Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399114.roa
File: AS399114.roa (raw, json)
Hash identifier: SFIoIhyYHQIWKkYlp/Ddd0K/u2qQQ7Ssck5Ri95VXgU=
Subject key identifier: 99:8B:4C:B0:77:F0:53:C0:E1:0B:77:8E:C6:9A:B8:0C:F4:D0:39:82
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3943BB4F3A34570B175959CE3A23EA2A5068562D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399114.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 399114
IP address blocks: 5.253.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:43:bb:4f:3a:34:57:0b:17:59:59:ce:3a:23:ea:2a:50:68:56:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=998B4CB077F053C0E10B778EC69AB80CF4D03982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c0:c0:48:3c:2e:dd:28:dc:fc:1c:84:f9:41:
0b:f7:a0:d7:44:1b:05:83:3f:7f:09:c1:bf:7a:3d:
d0:6f:87:a1:04:0d:a5:3c:57:38:a5:b5:d2:2a:90:
f7:91:8a:d0:92:6d:bb:f1:1e:ad:24:0e:38:06:c5:
2a:45:66:da:66:67:96:b4:37:9a:24:93:1a:62:98:
2b:58:55:95:7b:de:26:f2:46:09:cd:c7:3c:96:3d:
7d:78:3e:e8:bd:bb:15:d1:6b:9b:8a:bc:84:e5:d2:
0e:af:8a:24:da:10:14:33:c5:cd:bb:9c:57:21:46:
de:88:05:2a:53:c5:2e:9f:cd:08:23:28:1e:33:d4:
4b:ce:bf:28:e4:63:25:38:cf:7d:17:9e:87:ee:11:
ad:93:81:1d:78:19:14:75:c6:df:af:62:ae:ae:00:
8d:9a:7d:d7:4d:fc:0d:3d:02:7f:56:63:2c:cb:c4:
22:6d:bc:d4:b6:4e:b4:4b:a8:f4:9d:bb:b6:44:f6:
40:f3:26:63:41:4c:97:76:a7:70:ff:f5:f4:c5:9b:
d3:f5:33:c7:26:bf:31:79:08:92:74:b5:73:89:0b:
e5:b2:12:67:e1:cd:34:9b:b2:e5:e5:92:69:7c:c5:
5e:f3:dd:d8:33:d8:12:1a:61:24:91:f6:90:eb:ce:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:4C:B0:77:F0:53:C0:E1:0B:77:8E:C6:9A:B8:0C:F4:D0:39:82
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS399114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.87.0/24
Signature Algorithm: sha256WithRSAEncryption
99:df:cd:f4:12:17:82:2d:29:c0:44:32:e4:cb:9f:23:0f:2a:
81:21:aa:41:10:ab:cf:2a:a6:e0:fb:b8:eb:75:5c:f7:18:c9:
0b:6c:0a:20:90:14:1e:68:91:96:7f:ef:21:4e:ac:09:55:57:
46:b4:e2:13:d7:ab:fe:b6:5a:3c:c4:c0:82:be:35:80:79:49:
5d:82:47:b0:38:c7:87:db:5d:82:35:97:73:72:9f:ea:30:32:
15:aa:7a:b6:dc:01:7a:63:4b:73:20:e2:bc:99:20:97:70:83:
f7:ed:8f:c5:87:f4:3f:c9:1a:1c:aa:1e:cb:68:b2:c9:f9:2b:
83:a4:85:94:c1:7f:c2:37:b2:b5:ef:3e:2f:65:1d:1f:f5:de:
2d:81:66:0b:14:98:c1:ab:d6:da:7e:12:5c:9d:f7:10:62:28:
fb:55:2c:a9:0a:fe:72:15:17:6d:95:d7:81:85:b3:ae:6e:99:
66:07:90:36:74:07:4c:dd:b7:33:65:e5:39:9a:71:63:da:fb:
50:3e:45:3f:10:8a:c0:24:de:58:dc:22:58:3c:59:2c:08:a2:
cd:87:79:78:23:29:31:ca:2c:7c:1c:90:6c:42:5d:94:a2:d1:
d5:76:01:fd:7d:bd:24:55:93:b2:15:a4:46:ce:36:c6:85:3d:
57:68:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:15 2025 by rpki-client