:f3:7a:d3:9c:e0:23:7c:08:eb:b4:4c:15:75:9b:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:11:C2:A3:A3:00:DA:07:DB:72:72:B6:7D:07:8A:B9:04:D5:FB:BB
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38372e302f32342d3234203d3e20333939313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c7:67:3e:6b:d5:c9:19:5b:fe:d4:18:6a:4a:8c:6a:1f:bb:
bc:f8:54:04:fc:88:b4:70:3d:f9:74:e2:29:59:17:b1:a2:e7:
55:20:ee:75:d4:bc:a0:7c:b2:97:f0:ea:13:d4:4c:22:46:d6:
c8:0a:63:ed:8e:e0:04:35:67:05:e8:0a:13:9d:c7:6f:f2:2b:
74:e1:a5:5f:28:91:07:2c:36:e8:84:05:93:a3:ec:76:cf:7f:
7e:e2:96:17:4e:05:b0:77:7d:2a:2e:98:f5:90:3d:ff:c7:ed:
65:64:5d:5e:a4:cd:46:7e:16:31:a6:22:30:21:6a:5e:f3:e9:
42:a5:66:51:96:0c:a3:22:9b:59:b6:30:f3:eb:a3:a8:4d:06:
a4:00:fc:31:fd:b7:dd:fc:41:5e:e8:91:00:74:cd:bd:cb:88:
ef:67:e6:56:c8:85:af:2c:c6:d9:8d:d0:ad:b4:4a:ed:c2:e1:
2f:b4:9d:08:0f:59:3b:6d:7e:a2:39:df:d2:8f:61:14:a7:60:
37:ed:9c:4e:b0:2d:98:46:fd:fe:97:99:1a:81:c3:68:81:b4:
02:61:37:66:bf:a0:51:d4:bc:6b:19:39:74:c3:ad:d4:7a:fd:
23:a1:b7:bc:73:fe:43:dc:1f:17:99:f9:66:aa:0d:bc:10:0d:
28:2b:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:43 2025 by rpki-client