Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33322e302f32322d3234203d3e203631313338.roa
File: 3138352e3134372e33322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: 9woHk2HgDSP9WvsuyD24YzwXWlqgh1G1xd+AoPEiaCo=
Subject key identifier: B9:99:44:1A:D2:1B:DA:3A:67:9E:6C:4E:7E:02:0A:8E:65:BC:C7:04
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 686414EC122BD9D786F2D72D214094440EADD120
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33322e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:09:54 +0000
ROA not before: Fri 09 Dec 2022 05:04:54 +0000
ROA not after: Fri 08 Dec 2023 05:09:54 +0000
asID: 61138
IP address blocks: 185.147.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:64:14:ec:12:2b:d9:d7:86:f2:d7:2d:21:40:94:44:0e:ad:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:04:54 2022 GMT
Not After : Dec 8 05:09:54 2023 GMT
Subject: CN=B999441AD21BDA3A679E6C4E7E020A8E65BCC704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8b:08:f5:90:8a:9c:c8:52:8c:eb:25:37:82:
27:20:9f:51:4e:bb:39:33:dc:62:49:ec:7f:24:24:
b1:6a:5f:a9:a7:5a:f2:ca:8f:04:5e:b5:ca:13:e7:
6c:cf:40:77:68:f9:c4:b1:3f:ce:a7:cd:83:b9:8b:
d4:e3:d0:b2:d0:75:48:4d:e2:61:50:63:19:15:54:
a0:98:18:a2:5b:71:29:d9:b5:85:0f:f3:0a:74:e5:
a1:0a:8d:40:54:3d:0b:ff:5f:8e:cd:2d:5a:af:a5:
30:0a:6f:70:a9:5b:18:20:a4:2f:1a:fd:2f:9a:bb:
20:58:49:0e:5d:48:20:c6:27:37:fa:10:2e:e8:ec:
cc:84:b0:15:f9:41:cf:da:2e:9b:d9:04:09:86:fb:
86:24:f4:32:b9:74:7f:70:dd:8d:39:a8:cd:4f:96:
c4:39:a1:7b:0b:47:db:20:c9:3e:c3:ef:e5:68:cf:
b4:9d:ae:74:b1:19:a9:29:3a:60:52:b9:18:0e:2d:
e6:7b:db:8b:2c:80:c3:d9:ff:6c:63:fd:d3:c2:91:
c3:1f:bd:ec:e5:1f:52:cb:e1:99:5f:c6:2c:dc:1f:
89:42:27:2b:b9:c5:7d:48:8a:5b:ae:6a:ad:c4:87:
f3:cf:de:51:fb:b0:9b:bd:ce:9a:c4:8a:2e:5b:00:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:44:1A:D2:1B:DA:3A:67:9E:6C:4E:7E:02:0A:8E:65:BC:C7:04
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33322e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:90:cd:b9:ae:dd:e7:f2:0a:2b:8d:0e:2b:9a:9b:66:d1:15:
42:4b:ba:c7:9d:7c:73:01:0c:7f:35:a3:46:25:2e:ea:8d:45:
45:82:49:b0:4c:b8:5c:57:99:81:77:72:19:49:a3:39:ea:30:
db:e2:13:42:e2:81:37:9a:d0:9f:cc:e1:7d:ba:91:07:6d:c7:
76:0a:06:1f:6a:fb:ad:d6:9d:ab:12:fe:f7:4e:ba:76:cd:75:
ba:7c:a5:44:37:d2:a0:2e:04:cd:03:36:6b:bf:4e:22:ad:e4:
06:38:d9:44:45:52:f0:43:9b:72:20:88:3a:ec:9b:6c:f6:26:
0e:7d:29:72:fb:0d:47:15:4a:f7:01:d6:6d:b7:4c:67:38:22:
89:23:95:4a:c5:9a:9c:65:96:05:81:78:bf:ba:3d:68:4b:d1:
87:bf:ca:79:44:69:7d:10:54:a9:d9:20:f5:54:9b:87:3c:e6:
84:76:66:42:48:4d:fd:79:d6:79:7b:50:c1:64:c7:80:10:66:
29:5b:5d:2b:8a:04:76:35:6e:6d:a1:39:28:89:02:eb:01:c2:
ec:45:86:12:b5:00:a3:09:f9:17:69:5a:2c:e6:87:91:a0:e2:
c0:e4:f8:f3:fe:34:5b:87:a2:ae:2e:25:38:4d:46:97:42:23:
80:ed:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:57 2023 by rpki-client on console.sobornost.net