Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: 7VG2SL3TQ7L+OzzTJUhQ0IJnDevCdi8xrZIPX3N+qno=
Subject key identifier: 81:33:1F:4E:F5:9D:0A:11:A1:85:5B:D9:69:F9:7F:C0:EC:D3:B2:BD
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 63322E01D70FF3AA802FCF9100D1E9C0CA25F94C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS63023.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 63023
IP address blocks: 185.147.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:32:2e:01:d7:0f:f3:aa:80:2f:cf:91:00:d1:e9:c0:ca:25:f9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=81331F4EF59D0A11A1855BD969F97FC0ECD3B2BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:41:40:8a:a5:10:0d:c0:d4:95:c3:a1:5f:
59:e8:85:23:37:e4:4a:8a:81:58:c8:4e:61:f4:85:
3d:e0:b3:65:40:17:73:d7:9b:5c:67:55:0e:ff:d6:
03:86:3d:44:1f:81:27:40:81:0a:fc:69:8b:f6:79:
a5:c0:61:83:7c:c1:18:d2:0d:82:d2:23:ce:6c:67:
f7:fd:3e:ef:d4:9b:39:e4:26:24:e0:4c:41:af:5d:
33:95:54:ed:8d:04:01:61:f0:23:8e:d7:23:fa:d9:
a4:c0:68:b2:88:c2:fd:33:df:19:eb:c4:37:02:c2:
3c:e0:53:bc:ed:2c:63:3d:ce:f7:28:51:8b:8f:2b:
3b:ad:1d:54:c3:56:5f:75:b5:03:ed:e6:88:19:c3:
de:7e:ce:3d:2c:e2:41:d9:e5:36:64:e4:15:98:3c:
94:b9:c7:54:22:b8:20:7c:68:c7:41:4d:75:82:ef:
cc:8e:a1:25:58:fa:bf:a2:3f:be:35:9f:43:d7:4d:
81:94:8e:92:6d:a2:50:64:b8:c6:ee:71:8f:96:06:
b4:36:4f:25:7d:50:fd:26:23:56:9f:2a:e1:c7:73:
71:f2:2e:76:3e:83:14:68:fc:c3:d0:bb:dd:1f:34:
c4:e5:90:91:46:62:08:47:19:81:fd:98:6e:04:e9:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:1F:4E:F5:9D:0A:11:A1:85:5B:D9:69:F9:7F:C0:EC:D3:B2:BD
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:56:c5:28:60:29:90:e1:4d:76:93:11:8b:d8:eb:1f:7b:21:
fe:73:c0:60:d4:d8:18:6c:18:20:8f:f0:14:11:a0:3d:fc:f8:
b5:b8:86:e5:77:e0:67:32:82:c3:b9:17:b6:50:c9:56:53:a9:
94:bb:fc:bc:b0:6e:30:c4:bf:c9:e0:60:53:98:4d:4b:ad:b3:
85:39:1a:36:a5:2a:72:13:e2:a8:cd:a9:11:41:13:30:fd:32:
1f:94:de:b7:72:6f:1f:95:00:ce:80:f3:73:12:8e:f7:68:d7:
25:9b:b9:cf:ee:8f:a9:91:9f:d9:8f:3e:50:18:44:4a:6e:c9:
98:19:2c:52:a2:7a:b2:84:96:e6:85:58:98:6c:2b:84:bf:93:
95:9b:f6:e5:6f:da:e1:2f:92:a5:2d:9a:7b:a9:11:8c:e8:eb:
5c:e7:3d:6c:06:79:9f:6c:16:3a:8e:e5:32:fb:94:13:68:e1:
96:83:6c:43:c0:b7:96:80:7c:c3:2a:a6:02:21:64:c4:cc:74:
94:dc:76:ff:f6:18:5a:e9:ee:cb:57:44:fc:ac:f8:72:8b:ca:
99:7d:a2:c4:23:12:b3:55:6c:85:6e:0a:bd:ee:0c:a4:ba:3b:
b2:25:c8:ab:e7:0a:95:ca:2e:12:63:7c:0d:d4:dc:62:d4:4b:
e4:da:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:20 2025 by rpki-client