Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS35913.roa
File: AS35913.roa (raw, json)
Hash identifier: wLb0AVYl7bpUrQJVUiGGIoZcDv4GUcrw21lZ4mUpTng=
Subject key identifier: F2:C3:78:B8:FD:6B:1F:2B:B9:8C:CA:96:57:75:24:AD:52:6F:3E:B6
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 4F0DE7422365003D3F3FFFB161632EF1F53C8A7B
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS35913.roa
Signing time: Fri 09 Dec 2022 07:58:40 +0000
ROA not before: Fri 09 Dec 2022 07:53:40 +0000
ROA not after: Fri 08 Dec 2023 07:58:40 +0000
asID: 35913
IP address blocks: 2a0a:6040:fa00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0d:e7:42:23:65:00:3d:3f:3f:ff:b1:61:63:2e:f1:f5:3c:8a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 07:53:40 2022 GMT
Not After : Dec 8 07:58:40 2023 GMT
Subject: CN=F2C378B8FD6B1F2BB98CCA96577524AD526F3EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:91:ed:9a:e6:b5:2c:ef:28:12:4c:bf:d0:
13:87:df:73:fc:5b:25:e2:69:0a:d0:37:b6:b0:5d:
d2:35:cc:2d:62:af:51:e3:81:97:1b:2b:47:60:8b:
49:91:ad:9d:2b:eb:fb:6f:0b:0c:48:e5:ff:3c:93:
f8:f7:a5:93:41:a4:52:bb:cb:1e:6d:58:6a:82:6a:
83:68:80:50:ff:05:7f:cd:9b:6f:7e:ce:af:ff:8b:
1d:4e:6f:e9:d0:9c:ac:5a:97:3d:79:6c:f9:e8:d4:
7d:53:53:19:1c:03:00:bf:ec:05:06:45:4e:e9:d0:
ac:dc:09:4d:e3:c8:5d:75:35:5b:59:db:46:21:e4:
4e:8b:9b:90:0f:de:bb:56:44:22:92:1c:51:40:f8:
c6:66:67:a1:e9:78:1e:db:b5:09:f0:99:21:a6:d6:
99:8e:30:84:76:14:d7:45:2d:94:a8:74:13:02:37:
11:ac:1b:57:db:1d:3d:66:0f:a5:bb:7e:6f:4c:80:
cf:6e:d2:e9:91:c7:b4:05:42:24:f1:05:40:1f:94:
33:37:8c:45:f2:a5:03:3e:c9:0a:f0:b8:24:d0:e4:
7a:90:e7:ee:c3:15:99:51:0d:1f:9c:04:38:ba:ed:
bc:60:dd:86:f6:b4:58:0d:cb:3d:b9:76:b5:85:23:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:78:B8:FD:6B:1F:2B:B9:8C:CA:96:57:75:24:AD:52:6F:3E:B6
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS35913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
c9:a5:f2:00:8e:d4:fe:29:17:c9:8e:6d:84:0b:11:54:18:84:
91:21:f0:a1:4b:71:be:2b:12:3a:f0:24:20:39:be:e3:e6:02:
63:d4:c6:47:90:f8:35:9f:49:11:04:aa:0b:74:55:93:b7:14:
d0:58:e2:5e:5d:a4:72:b6:ce:c3:a6:ec:2c:85:e1:16:c9:e6:
68:3a:64:a4:bd:4e:30:cd:b6:e8:d8:2b:3a:2f:1a:6d:f6:3e:
76:1d:be:d6:56:11:d8:41:2f:ae:74:3f:9d:28:f8:9d:26:ec:
5c:84:24:7c:57:2c:f8:dc:30:a9:02:45:b8:63:26:9e:e5:3f:
78:f9:e3:31:fe:cf:19:56:6c:71:a3:e0:ff:29:86:7d:e4:f4:
41:02:ea:9a:6c:ca:88:a1:b5:3c:f7:d4:73:13:61:77:27:47:
20:5e:bc:20:70:52:dd:1d:f5:cd:fa:06:26:3f:2a:16:3d:67:
61:e6:23:df:57:eb:3d:d6:11:e9:42:77:a9:75:df:d1:56:e9:
06:f1:97:a2:b6:0e:23:61:12:d3:4a:fe:da:45:1f:1a:f8:81:
7e:5e:20:c3:d0:76:dd:0e:2e:e6:51:79:14:41:c7:e2:33:ab:
7b:83:28:55:c1:01:73:a4:4f:5b:9f:fe:ec:80:6e:a4:64:30:
78:32:d8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:06 2025 by rpki-client