Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138995.roa
File: AS138995.roa (raw, json)
Hash identifier: XmM4Ve8yx8nW4uo84nV75KvX8XtZ+7EXpxfRn26R5Us=
Subject key identifier: EB:90:9F:AE:6A:A5:44:AF:3F:67:3B:76:6C:89:8C:F3:96:6F:5D:1B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 414369A97767F954EB5FEB629F1F30E5D784EAE8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138995.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 138995
IP address blocks: 185.121.170.0/24 maxlen: 24
185.121.178.0/24 maxlen: 24
185.121.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:43:69:a9:77:67:f9:54:eb:5f:eb:62:9f:1f:30:e5:d7:84:ea:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=EB909FAE6AA544AF3F673B766C898CF3966F5D1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:7c:53:20:21:d0:55:ca:c3:cf:32:1f:65:
4d:f9:e4:6a:a8:5b:0e:f5:b2:4c:5d:6a:c0:d1:bd:
1b:65:c7:c4:23:bb:26:0c:c3:de:cf:82:ea:fc:de:
0a:bd:a1:77:62:e7:b7:4a:6c:e2:2f:ad:ad:ca:6b:
46:11:29:a3:6a:4d:9b:27:62:3d:02:c9:a5:52:e2:
9d:02:67:76:a0:89:f3:8b:a7:4d:ea:07:23:d8:25:
0b:fd:69:1d:78:82:56:64:dc:b7:17:07:7e:ad:1b:
85:99:97:97:49:8b:f3:bc:cf:2e:10:72:42:d4:eb:
bf:59:ce:e2:0a:d8:44:60:4b:0e:d6:fe:ee:fb:0b:
0a:ae:b9:40:f1:87:d2:2d:d7:f6:f2:ea:ca:30:02:
85:47:c0:c2:92:9a:c5:b2:93:9f:4c:a5:38:ff:48:
e4:26:8a:97:87:ed:d4:9a:de:42:95:96:3c:ea:e1:
82:6a:a6:8d:60:74:3b:69:f4:8a:dc:60:10:bf:89:
c2:d7:ea:71:dd:0f:43:ad:ef:99:0a:dc:25:6b:13:
44:de:21:e1:61:ec:cc:95:05:c9:15:fa:39:dd:67:
27:8d:ad:d8:87:01:c7:a0:f7:5c:02:39:25:a1:7d:
58:01:ae:c9:b9:f6:d9:c5:de:3e:e6:82:da:2b:5b:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:9F:AE:6A:A5:44:AF:3F:67:3B:76:6C:89:8C:F3:96:6F:5D:1B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.170.0/24
185.121.178.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:78:22:41:2c:82:ad:d0:22:8a:00:a6:84:f7:71:62:90:54:
78:b4:02:0e:6f:74:92:1e:ab:f7:fe:31:e6:49:93:82:9f:c9:
af:4f:97:40:15:89:55:04:fe:29:0c:60:21:da:da:15:c8:d5:
71:91:d1:bb:f3:45:ee:7d:b1:cd:36:2a:2d:98:2b:f0:68:5c:
11:e0:ce:2d:db:e2:46:79:79:41:11:a7:9f:95:ad:33:49:ea:
2d:72:28:bd:09:8c:26:20:dc:4e:9c:6d:b9:2c:e3:a2:55:32:
33:94:97:8d:f9:37:2c:11:9f:ab:83:ec:7a:53:b1:f8:59:e8:
ae:bf:12:ce:50:85:32:3e:b8:4e:f0:40:ac:e9:94:e8:69:c8:
22:a1:0c:5b:3d:1a:1a:1f:32:45:3b:91:fe:db:7e:2c:42:3c:
31:2e:57:bb:78:6a:1c:37:8b:ca:0c:b1:c2:18:bb:0a:8c:db:
5b:a4:a7:64:ad:6c:93:2c:ae:0b:d3:36:59:bc:ce:74:d6:8a:
82:9d:c0:58:66:1e:59:d3:dc:cd:db:7f:cd:80:5f:1b:ba:8d:
8b:00:51:cf:5d:2d:7e:7e:44:4b:af:9d:cc:6c:a3:1b:60:f4:
66:1b:9b:b1:a1:2c:59:ba:6b:44:a4:88:6e:e1:78:ab:f6:07:
4e:d9:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:06 2025 by rpki-client