Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: 1W93dud4n7u0cqPMeYaGc3SQCCB27X9XUGtH/lNOMrI=
Subject key identifier: 51:09:06:93:CD:54:D5:18:A1:6B:EA:07:DC:BD:2A:02:95:B0:29:BA
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3F5A2691C13F4D3B1A196E5271868C1CC526C184
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS8100.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 8100
IP address blocks: 185.121.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:5a:26:91:c1:3f:4d:3b:1a:19:6e:52:71:86:8c:1c:c5:26:c1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=51090693CD54D518A16BEA07DCBD2A0295B029BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:ee:24:25:e2:eb:82:54:68:d2:3a:aa:45:
c9:d3:e2:f1:d4:b1:d4:f3:45:60:d7:5d:32:b0:39:
cb:25:06:0c:15:89:0e:0a:96:a7:8f:44:95:16:f8:
04:e3:c9:3a:e5:ab:13:1b:93:5e:9f:72:25:a1:14:
09:36:62:f2:c2:75:8a:b5:a3:0b:ba:10:f0:47:54:
4c:9f:f1:4c:7d:79:da:3d:b4:2a:5c:21:ee:a6:66:
57:44:3b:03:5e:81:77:23:ca:f7:11:8c:72:f2:03:
6a:98:9c:be:46:3c:bc:d3:a3:7c:28:a3:5d:cf:13:
ee:f7:2b:33:a3:90:8c:14:ad:19:dc:52:ef:aa:bf:
fb:b7:23:b3:1f:bd:86:69:c8:be:f0:e7:a7:db:90:
bb:29:e3:cf:c8:92:a3:31:96:2b:06:54:f9:8f:72:
39:57:ac:cd:16:79:58:10:9d:81:2b:3f:dc:f6:06:
ff:73:b1:37:16:b4:5b:3e:db:99:a6:0a:d9:1e:82:
c2:14:fa:9d:cf:d1:ba:97:3f:16:50:45:7f:c4:a4:
10:98:ba:82:55:df:09:26:5b:d5:62:03:1d:30:7f:
d0:d9:e1:8d:39:56:fd:4a:bf:10:99:8e:23:48:ac:
b7:27:28:99:0f:c9:c3:92:fb:fb:0c:a6:e9:48:fd:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:06:93:CD:54:D5:18:A1:6B:EA:07:DC:BD:2A:02:95:B0:29:BA
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c9:2c:53:71:b7:ef:05:f3:1e:d4:b2:9c:dd:d0:a8:95:34:
ae:ac:77:3b:ae:fa:c9:34:b5:7b:ed:f9:d3:32:0a:6d:24:76:
28:1d:33:5a:78:9e:9c:79:94:1c:a8:a4:c4:34:ea:98:e4:6f:
57:a4:9d:61:10:ab:50:26:63:07:87:ed:cb:0e:0d:5e:67:73:
6a:fc:db:e3:d6:c8:b8:16:2f:85:00:cb:c4:58:71:6a:af:46:
ac:8a:0a:ec:40:64:7d:e2:8e:5f:9d:54:b4:84:d2:42:6f:56:
f1:4f:0f:39:e1:19:a6:d6:9d:f7:8d:83:ef:84:0c:4d:0f:a5:
28:be:3f:15:89:96:57:15:6c:3f:23:e3:a6:5b:a0:b0:f9:1d:
e6:88:6d:4b:26:56:4d:98:5a:ac:f5:cb:da:e0:3e:0d:08:c1:
04:d1:69:0a:ad:35:c5:eb:dc:ed:98:93:c2:24:25:d5:5d:1c:
9c:0b:f1:02:3b:31:46:8a:4b:1c:93:d4:77:91:4e:85:30:d8:
51:d6:61:50:15:b8:40:09:67:19:77:cd:42:1c:6f:e7:03:39:
5b:4e:31:fe:82:54:24:1a:b6:23:d8:23:f7:1c:c9:ce:00:15:
4a:77:bd:72:cd:33:2b:96:69:b2:59:94:15:80:54:b7:c8:ee:
2c:e5:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:20 2025 by rpki-client