Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136302e302f32322d3234203d3e203631313338.roa
File: 3138352e3132312e3136302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: rfu36ZrknrIeEOAr66lyU+JUMVk27gDLd8F4Q7Kblnw=
Subject key identifier: 2A:FF:6F:50:17:E4:E4:FF:8D:94:EF:12:8E:B9:76:44:8C:FC:63:8C
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 23AAF4437695F0C767DAEC566F20214A1DC7891B
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136302e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:08:51 +0000
ROA not before: Fri 09 Dec 2022 05:03:51 +0000
ROA not after: Fri 08 Dec 2023 05:08:51 +0000
asID: 61138
IP address blocks: 185.121.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:aa:f4:43:76:95:f0:c7:67:da:ec:56:6f:20:21:4a:1d:c7:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:03:51 2022 GMT
Not After : Dec 8 05:08:51 2023 GMT
Subject: CN=2AFF6F5017E4E4FF8D94EF128EB976448CFC638C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:46:da:94:36:35:e8:de:6b:39:73:4c:4b:
b2:b1:e9:4e:d3:4e:d4:17:57:0d:31:4b:01:b9:86:
1e:eb:d1:17:3f:f7:90:93:07:28:e8:30:ac:a8:44:
ec:3e:56:98:e7:fd:7a:3b:f1:9a:95:b5:3e:40:58:
62:00:a1:1a:f0:4a:8b:54:56:03:18:7a:a8:79:ec:
c3:e1:65:e2:53:bd:64:0d:e5:85:ee:84:65:bc:88:
ce:c6:e8:d4:32:3c:ef:34:2b:29:d5:38:67:8f:01:
99:d3:1a:2f:2e:64:d8:9b:f0:98:20:d2:0a:67:4a:
86:c1:a5:81:59:09:76:45:7f:d3:85:e3:1e:7f:02:
18:10:75:6e:41:dc:c9:96:a9:0c:5e:16:19:43:ca:
f9:ec:ed:d0:5b:50:c2:59:ff:4a:0c:b4:21:38:6f:
87:1b:11:82:24:8c:f3:77:c1:5c:ec:4d:8a:df:de:
ff:05:21:02:21:3f:13:2b:2b:a0:1a:40:38:1d:60:
0b:1a:17:02:7a:ea:eb:e1:f5:27:88:0d:6c:21:35:
1b:36:06:9e:56:9d:39:f0:d0:47:08:3f:b0:5f:89:
93:d7:26:78:12:7d:10:9d:73:91:5b:a1:84:4e:26:
70:f9:41:91:0a:79:a7:9f:61:8b:e3:12:4c:75:1d:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:6F:50:17:E4:E4:FF:8D:94:EF:12:8E:B9:76:44:8C:FC:63:8C
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3136302e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:cf:23:67:18:5f:9e:4d:aa:95:56:8f:ce:5e:fa:b1:1d:59:
c6:15:32:14:19:08:58:e5:12:75:9c:52:63:db:11:84:ca:c4:
96:a3:ae:b1:49:6c:7a:78:f8:a3:be:d4:cc:69:09:77:c0:bb:
25:cc:9d:5d:20:e2:8e:e4:c0:4d:23:ce:9d:b8:94:3b:27:6f:
14:49:4d:a8:87:12:24:06:df:16:7e:fe:94:cf:a9:73:e5:fe:
74:9d:90:d6:04:15:fe:1c:ab:77:80:f5:52:0d:8c:b7:b8:c4:
78:8e:ad:9d:c3:3b:16:fe:2f:c9:05:d8:b6:a7:c1:d3:12:24:
b4:64:91:fd:94:68:2d:d7:3b:19:f0:69:5d:4b:8a:3e:be:3f:
b9:cf:cd:01:5e:3c:3f:ca:a9:90:13:5a:39:97:54:8c:75:d6:
55:f6:66:72:ad:68:c8:ec:d9:b6:62:d2:cd:4e:e9:16:63:9b:
e1:b6:fd:2a:50:19:7a:59:69:84:52:0b:ea:5e:7f:26:bd:95:
c5:0a:2a:62:c2:6a:c1:cb:f1:9e:d7:07:0e:c0:ed:c2:ea:d6:
a5:52:8b:d8:6e:90:d5:d0:ee:2c:3e:21:58:02:c7:55:6e:bf:
7d:ec:51:d2:d1:ac:2d:4e:46:2b:28:31:16:fe:d9:59:05:64:
90:4a:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:57 2023 by rpki-client on console.sobornost.net