Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS133448.roa
File: AS133448.roa (raw, json)
Hash identifier: FT350+7jTPMJW1gjiUcoG0vogWSzT7PKjvO4bRPK6wc=
Subject key identifier: 41:1C:28:6C:D7:76:20:E7:65:7C:C8:69:B3:09:6C:41:FC:42:C8:86
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 02E93D83BD7E9D92CD7BEBA86C16C8C4E1EB9491
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS133448.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 133448
IP address blocks: 5.253.85.0/24 maxlen: 24
185.90.62.0/24 maxlen: 24
185.99.134.0/24 maxlen: 24
185.121.162.0/24 maxlen: 24
185.121.163.0/24 maxlen: 24
185.121.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e9:3d:83:bd:7e:9d:92:cd:7b:eb:a8:6c:16:c8:c4:e1:eb:94:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=411C286CD77620E7657CC869B3096C41FC42C886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:f8:11:51:34:67:4f:24:92:be:0c:d3:54:
66:fa:7c:fa:5a:98:1b:d3:ef:56:05:76:77:19:ba:
7d:65:97:16:47:9d:df:d6:b5:d0:12:54:89:8f:df:
20:be:70:f3:1e:32:25:de:49:a3:2c:b0:b0:85:03:
0c:7b:d3:f7:65:07:d8:e2:1c:75:aa:df:f2:f2:96:
b7:4d:be:bf:65:f4:db:4b:74:2c:32:17:14:88:c2:
84:10:c6:50:ca:bd:13:5a:36:68:c1:05:c0:2b:41:
5a:d5:24:20:17:03:04:f5:6c:38:16:4f:ca:b5:74:
b4:97:85:98:3c:41:ef:51:e6:8a:50:53:bd:be:d2:
89:e5:33:0f:0c:7b:cd:04:6f:a5:9d:11:1c:10:19:
ab:8f:cd:77:28:a8:be:96:a9:f5:f9:84:74:2f:d5:
13:25:a0:94:ef:64:93:fe:92:35:01:9e:6c:8d:d8:
d0:a6:ce:b0:9a:62:5e:70:ea:dd:fd:01:af:cf:73:
c7:85:cb:e4:b7:2b:5d:5e:19:bc:47:87:68:88:d3:
d1:fc:ea:7c:f0:7b:88:9a:9c:74:ae:f6:02:ca:d1:
f0:b2:bf:96:ec:e1:e2:69:1e:92:52:59:34:7e:28:
3a:2e:eb:84:38:c0:46:4f:96:71:0f:0b:91:d7:61:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:28:6C:D7:76:20:E7:65:7C:C8:69:B3:09:6C:41:FC:42:C8:86
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS133448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.85.0/24
185.90.62.0/24
185.99.134.0/24
185.121.162.0/23
185.121.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:77:96:dd:2d:b3:c7:a7:90:bd:eb:d2:8c:15:60:05:ba:0b:
d1:83:18:84:06:c7:c0:b9:ea:cc:03:9c:4f:3e:74:8c:db:1c:
cf:9b:f1:83:0c:d4:b6:c1:09:58:ef:a0:d4:bd:2a:66:21:4a:
7e:b9:ce:63:9a:a8:9f:13:ac:9a:d2:10:72:40:d2:de:43:86:
17:15:db:bb:07:a8:af:2c:61:76:8f:4e:55:51:b8:a6:c0:f8:
8e:92:5c:e2:c8:2e:df:8c:76:e6:f8:7a:22:19:a9:43:fe:58:
59:58:d3:fd:2e:95:4b:07:50:6c:f5:5f:9c:89:27:8c:02:7d:
0c:29:30:26:11:e0:c5:cc:6c:ed:40:41:e7:c8:c3:75:18:75:
f4:c2:66:2b:d3:7f:2d:a2:01:54:e6:aa:cb:77:05:aa:8a:90:
16:18:cf:d4:a2:91:8a:a7:64:70:1e:07:3f:f1:ba:7d:3c:c4:
ab:d9:43:39:f4:45:d5:35:b3:6c:2f:87:da:9f:96:a0:3e:d0:
e5:7b:5a:60:04:46:ac:6d:9e:7d:70:98:4c:c4:e7:bc:49:07:
3f:e3:fd:bd:b3:c8:9d:50:47:12:98:63:5b:d8:48:01:b7:b3:
bc:ac:41:a8:33:4b:ec:b7:75:8b:cd:22:90:d1:e3:c8:f4:e4:
59:a5:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:36 2025 by rpki-client