Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS396319.roa
File: AS396319.roa (raw, json)
Hash identifier: y09xqjigu3Ju6puh5ZhYgzp/oDJop2cCuzlNhDok2SE=
Subject key identifier: 5C:67:E6:D8:B3:C8:37:E9:D3:1F:2D:E3:FC:7F:A0:E9:90:D1:FB:69
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6E95B65F2BF8A4C5F5FB570C6FCB17265DD3C24F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS396319.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 396319
IP address blocks: 185.195.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:95:b6:5f:2b:f8:a4:c5:f5:fb:57:0c:6f:cb:17:26:5d:d3:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=5C67E6D8B3C837E9D31F2DE3FC7FA0E990D1FB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:3b:79:9b:39:1a:65:a8:59:33:aa:97:1c:
0e:1d:df:f6:1e:86:36:16:0f:16:96:e3:7a:6c:08:
dd:de:1a:53:ec:99:c5:17:e2:95:f7:aa:bc:59:7a:
fc:c1:6d:4b:a0:c7:6e:f7:45:a5:35:dc:e2:fd:a1:
36:b0:79:c2:48:db:b2:c4:8f:56:5b:11:72:85:2d:
10:5b:90:07:69:84:20:91:81:b5:08:8a:35:3f:cc:
75:d2:9f:ce:3c:76:92:07:5b:43:33:52:22:32:68:
ea:95:e3:c1:d8:f6:c1:f2:73:16:f5:06:f0:5a:50:
d0:2c:2e:b6:b8:f1:74:69:91:21:8d:ce:88:a4:e1:
b0:5b:86:e3:56:ec:91:5f:49:e4:0c:8c:c3:78:ea:
86:60:bf:20:67:81:67:db:4d:10:32:74:79:57:16:
3d:a9:f3:6d:68:b0:b0:90:4c:dc:be:dd:c7:e2:d6:
5f:85:2d:51:0c:f9:64:56:ce:42:4f:73:49:50:98:
a0:b8:02:86:43:03:d7:68:97:6e:6c:37:42:50:a7:
e8:5b:20:af:1b:fb:70:c4:50:0a:2c:7a:ea:2b:3e:
32:98:c6:0c:66:d8:ba:9c:87:bf:db:1a:b6:37:0d:
bb:aa:4e:b5:ab:b4:50:b5:b3:ca:8c:f3:6b:c6:01:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:E6:D8:B3:C8:37:E9:D3:1F:2D:E3:FC:7F:A0:E9:90:D1:FB:69
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS396319.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:76:a7:c3:bc:6f:2e:d0:eb:5c:2a:a6:d4:11:6e:b5:ae:ad:
57:ef:c7:18:86:6b:8e:29:f2:2a:2a:c1:4d:87:75:f4:be:a6:
2d:32:86:73:a6:97:4c:10:33:77:59:ca:42:3f:98:49:e2:8b:
a0:fb:71:5f:2b:3a:37:32:8a:03:bb:cd:64:1c:87:81:2f:28:
32:3e:59:2d:16:1e:0b:79:b7:20:3f:e5:d6:d5:70:9e:7d:6b:
6a:8a:bf:16:cd:c1:f4:18:7e:c5:73:b8:2e:40:59:aa:d8:6f:
7b:37:21:a3:2f:b6:6b:df:25:04:ed:2d:f0:fd:58:44:11:91:
f4:1a:05:99:3d:83:0b:94:e7:08:86:e1:41:d6:a2:67:65:51:
0f:5f:20:5d:97:f8:7d:37:2a:54:38:e7:3d:67:62:e5:84:3c:
f4:f7:b2:94:37:9c:10:25:69:3b:79:b4:54:aa:2a:16:42:75:
06:d3:1b:4f:c4:a5:f2:72:e6:b1:61:3b:16:19:3f:d9:94:8d:
3c:68:12:c8:64:ea:ed:b2:dc:f4:04:ad:28:17:10:1b:f3:d2:
cb:14:1f:e3:1e:f1:1b:17:ca:c2:0c:b4:99:7f:9a:c3:71:1d:
26:9a:9f:46:ce:0f:9c:63:76:21:1a:21:c2:f7:54:3a:3c:aa:
d1:c2:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:50 2025 by rpki-client