Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
File: 3134342e34382e38302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: L1ybdOqKFj2gtgFmsF44mkjzhrjdmpjtWlcw7uvlC3s=
Subject key identifier: 57:62:0F:F7:0B:5E:60:8F:10:A7:29:66:9F:E0:DA:55:5D:89:AA:D4
Certificate issuer: /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial: 5E858DA3765838CCFAD09B7D698FEBBE6759AF14
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
Signing time: Wed 21 Dec 2022 16:56:39 +0000
ROA not before: Wed 21 Dec 2022 16:51:39 +0000
ROA not after: Wed 20 Dec 2023 16:56:39 +0000
asID: 61138
IP address blocks: 144.48.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:85:8d:a3:76:58:38:cc:fa:d0:9b:7d:69:8f:eb:be:67:59:af:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Validity
Not Before: Dec 21 16:51:39 2022 GMT
Not After : Dec 20 16:56:39 2023 GMT
Subject: CN=57620FF70B5E608F10A729669FE0DA555D89AAD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:35:8a:4e:78:9e:aa:72:43:d7:83:6b:45:
5a:4c:6f:2c:d7:87:bd:09:89:3c:ae:c2:87:e1:e3:
3e:cd:e4:10:da:09:14:17:5f:87:25:91:bb:8a:0b:
6d:a1:ab:2d:27:cc:01:52:45:3e:a3:7e:73:c2:d1:
ac:ef:17:01:67:10:ff:f6:94:ac:ca:f9:50:95:48:
b3:9e:06:35:b8:f9:f7:41:03:d0:ad:3b:a1:7b:06:
b2:fa:ec:1c:3f:d9:78:34:fe:5f:4c:a5:9a:08:e4:
96:02:09:77:fd:bb:3f:b1:84:9f:32:b4:e4:cc:4e:
8c:6c:28:6d:aa:db:d2:6a:42:c6:33:a8:35:e9:36:
d7:c1:31:3a:72:e8:71:89:81:b4:c2:cd:37:7d:7f:
df:7c:43:9f:48:15:0f:d4:0d:20:bf:7e:37:5d:91:
55:8d:69:38:91:0c:66:cb:86:08:0b:15:8f:07:63:
90:81:40:0c:15:55:3b:33:60:12:ad:f0:13:28:1c:
ff:b7:eb:8a:d4:8b:4d:1a:41:5d:2a:1e:19:7f:1c:
4a:88:5b:04:ee:6f:dd:59:f5:4f:37:3a:03:a2:d1:
38:96:27:2a:0b:aa:18:0e:30:69:80:39:54:5d:d3:
e4:ba:76:f9:93:dc:6a:1e:8d:b0:33:43:e5:e3:04:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:62:0F:F7:0B:5E:60:8F:10:A7:29:66:9F:E0:DA:55:5D:89:AA:D4
X509v3 Authority Key Identifier:
keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:dc:ce:6a:fa:70:07:fb:e4:67:75:b4:29:59:ca:6a:71:16:
b7:5b:e6:72:e5:4a:3b:bc:f3:15:74:6a:2d:88:9c:17:d7:8e:
3c:fa:93:fa:72:91:09:06:de:92:68:65:cb:d3:95:cb:26:cf:
ce:84:90:a7:f2:43:10:54:4d:ec:93:76:a8:01:b5:b8:db:39:
df:1f:bb:40:25:20:1f:c0:28:6a:39:2a:26:4b:4b:e2:5e:76:
03:60:9d:dd:56:1f:43:eb:ef:d3:c1:3c:d2:a0:bd:80:b6:7f:
54:74:62:e6:34:2c:6a:6b:75:58:d7:cd:1d:53:06:6d:68:50:
24:23:70:f5:77:d9:0c:c2:d3:28:de:63:2f:c6:65:a6:9b:75:
38:92:5e:2c:59:50:3a:f8:a8:dc:b9:9f:70:f9:2b:af:a1:12:
b3:11:9f:53:b8:a0:57:b2:0e:05:1b:2e:bc:e8:7a:38:21:c5:
76:dc:31:3e:c2:4c:2f:ad:9c:86:29:e9:2c:ba:ef:1b:40:ef:
dc:6a:2c:23:c6:ab:5f:e4:5a:68:c4:6f:16:3c:2f:43:49:fc:
39:f5:f4:13:fd:2a:a7:d2:a4:99:42:8b:61:71:6a:fa:5f:25:
88:c9:80:aa:62:30:1a:fb:53:73:4e:a6:81:f9:3e:4e:16:a4:
fd:98:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org