Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213122.roa
File: AS213122.roa (raw, json)
Hash identifier: TkvBWWXl1172uzWH8kW+loivtSyvf26Y9Bj75o/O0xU=
Subject key identifier: 3D:55:DD:78:6D:55:EB:95:9A:96:F4:9F:17:8E:1E:DB:99:C7:35:10
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1F45F892B9706B721CC250B27B2F7BBF3138D305
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213122.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 213122
IP address blocks: 185.147.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:45:f8:92:b9:70:6b:72:1c:c2:50:b2:7b:2f:7b:bf:31:38:d3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=3D55DD786D55EB959A96F49F178E1EDB99C73510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:7e:83:10:bd:4b:97:3d:f6:6a:35:15:d0:
39:a0:b5:02:d8:df:a6:e2:5f:c5:99:04:92:3e:59:
b7:70:fa:fd:e0:46:c2:2e:90:3d:91:ae:96:c7:a0:
ad:91:31:b7:47:05:20:f5:75:96:69:09:ac:3f:73:
7d:58:68:64:0c:35:ae:c3:59:15:c3:5f:8f:4a:4a:
48:08:9c:79:99:cb:7f:b9:e4:72:79:a5:02:d5:46:
21:e5:85:7f:61:2c:97:83:ca:25:f3:1d:5d:5d:11:
3d:c0:b4:da:c6:22:6f:a4:50:88:45:ed:0a:72:6c:
cc:18:37:a5:9f:33:bc:48:f7:45:e1:1b:35:16:d5:
ee:8c:c6:b0:35:09:42:b0:83:1b:78:5d:92:77:5d:
08:c5:9c:7a:af:83:7d:75:22:d3:b1:2e:c5:98:3b:
9f:1d:6b:36:3f:29:6c:37:93:fa:e9:fb:c0:bb:03:
55:2c:43:09:54:4d:b9:15:df:d1:5d:57:f2:07:19:
26:00:4a:66:97:17:27:af:1a:8e:9a:98:13:2b:66:
bb:77:d0:ca:10:be:1e:01:c6:bb:0f:46:07:3e:a5:
02:2c:5e:f4:33:73:ed:9a:0f:2a:da:67:d6:12:aa:
6f:22:92:83:d0:73:38:1d:de:5f:db:de:e9:ef:76:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:DD:78:6D:55:EB:95:9A:96:F4:9F:17:8E:1E:DB:99:C7:35:10
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS213122.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:34:ef:3f:e5:3c:46:69:dc:0d:de:6a:6d:b4:cb:bd:52:9a:
37:0a:43:fb:07:2a:91:99:29:bb:f0:b7:c1:3c:8c:19:0d:f6:
c2:af:83:5d:6b:4a:b6:dc:cf:0a:40:d7:b3:1d:93:cb:77:21:
27:e0:92:11:25:ec:9a:3c:f1:24:90:0a:7d:01:da:bb:6a:2e:
23:63:90:f9:7c:a9:3f:3d:88:f5:f8:60:df:e8:c1:68:09:eb:
b8:fd:38:10:ca:29:21:7a:43:25:ab:79:e7:1b:60:ea:76:ae:
15:2e:16:e8:9c:a6:c1:38:d1:f3:a6:f4:69:25:5e:a6:01:7e:
46:8c:12:33:db:06:bc:39:92:37:dd:dc:ea:07:d4:77:7c:3a:
4c:94:6e:97:a0:17:c2:ef:d8:84:49:d5:4e:93:20:79:c8:2d:
68:27:fe:c1:37:d9:2f:c9:74:67:e1:d8:22:c3:1e:17:62:f8:
57:22:b9:e7:0f:69:82:35:26:c7:f5:13:a2:21:5f:10:7e:f6:
ab:e3:e8:a5:ce:e7:93:ff:00:fb:7c:8f:4d:1e:b9:d7:8d:48:
eb:dc:af:c8:8e:b2:86:61:d4:66:e1:25:19:83:0e:1d:07:a8:
2f:fe:d6:ae:c1:fa:bb:7f:90:77:5b:f2:d4:a1:0f:be:70:bf:
3a:b9:b0:d1
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUH0X4krlwa3IcwlCyey97vzE40wUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDJaFw0yMzEyMjAxNjU2NDJaMDMxMTAvBgNV
BAMTKDNENTVERDc4NkQ1NUVCOTU5QTk2RjQ5RjE3OEUxRURCOTlDNzM1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrR36DEL1Llz32ajUV0DmgtQLY
36biX8WZBJI+Wbdw+v3gRsIukD2RrpbHoK2RMbdHBSD1dZZpCaw/c31YaGQMNa7D
WRXDX49KSkgInHmZy3+55HJ5pQLVRiHlhX9hLJeDyiXzHV1dET3AtNrGIm+kUIhF
7QpybMwYN6WfM7xI90XhGzUW1e6MxrA1CUKwgxt4XZJ3XQjFnHqvg311ItOxLsWY
O58dazY/KWw3k/rp+8C7A1UsQwlUTbkV39FdV/IHGSYASmaXFyevGo6amBMrZrt3
0MoQvh4BxrsPRgc+pQIsXvQzc+2aDyraZ9YSqm8ikoPQczgd3l/b3unvdqRdAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUPVXdeG1V65WalvSfF44e25nHNRAwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEz
MTIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAuZMiMA0GCSqGSIb3DQEBCwUAA4IBAQAvNO8/5TxGadwN
3mpttMu9Upo3CkP7ByqRmSm78LfBPIwZDfbCr4Nda0q23M8KQNezHZPLdyEn4JIR
JeyaPPEkkAp9Adq7ai4jY5D5fKk/PYj1+GDf6MFoCeu4/TgQyikhekMlq3nnG2Dq
dq4VLhbonKbBONHzpvRpJV6mAX5GjBIz2wa8OZI33dzqB9R3fDpMlG6XoBfC79iE
SdVOkyB5yC1oJ/7BN9kvyXRn4dgiwx4XYvhXIrnnD2mCNSbH9ROiIV8Qfvar4+il
zueT/wD7fI9NHrnXjUjr3K/IjrKGYdRm4SUZgw4dB6gv/tauwfq7f5B3W/LUoQ++
cL86ubDR
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:04 2025 by rpki-client