Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233342e302f32342d3234203d3e20313439303230.roa
File: 32372e302e3233342e302f32342d3234203d3e20313439303230.roa (raw, json)
Hash identifier: 1j09SnGYnWXXNdy4iRGJAbhln1ZsG6g3hTgt0GfLGUE=
Subject key identifier: F7:E7:59:A6:11:76:AF:E4:E4:D2:6D:66:8E:88:CB:E3:D9:44:06:2E
Certificate issuer: /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial: 14E8044360E7F22B33DCEE2D504AC59FEAD4070A
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233342e302f32342d3234203d3e20313439303230.roa
Signing time: Wed 21 Dec 2022 16:56:38 +0000
ROA not before: Wed 21 Dec 2022 16:51:38 +0000
ROA not after: Wed 20 Dec 2023 16:56:38 +0000
asID: 149020
IP address blocks: 27.0.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e8:04:43:60:e7:f2:2b:33:dc:ee:2d:50:4a:c5:9f:ea:d4:07:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Validity
Not Before: Dec 21 16:51:38 2022 GMT
Not After : Dec 20 16:56:38 2023 GMT
Subject: CN=F7E759A61176AFE4E4D26D668E88CBE3D944062E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:c6:e0:66:60:1d:76:b7:0c:7d:96:aa:7c:
b8:d8:ab:d5:68:a7:75:92:c3:0e:a2:da:10:23:b9:
ba:c9:b3:29:4f:3f:56:7b:98:0c:05:7f:e2:4b:ac:
f2:98:e8:14:23:dc:f4:15:86:94:f1:bd:40:27:58:
99:02:9e:c1:73:aa:66:3d:b8:4b:1d:6c:30:d7:bb:
9a:01:e9:71:fe:02:78:20:db:41:db:28:3a:9c:af:
15:bd:a0:4e:88:2e:92:01:4e:17:85:1f:17:3b:4c:
72:94:34:3d:a6:5a:49:e5:4c:9f:e0:ab:7c:07:a2:
ce:29:7f:c5:0a:82:8a:a9:38:33:50:36:ff:89:73:
5b:da:07:8f:db:fd:4b:b7:bf:d9:4c:7b:27:35:f8:
05:d3:d2:86:4c:4c:0d:34:b5:1c:ae:e1:7a:f1:6d:
a0:6a:39:68:6e:8c:5c:be:36:0b:26:c3:28:7e:20:
89:5d:46:ba:63:8d:43:8d:bd:3a:73:4f:83:f5:2e:
c0:fa:31:8c:82:f2:85:e3:0e:9d:23:4e:c4:d4:47:
b3:60:f6:23:33:be:4d:d7:3e:44:43:a5:60:b0:81:
2d:da:ed:8d:30:67:d3:e9:de:16:25:f8:4a:c2:42:
32:3d:8c:a2:1a:22:87:f4:88:78:51:9d:ea:40:15:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:59:A6:11:76:AF:E4:E4:D2:6D:66:8E:88:CB:E3:D9:44:06:2E
X509v3 Authority Key Identifier:
keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233342e302f32342d3234203d3e20313439303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.234.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fd:90:10:0a:34:d1:8e:1a:96:fd:bd:f7:c3:38:b4:1f:f9:
57:e4:d7:50:d6:2f:c7:48:62:ee:37:78:a0:e1:6d:48:02:c6:
20:d2:16:f5:fd:b0:5a:7e:db:83:49:6d:ed:f4:be:05:4b:a7:
ba:c5:3e:17:c5:01:c2:fc:a1:0b:a8:6d:5b:ae:2d:8d:b6:10:
f8:7b:cf:04:c7:fb:98:c0:94:58:90:4a:60:0b:7b:d9:40:1c:
a8:0d:15:ec:85:34:92:21:27:b2:64:42:0d:8b:dd:16:02:29:
6d:51:42:79:50:a6:b3:34:98:70:f9:a3:29:a0:21:b1:40:de:
1e:1c:8e:81:d5:9f:9d:39:6a:5e:92:64:c4:68:5e:a3:48:f8:
30:04:be:97:e2:4c:aa:d0:e1:f8:2c:31:6b:a3:05:84:e8:c4:
1e:12:56:dc:76:de:63:74:e4:15:b6:c7:96:ba:41:83:f5:00:
5b:b9:f7:a0:42:b9:33:df:c8:f0:81:d6:1a:af:36:5c:04:98:
92:3a:bd:ae:2b:a1:98:7c:af:e2:82:27:41:40:cf:f5:f2:eb:
e0:12:ad:55:4a:5b:e5:35:b2:4f:46:67:5c:f9:d2:54:a8:78:
ef:c1:de:5e:c8:3c:2b:1d:3f:d8:ae:dc:7e:ca:14:53:c4:90:
fa:9b:e0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:53 2024 by rpki-client on console-ams.rpki-client.org