Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233352e302f32342d3234203d3e20313338393935.roa
File: 32372e302e3233352e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: 6DsbHr2vN/545WNR3c5uDnSfmSCfbMG+K26v2GNn7rU=
Subject key identifier: 8C:B0:C8:F9:1B:86:70:2F:58:C6:96:42:7B:AB:53:C9:3C:F8:2F:57
Certificate issuer: /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial: 263429079153D828E2A599272670667239B11C99
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233352e302f32342d3234203d3e20313338393935.roa
Signing time: Wed 21 Dec 2022 16:56:39 +0000
ROA not before: Wed 21 Dec 2022 16:51:39 +0000
ROA not after: Wed 20 Dec 2023 16:56:39 +0000
asID: 138995
IP address blocks: 27.0.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:34:29:07:91:53:d8:28:e2:a5:99:27:26:70:66:72:39:b1:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Validity
Not Before: Dec 21 16:51:39 2022 GMT
Not After : Dec 20 16:56:39 2023 GMT
Subject: CN=8CB0C8F91B86702F58C696427BAB53C93CF82F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:3f:14:70:09:ed:ef:5c:63:7b:cd:65:8c:
55:35:72:52:03:78:39:b8:af:7f:89:d1:e8:45:98:
16:c6:f7:7a:21:5e:74:e0:75:44:ef:80:3e:94:c0:
a6:0e:fe:6a:5b:f5:6a:ab:b2:ab:79:24:87:e1:97:
ba:40:f5:17:67:12:33:99:01:98:1a:32:ff:cb:49:
23:1d:ca:bd:5e:1a:b6:96:5a:4e:c6:e4:03:07:38:
1c:c8:d9:34:f4:5a:c7:e1:34:e8:81:50:4c:65:19:
9a:54:c7:f1:af:2d:96:2c:c4:c8:8f:e1:38:70:0f:
4a:ba:98:67:bf:cc:c2:4b:d1:ac:a1:a3:31:65:c2:
04:e8:7e:5c:e0:e7:69:2b:fe:c0:35:89:0e:fd:09:
ee:e0:e4:a8:b9:20:1e:da:c7:da:77:72:22:2a:78:
84:6d:da:6b:b6:a9:2d:67:14:ef:fc:ed:05:0d:79:
7f:98:ad:f9:0f:e9:6a:67:0b:83:57:f9:70:8d:fc:
43:a3:f4:aa:c5:9d:ce:82:09:72:83:4c:07:d7:df:
f9:68:2b:f8:87:29:cf:1d:0e:cf:f6:19:09:ee:94:
a8:79:66:5d:ba:eb:51:a8:a6:67:3a:c9:e1:b6:b4:
2e:45:94:cc:fb:ef:56:04:c4:9c:fb:e3:db:4d:8a:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:C8:F9:1B:86:70:2F:58:C6:96:42:7B:AB:53:C9:3C:F8:2F:57
X509v3 Authority Key Identifier:
keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233352e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.235.0/24
Signature Algorithm: sha256WithRSAEncryption
44:29:a8:15:55:a3:99:e7:49:4c:df:70:73:95:62:4d:af:70:
b4:9e:14:bc:8b:d2:b3:2a:b9:e3:e6:f2:6b:d6:80:84:d1:72:
46:f6:eb:7e:ed:8c:76:34:74:9e:ac:1c:69:9d:84:89:5b:70:
d6:1d:45:e1:67:93:34:ea:a8:c7:26:21:ea:55:4d:8f:fb:2c:
04:c8:76:52:4b:d8:88:8d:cd:cf:c7:3b:ee:db:5f:6e:6c:78:
70:94:58:b7:d9:34:e7:26:b2:69:3d:b2:6f:9a:0c:58:1e:77:
61:34:26:72:dc:60:f7:02:32:f9:52:7c:64:11:f3:c9:c0:b6:
8d:09:38:46:65:9b:81:62:3d:88:2e:b7:0b:7e:75:d7:ea:63:
f9:3e:cb:48:f8:e7:d3:67:00:24:94:db:d9:ed:41:65:32:c6:
ef:ae:25:2c:21:2a:1b:0a:f7:37:8c:21:4c:63:a8:60:3b:6e:
c5:20:d7:08:32:6a:bd:7f:84:30:d0:87:df:db:ba:4c:e8:b8:
17:de:c2:d6:07:92:0d:f3:2f:a9:26:27:8a:f8:a1:1d:9d:cd:
17:b3:2f:7e:e7:d3:1a:ae:e4:d5:c0:97:85:c1:b6:f0:f6:fd:
c7:94:47:0f:ce:ab:e2:1c:28:e3:35:25:35:21:03:16:86:4f:
77:20:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:53 2024 by rpki-client on console-ams.rpki-client.org