Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa
File: 3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier: ctDSLziSx1aQZz9Zz1WtFrnN2zXsSKd0Yynsp7uklLI=
Subject key identifier: 3A:6F:F1:4A:4A:90:1C:85:8B:1A:3E:22:A1:4B:BE:69:0E:94:8A:7A
Certificate issuer: /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial: 1C50DD31DB04210D61F86C35F0955A0E80DB8BDE
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa
Signing time: Wed 21 Dec 2022 16:56:39 +0000
ROA not before: Wed 21 Dec 2022 16:51:39 +0000
ROA not after: Wed 20 Dec 2023 16:56:39 +0000
asID: 133448
IP address blocks: 103.68.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:50:dd:31:db:04:21:0d:61:f8:6c:35:f0:95:5a:0e:80:db:8b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Validity
Not Before: Dec 21 16:51:39 2022 GMT
Not After : Dec 20 16:56:39 2023 GMT
Subject: CN=3A6FF14A4A901C858B1A3E22A14BBE690E948A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:48:77:11:fa:ef:5e:d8:65:54:1d:0c:b0:
0a:ad:f0:b1:d7:5f:7b:b4:fd:58:43:fd:ba:bc:39:
44:a2:ac:e1:25:bd:90:b1:14:d8:a8:f0:6b:64:88:
d2:db:bb:a1:ee:e5:b8:e7:27:d9:5d:c7:ff:54:eb:
50:ac:f9:18:fa:35:07:53:84:d6:d3:07:30:90:d2:
c4:18:a6:18:c8:47:a2:e8:00:10:28:70:37:37:28:
4e:1e:72:8e:5e:ea:ad:b1:a3:36:2b:93:15:bc:6f:
9a:10:39:c4:c8:1b:a2:b0:03:9d:93:84:32:71:60:
1a:1b:76:90:ad:06:61:40:71:d0:d8:b5:3b:82:21:
82:7c:54:c9:81:3b:15:40:a4:76:cb:85:5a:0d:90:
8e:74:d7:6a:01:b6:b0:e0:ec:55:23:6d:43:91:bd:
8a:4d:2a:d6:0d:10:83:3a:dd:16:ba:3d:e0:3e:31:
26:38:16:93:05:ec:2d:cb:19:b7:46:13:69:78:fc:
07:e3:36:63:00:68:e4:8a:64:11:75:19:e2:a0:6f:
eb:6f:38:ab:64:d9:c9:ef:20:77:e8:1f:0a:0d:fc:
14:18:62:50:67:31:c3:7d:12:82:b7:97:ef:2b:24:
69:6c:5b:56:ca:ac:ff:d4:57:a5:75:3f:cb:5a:41:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:F1:4A:4A:90:1C:85:8B:1A:3E:22:A1:4B:BE:69:0E:94:8A:7A
X509v3 Authority Key Identifier:
keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2c:53:32:84:6c:34:2e:61:a3:9b:bd:da:39:4f:f5:b2:59:
17:89:fb:41:b1:8e:ad:9c:0a:14:dc:59:c9:69:df:c4:06:86:
53:7a:56:2b:3d:48:f1:56:85:da:c9:a7:96:60:8a:3c:93:1e:
71:28:35:66:b4:f4:19:e3:8a:6d:16:05:b4:8e:b2:42:e8:92:
d2:67:84:85:88:ae:b7:35:1a:4b:e9:ea:00:9a:fc:c3:9f:ac:
b7:a2:48:41:bb:11:21:00:76:8f:c6:f9:0e:cc:10:67:26:2f:
37:4c:df:71:9e:52:92:68:17:c9:45:cd:6c:de:95:b0:70:54:
0f:cf:ec:3d:3b:16:da:89:a7:0b:fd:ed:b5:ee:ec:03:ce:1a:
4b:d2:38:7d:5e:89:4e:48:31:52:a0:e6:51:75:49:d4:40:c7:
d4:38:a6:9f:5e:85:9e:14:f2:03:ad:6c:33:cf:5c:77:07:93:
06:ea:0f:f9:2e:24:12:cd:5a:c4:98:98:8e:db:94:79:9d:7f:
8c:44:2d:c8:1a:21:c6:75:e6:39:c8:91:e0:62:4a:c4:2b:9c:
3e:eb:0b:56:4a:52:c6:51:a7:d7:5a:d6:93:3f:cc:c2:32:eb:
59:c0:4b:ec:b8:01:33:ca:22:4a:72:a0:14:6a:9a:6a:98:d4:
89:70:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:53 2024 by rpki-client on console-ams.rpki-client.org