Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203098.roa
File: AS203098.roa (raw, json)
Hash identifier: LI/I0lBU8uRNvj71w6aeInuz+piqJpZscF8qgyDdT24=
Subject key identifier: 55:97:1F:CC:32:36:E0:4F:3B:D1:2E:A7:69:15:08:1F:DB:7F:5C:D4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1D3BE7BF403C28606C1100E85DB9FEDD39428AB3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203098.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 203098
IP address blocks: 185.90.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3b:e7:bf:40:3c:28:60:6c:11:00:e8:5d:b9:fe:dd:39:42:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=55971FCC3236E04F3BD12EA76915081FDB7F5CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:95:10:10:00:c6:ea:e3:e9:10:30:94:28:
07:cf:39:ab:0c:34:97:98:73:02:45:45:51:f1:a5:
bb:ed:0f:b0:35:c2:7a:88:42:a2:35:d6:f9:91:e5:
47:30:03:be:e0:73:5d:04:50:ba:c1:bd:9d:d6:02:
e3:88:d8:73:92:d2:25:9b:b5:94:98:8a:bc:44:a0:
44:6a:10:52:da:e4:ed:98:b5:63:44:ce:12:b0:8e:
fc:89:3d:54:71:9d:e3:cb:9f:54:db:f3:4f:76:18:
e1:30:ea:05:1d:0b:7e:38:86:45:57:5b:81:1b:9a:
6f:c1:63:98:5a:07:30:4c:cd:e5:16:4c:bc:79:b5:
4d:e1:5a:62:9a:93:ec:aa:20:d4:15:1c:f6:f8:a2:
89:3d:d8:49:94:08:49:4c:ea:a4:c6:74:d0:fd:fc:
bc:52:66:34:bb:d8:ea:31:fc:a5:b5:11:db:fc:1b:
71:cf:f3:cc:c3:27:8f:83:3f:da:d0:c5:d2:a2:6e:
b5:3c:2a:8f:24:a8:72:20:69:d0:7c:b1:a7:bf:ad:
22:3c:fa:6a:76:ff:b7:13:f5:77:47:4c:ac:76:16:
df:f2:a8:39:66:4b:ec:e7:fc:b3:63:41:ff:a7:45:
4d:24:4b:2c:32:61:45:54:25:b9:a4:66:91:34:2a:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:1F:CC:32:36:E0:4F:3B:D1:2E:A7:69:15:08:1F:DB:7F:5C:D4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.63.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f6:54:9d:8a:e3:3a:dc:ad:cd:74:8b:02:39:04:e6:76:1c:
aa:33:6c:f6:67:c1:cf:3d:ab:fe:65:6d:fd:9e:28:1a:98:64:
0a:a4:e8:6a:30:cd:0c:ed:27:99:7b:a7:85:a8:5d:f0:cb:73:
db:37:b9:90:b2:d6:80:54:92:20:cd:5e:58:d8:f8:b4:5c:82:
cc:e2:0c:cf:f4:2e:2a:e4:97:d1:4c:79:28:83:c2:e8:f2:d2:
72:71:2e:ec:79:43:0b:ce:b0:c2:15:f7:aa:83:27:7b:71:cb:
e5:d8:b1:fa:18:ad:dc:0d:8a:27:da:c3:69:c2:f9:3b:98:55:
a5:fb:91:e5:10:b4:09:c2:bb:27:6b:61:17:6b:ec:f3:74:99:
17:78:18:f5:1f:91:19:dd:63:7f:c4:dd:94:71:76:52:7d:c7:
51:2c:f4:b2:0a:10:d8:37:07:3e:f2:40:23:6a:be:d4:1d:92:
e8:d8:40:6e:20:59:b6:92:90:c2:30:f0:a5:af:1c:e1:34:ec:
f7:65:a9:5f:cd:96:18:0b:01:17:94:cd:62:0a:97:a5:00:23:
57:1a:f1:87:2b:18:48:dc:2c:03:10:ac:41:12:43:17:8e:df:
8c:0b:e6:d2:28:41:1d:ab:c8:73:ab:11:9b:a0:b1:f6:6b:9b:
21:c5:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:41 2025 by rpki-client