Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233322e302f32342d3234203d3e20313333373532.roa
File: 32372e302e3233322e302f32342d3234203d3e20313333373532.roa (raw, json)
Hash identifier: nhjcEBFfwt+Uh98PhjF3Q14YqAe73FfJiflXjbkS0yQ=
Subject key identifier: 4A:FE:07:C3:02:8F:F9:0C:CC:24:B4:02:6B:E2:48:96:88:7A:B3:CE
Certificate issuer: /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial: 2F4DF886953FB530023A4E39C02C95DC738A241F
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233322e302f32342d3234203d3e20313333373532.roa
Signing time: Wed 21 Dec 2022 16:56:39 +0000
ROA not before: Wed 21 Dec 2022 16:51:39 +0000
ROA not after: Wed 20 Dec 2023 16:56:39 +0000
asID: 133752
IP address blocks: 27.0.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:4d:f8:86:95:3f:b5:30:02:3a:4e:39:c0:2c:95:dc:73:8a:24:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Validity
Not Before: Dec 21 16:51:39 2022 GMT
Not After : Dec 20 16:56:39 2023 GMT
Subject: CN=4AFE07C3028FF90CCC24B4026BE24896887AB3CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:c9:e4:86:4b:89:46:dc:2b:b8:65:31:f7:
78:bf:a5:d9:d1:00:11:cd:a5:61:1e:5d:e3:0f:6b:
b7:68:43:c5:0f:bf:01:56:fc:d3:b9:fc:9b:43:4c:
6d:8e:ea:b1:03:61:00:44:57:14:de:ad:e3:72:52:
59:2d:e6:ab:4a:61:12:9f:be:33:2a:9b:80:2c:e3:
34:bd:61:5f:4d:c0:af:a9:2c:b7:ce:92:a9:c5:89:
0a:81:cc:38:e4:86:03:fa:b3:0e:cc:f9:a3:ef:87:
fa:06:64:f3:29:bd:62:7f:95:80:30:ea:79:85:c4:
ee:57:0f:ed:40:a5:a8:9b:0d:12:62:df:57:68:ef:
c9:a5:10:c0:4e:a5:27:b5:da:60:89:53:97:26:91:
80:bb:6e:97:d0:63:6f:54:30:4a:10:e6:44:13:a7:
84:82:fa:46:4a:a8:a1:fe:b6:f6:d2:28:50:b9:77:
ce:21:66:e6:6a:a7:fb:c4:c6:31:68:2b:df:0a:c8:
a8:0e:e8:86:36:92:e9:91:aa:f9:d3:98:db:8e:fd:
d4:99:de:51:84:dd:6f:83:54:50:80:6a:93:d0:a4:
90:0f:4b:84:71:8a:74:db:42:fc:ca:ae:86:b7:66:
4d:a7:75:62:29:5e:8d:54:59:37:27:78:2f:3c:63:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:07:C3:02:8F:F9:0C:CC:24:B4:02:6B:E2:48:96:88:7A:B3:CE
X509v3 Authority Key Identifier:
keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233322e302f32342d3234203d3e20313333373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5e:02:6d:80:b6:35:83:14:c6:8f:4b:73:3a:63:7c:0d:96:
94:d1:be:11:f8:b3:da:25:bc:46:f9:1c:ee:31:1b:9a:dd:cf:
e9:00:d9:da:0a:9f:20:be:0f:88:d1:43:a2:8a:c5:96:3b:c3:
16:3f:b4:9b:5b:73:fa:c9:23:56:53:d0:95:49:0b:41:e7:56:
58:f4:8b:82:b8:b7:5b:98:0b:54:6a:07:cb:ee:57:16:ae:3d:
cd:73:88:f3:c9:71:e6:f1:16:1b:0c:a9:02:f5:1d:77:72:77:
1a:65:44:b9:1a:38:4a:c7:d9:9e:24:c9:93:78:1c:23:12:1b:
e2:30:a5:72:0a:dc:68:97:cd:c1:3e:d9:13:e2:52:bd:04:6b:
5f:96:78:8d:60:26:5d:c0:3b:cd:12:94:ea:e6:4c:15:c7:00:
85:06:ff:51:bf:17:67:25:2e:b0:16:dc:97:39:c3:7d:75:ca:
c2:60:9b:c9:e9:05:4c:85:f2:4b:52:da:46:5d:f7:c0:56:34:
0b:b8:ab:f7:b2:a8:38:c2:85:d3:0f:3f:69:8f:27:0c:ee:d4:
dc:27:77:30:8d:eb:06:53:0c:60:a3:20:15:7c:f0:e2:10:44:
35:ff:48:47:d8:73:35:ef:91:cf:27:39:17:ac:9a:19:72:ed:
28:85:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:53 2024 by rpki-client on console-ams.rpki-client.org