Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: L2BBTzl5sixZ9f7f+cpX8aU0hpm520YpwimrYxuKwQY=
Subject key identifier: 3E:B2:B1:84:62:CD:B9:7C:2B:36:52:9A:69:44:EA:0C:DD:6D:FC:2D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6EC1BBB26DE7B6EFEF04C1F00BC0B20E2975F105
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS9009.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 9009
IP address blocks: 185.90.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c1:bb:b2:6d:e7:b6:ef:ef:04:c1:f0:0b:c0:b2:0e:29:75:f1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=3EB2B18462CDB97C2B36529A6944EA0CDD6DFC2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:a1:50:05:fa:de:fb:af:13:2e:35:ae:72:
9f:ae:fc:5c:76:3f:5a:fb:dc:54:23:4d:5b:d3:96:
49:10:a4:1b:0b:7b:2d:3b:9c:ea:06:11:ce:5e:ae:
29:0f:75:cf:cb:6a:8d:d6:e1:ee:3a:ec:92:9f:0e:
46:8c:f4:b8:9f:46:f4:5d:37:f4:72:fb:74:14:5a:
8a:80:75:26:37:95:d2:fb:9e:dd:ef:16:a2:27:ce:
bb:68:a5:a1:26:68:d4:3e:36:b1:7a:4a:f6:95:f4:
37:3e:0b:f4:a0:08:bf:dd:88:01:f4:4d:8f:47:e4:
6d:a4:7a:fa:42:3d:8c:f0:7a:d4:8c:7f:78:72:d2:
b1:19:2c:55:f8:61:ee:8a:ba:98:d5:dd:5d:14:6b:
63:84:96:79:1a:3a:84:e7:0a:98:aa:ec:ed:2f:65:
c1:4b:f6:f6:d7:fe:74:cd:79:6f:54:f9:b6:3f:9e:
35:19:28:ee:49:8a:0e:e9:c6:ea:ab:84:0f:87:e1:
dd:cb:91:45:3f:10:13:17:05:9a:82:f3:02:24:42:
b1:57:d5:f4:c3:7c:12:d4:e0:32:71:07:37:fb:80:
75:4b:bf:e2:e9:0a:d5:6a:35:9c:9d:71:34:a8:9c:
31:cb:da:95:b2:fe:f2:ec:93:e8:2c:da:e3:c5:b2:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:B1:84:62:CD:B9:7C:2B:36:52:9A:69:44:EA:0C:DD:6D:FC:2D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f9:86:8a:56:4b:96:9c:61:03:e2:d9:d9:53:c6:b6:87:52:
84:6f:b5:24:32:7c:ac:3f:86:eb:b1:ea:0f:99:ed:a7:7d:2c:
8e:c2:05:d3:32:ca:92:66:49:1a:50:60:ca:32:6d:9f:ab:06:
9a:ef:55:94:cf:92:ea:c8:6d:f0:28:5b:bb:4c:1e:27:1f:72:
05:b6:ed:eb:40:23:1a:d6:62:e4:4b:59:a6:a1:3e:81:65:b5:
11:9a:24:1f:08:d0:1c:40:e7:3b:18:0d:c3:2f:ea:f4:1f:0f:
93:a5:b6:ca:98:34:92:24:f7:c9:91:84:a2:82:0e:25:f8:91:
5b:fb:91:5d:f2:c6:23:69:7b:28:e9:6e:5d:b0:26:6b:ba:fd:
ae:26:3a:5e:6b:5e:11:10:c1:74:c3:81:16:b9:e3:e8:da:92:
83:14:f0:0f:5c:0b:36:f5:d4:b1:35:23:c9:c5:fa:92:60:0d:
44:17:ee:37:28:e6:e4:f1:ca:b2:ac:e9:b1:ea:ff:a0:7f:4f:
4a:6d:47:7f:01:bd:7e:09:7a:0b:1e:70:32:78:84:63:05:4d:
10:55:1d:af:94:bd:3c:1d:3d:b6:38:ef:ae:38:d8:f8:86:55:
7b:ef:2e:6d:c2:7d:5a:75:be:71:0c:39:d2:f0:85:f2:c6:cb:
14:25:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:43 2025 by rpki-client