Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137312e302f32342d3234203d3e20323033303631.roa
File: 3138352e3132312e3137312e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: 3/FHRy453swY/W/Sd+ZGau0ZHyN84AH3YUtVePPs4OE=
Subject key identifier: 3A:45:DA:B3:E2:03:30:66:8C:FD:66:EB:CA:4C:56:0A:4E:13:D6:45
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 7D3705151B3A9D25F22D59D97DB4A5F71248AE34
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137312e302f32342d3234203d3e20323033303631.roa
Signing time: Fri 09 Dec 2022 05:11:54 +0000
ROA not before: Fri 09 Dec 2022 05:06:54 +0000
ROA not after: Fri 08 Dec 2023 05:11:54 +0000
asID: 203061
IP address blocks: 185.121.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:37:05:15:1b:3a:9d:25:f2:2d:59:d9:7d:b4:a5:f7:12:48:ae:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:06:54 2022 GMT
Not After : Dec 8 05:11:54 2023 GMT
Subject: CN=3A45DAB3E20330668CFD66EBCA4C560A4E13D645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:93:b4:98:f8:70:8f:8d:06:ad:7d:65:8e:
47:14:ce:2c:c7:b7:84:69:5d:2f:f5:67:c5:81:f6:
fb:39:48:5a:93:a9:74:52:90:eb:56:f4:86:4f:58:
fe:f5:2f:b9:82:13:38:4e:35:b0:ef:13:92:f6:14:
9c:84:07:33:c4:e2:b7:70:1f:8a:98:a4:83:f1:28:
a0:77:fc:92:6a:17:dc:8e:d9:0b:47:6c:10:ba:2e:
c4:87:31:0a:78:98:fc:89:11:ed:e1:a6:e5:a8:ef:
0a:0a:7e:da:0e:0a:b3:08:1d:69:82:f5:36:c0:92:
c0:b5:54:31:21:ab:5c:66:7d:af:fc:84:2a:9a:6f:
73:3c:1d:11:21:61:0a:25:cf:2e:86:b6:49:6c:12:
2e:b5:a0:89:c8:b2:50:0c:3e:f9:85:01:54:c7:e6:
d7:4f:93:55:c5:c1:37:ac:1e:91:a5:f6:d7:a5:2a:
69:7e:fb:5e:11:01:1b:ee:d6:3b:ce:3d:df:1a:78:
de:db:4b:7e:6f:74:95:a0:f8:91:78:2e:06:01:5f:
4b:42:db:a1:14:8a:a6:d1:21:8b:91:f0:01:e0:c9:
89:7a:97:80:56:85:8d:a2:f2:08:63:03:33:a6:f2:
49:10:46:3c:b5:29:13:5f:31:c2:c1:d8:f9:0e:33:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:DA:B3:E2:03:30:66:8C:FD:66:EB:CA:4C:56:0A:4E:13:D6:45
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137312e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.171.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3c:3b:c9:c3:3e:b2:c3:71:4f:2b:f5:2b:62:64:07:05:72:
cf:74:09:25:51:a4:57:5a:9f:0a:d5:f8:48:c4:29:c7:c9:15:
18:6c:ee:a4:f1:99:79:e8:e1:a5:d5:d3:d3:52:89:d4:d5:87:
98:f3:53:42:65:be:49:6c:8b:72:3b:8d:d2:e2:87:df:86:56:
56:9c:db:37:c3:6d:7b:c5:1b:1f:74:07:59:4b:7b:82:9b:84:
12:78:c3:4d:a7:98:64:bc:94:c2:df:97:40:7f:d6:ed:63:55:
db:67:a7:4c:cd:cc:fd:d2:d5:bc:0c:ab:7f:a0:90:2e:b6:a5:
04:47:42:99:03:46:22:78:4a:49:7e:27:df:c7:b3:de:6f:d1:
a8:5d:23:a1:e9:44:e4:78:0d:b5:a9:e3:76:31:97:39:0f:4e:
e8:0a:8d:9f:55:2f:5c:27:70:b0:48:19:fd:2c:ea:ea:41:42:
30:95:a2:2b:61:13:63:df:2e:0c:07:a2:c6:1e:e7:ab:96:54:
ee:d0:fe:85:8a:c4:44:f8:28:88:39:0c:73:ec:d2:7c:bd:8d:
e8:a2:c7:c1:77:45:73:4f:6a:e7:0e:c3:af:0a:75:e8:3f:42:
c0:45:dd:b8:c7:7d:49:16:1d:a3:32:7d:50:5a:f9:ba:01:68:
87:5a:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:57 2023 by rpki-client on console.sobornost.net