Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203061.roa
File: AS203061.roa (raw, json)
Hash identifier: tKBFhK9zV/ziWGbG0/T6oG0pa1wh8SiOZrCMdnR/HJs=
Subject key identifier: 0F:25:B5:75:AC:BF:C8:7B:75:37:83:67:65:36:FB:DA:6B:54:72:A2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 65D3B6CB6503397436B672E8F498B7AA4C66FBF8
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203061.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 203061
IP address blocks: 185.121.171.0/24 maxlen: 24
185.147.32.0/24 maxlen: 24
185.147.33.0/24 maxlen: 24
185.214.172.0/24 maxlen: 24
185.214.173.0/24 maxlen: 24
185.214.174.0/24 maxlen: 24
185.214.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d3:b6:cb:65:03:39:74:36:b6:72:e8:f4:98:b7:aa:4c:66:fb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=0F25B575ACBFC87B753783676536FBDA6B5472A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:68:0a:99:0f:69:66:53:e6:28:e9:65:cc:
b2:11:8b:62:ca:46:41:0a:80:52:7b:cb:ee:97:67:
61:88:6b:37:66:65:bf:02:81:0f:1c:37:14:a2:f1:
70:b8:cf:38:13:aa:42:f0:0b:36:fa:81:04:7f:22:
68:ab:bc:c9:d9:42:39:13:96:dd:05:de:fe:88:4f:
df:50:0a:55:e8:19:8e:b0:90:5a:91:44:12:b1:3e:
d5:35:28:4a:ee:e3:52:26:3c:6d:90:73:42:ee:d2:
22:6c:d4:8d:92:7b:80:03:55:98:36:bb:2d:41:02:
1c:44:80:06:a1:35:e3:6e:1a:8c:9d:a2:0c:ac:7f:
7a:f3:81:af:25:f0:10:a6:47:4d:93:58:54:24:78:
c7:66:d1:3b:c3:32:a2:c1:c3:b5:71:5c:ec:14:fe:
60:3e:4b:a5:0c:d9:3d:04:c9:e4:9f:e2:78:01:e6:
53:35:6e:2c:33:6d:a8:ac:f4:32:fa:3a:30:a1:b1:
85:49:64:e6:f5:38:75:bc:dd:54:ce:c3:c2:1c:3d:
35:cb:b2:b3:26:7e:4d:a4:e8:5a:60:71:e7:45:7a:
5b:be:eb:96:27:fe:67:b0:80:9c:16:80:2a:23:c4:
1f:78:60:c5:56:10:fc:71:c4:87:a0:03:b2:05:a3:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:B5:75:AC:BF:C8:7B:75:37:83:67:65:36:FB:DA:6B:54:72:A2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.171.0/24
185.147.32.0/23
185.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:be:53:ca:85:50:bc:9e:d2:62:64:4b:a1:78:7b:45:9a:ef:
e5:dd:71:9d:c1:76:56:7f:ea:6d:91:ce:60:0b:14:c1:d2:08:
8d:3d:0b:b6:3a:53:49:bc:20:f3:63:db:a5:8c:d2:ec:e0:70:
38:3a:1c:ff:6c:f3:34:59:77:e7:cf:cc:6d:ed:0c:b9:a9:88:
ce:27:38:c5:c6:f7:47:6e:e2:3a:9c:cc:4b:5a:42:33:62:b5:
3e:6b:04:9a:e0:b6:5f:57:fd:e8:ce:86:c7:d7:51:e5:81:10:
2a:5e:e3:4d:1c:c0:96:8c:39:6b:f2:29:fb:fc:c2:62:db:1d:
b5:f1:7c:7c:6f:7a:4b:c7:7a:dc:70:ae:65:37:17:f2:06:af:
77:e0:d8:b2:d6:7a:cf:f3:41:0c:08:5c:bc:34:06:3b:eb:12:
f7:27:66:ae:07:88:08:d2:f6:33:e8:0d:90:31:7e:f4:56:9f:
e9:52:ce:6d:05:6b:71:e0:a1:6b:e5:7f:d7:f6:df:6c:9d:80:
68:30:19:3d:74:b5:a1:7d:2f:26:ee:3b:b5:39:e1:55:38:c2:
61:40:be:b9:f1:29:0e:4f:24:a4:a1:76:7a:c4:6d:07:2b:55:
52:d2:8c:23:a2:4c:2c:46:f2:5a:53:13:e3:53:d8:fa:bc:d8:
9a:68:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:09 2025 by rpki-client