Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233332e302f32342d3234203d3e20323036383034.roa
File: 32372e302e3233332e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: VmRioZZTodkNtNMfenqTbwfAofqwTEBXeFWCslQwowc=
Subject key identifier: B4:BA:82:F5:51:1A:D1:10:26:51:9D:37:18:90:B9:F3:D7:20:95:FA
Certificate issuer: /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial: 64F9BB7A40A54061FF35223252634CB039056ADF
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233332e302f32342d3234203d3e20323036383034.roa
Signing time: Wed 21 Dec 2022 16:56:38 +0000
ROA not before: Wed 21 Dec 2022 16:51:38 +0000
ROA not after: Wed 20 Dec 2023 16:56:38 +0000
asID: 206804
IP address blocks: 27.0.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f9:bb:7a:40:a5:40:61:ff:35:22:32:52:63:4c:b0:39:05:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Validity
Not Before: Dec 21 16:51:38 2022 GMT
Not After : Dec 20 16:56:38 2023 GMT
Subject: CN=B4BA82F5511AD11026519D371890B9F3D72095FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:8b:b4:1a:30:e5:ed:31:6a:f1:7e:2a:32:
46:92:aa:e4:06:5e:16:a7:0c:71:fb:1b:b1:e6:30:
89:a1:72:3d:78:1b:90:f6:64:75:b7:d6:38:4b:9b:
db:c7:13:42:68:dd:75:da:7a:a4:ca:d9:3e:57:f6:
6f:93:cb:c3:65:68:c2:0b:1c:ce:3c:c9:18:14:5d:
52:74:a8:16:7a:cc:8b:ee:4e:3e:d9:49:db:90:9e:
8a:12:63:df:9f:54:18:30:72:78:99:c8:a7:41:b8:
f8:3f:cb:7a:b9:e3:de:46:89:38:95:92:a2:ee:92:
68:27:83:6d:d0:0d:5f:36:7b:e5:f2:e3:c6:81:79:
5d:5e:b1:42:e1:e9:d8:44:e8:ae:35:90:53:09:50:
70:db:d1:38:1a:41:cb:fb:3a:2e:6d:51:d6:f9:9c:
ed:e6:c2:a8:88:8b:e4:1f:f9:e9:ec:81:22:2a:5d:
80:c5:58:6e:03:c2:9c:78:5b:a6:81:a0:6f:b9:f6:
fc:77:a0:c0:a6:d9:13:58:a4:cb:3e:99:50:c5:65:
cd:fe:e9:ed:1b:af:b4:ed:33:3b:77:5d:61:fe:83:
e1:44:61:11:28:fc:05:b5:58:ff:a6:9c:aa:16:ff:
0e:96:88:ac:43:f1:14:1f:9a:56:ea:69:ab:90:1a:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:82:F5:51:1A:D1:10:26:51:9D:37:18:90:B9:F3:D7:20:95:FA
X509v3 Authority Key Identifier:
keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233332e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.233.0/24
Signature Algorithm: sha256WithRSAEncryption
21:fc:12:72:68:8c:b0:55:ce:5a:8e:2f:c7:c5:83:bf:c2:58:
4c:a4:a0:34:82:54:66:31:7b:4b:36:e2:d8:a8:bd:ac:1d:88:
7b:c4:83:3f:5f:c1:95:e6:2f:af:e9:37:8b:14:4f:4d:6e:ce:
7e:eb:ff:d2:eb:db:72:8a:41:c1:b3:a4:23:8c:03:fe:cf:55:
da:1c:4d:5d:25:e8:19:9c:90:42:b3:95:5c:21:e4:7b:6e:90:
a9:c0:5f:17:0c:d8:94:d4:ce:10:6e:bc:34:f4:f7:57:0f:c0:
db:78:2c:e7:ca:59:cf:81:8b:e4:e5:16:1b:25:25:cf:bd:98:
d3:68:fd:74:b0:e9:31:9a:27:d2:0a:68:ca:66:2e:73:26:7d:
77:59:2c:47:ec:02:c5:af:9a:d3:4b:22:94:c0:57:9d:65:29:
21:bd:ad:19:3a:bb:6d:9c:07:66:b9:cc:4d:4c:08:2a:43:1c:
b8:58:54:4c:1b:43:3c:f5:73:d2:2f:b3:cd:9a:9a:12:61:a2:
bf:97:de:0b:45:df:b3:3c:d1:0c:cd:3e:80:47:02:03:78:b3:
61:a1:5e:58:ab:27:6d:85:a8:ac:b4:a7:73:f4:25:97:9b:ec:
df:f1:a8:62:44:2c:ed:f5:69:33:88:86:aa:5c:db:7c:55:8b:
17:cb:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org