Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233362e302f32322d3234203d3e203631313338.roa
File: 3138352e3139352e3233362e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: cv+X2ctT8gFoOAKcuBbfUSP6PBLXC3B+JSqZMfyLnd8=
Subject key identifier: 66:C9:2C:D0:61:94:95:B1:6A:99:47:D9:EB:56:B2:E1:80:28:58:2B
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 12A95AF2C2145896F49B6CB93798E67D3E3B906B
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233362e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:10:18 +0000
ROA not before: Fri 09 Dec 2022 05:05:18 +0000
ROA not after: Fri 08 Dec 2023 05:10:18 +0000
asID: 61138
IP address blocks: 185.195.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a9:5a:f2:c2:14:58:96:f4:9b:6c:b9:37:98:e6:7d:3e:3b:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:05:18 2022 GMT
Not After : Dec 8 05:10:18 2023 GMT
Subject: CN=66C92CD0619495B16A9947D9EB56B2E18028582B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:57:f0:14:5b:5e:46:a1:3b:5a:db:a1:fa:
84:f7:fa:bb:46:bd:b4:ac:ac:63:cd:cc:23:65:6f:
e4:02:0f:e3:b1:0c:28:97:f4:f5:cc:60:d6:30:33:
ca:22:d0:7a:d5:9a:3b:b0:1c:6b:ee:88:f1:19:e5:
68:90:4f:e7:6d:f6:04:2e:f8:15:87:4e:27:b6:72:
9f:16:31:0a:8f:a5:df:fc:74:36:62:93:91:33:46:
59:41:c1:31:5c:9d:bd:a9:b9:84:95:90:cd:7e:f3:
e0:d6:c4:85:b5:52:59:2f:a4:fe:ed:45:61:cd:0c:
88:ed:8c:86:da:bd:99:74:e9:53:f5:d0:de:7d:88:
01:56:7f:26:59:4a:04:7a:6d:ba:88:02:3f:13:f3:
5d:17:19:f4:f5:c7:f8:9b:a8:db:10:6a:54:aa:58:
78:3b:bf:72:a1:52:e7:7a:50:22:66:b1:e9:e8:44:
21:14:8d:01:f3:6a:d5:dc:7d:18:b6:f2:6f:c4:e0:
5e:53:57:31:30:99:ee:66:a6:ec:b2:da:6a:f8:9d:
54:f6:08:a0:07:af:de:d3:b9:f9:7f:d6:2c:a3:cb:
8e:ca:2c:5e:52:64:26:5b:6b:94:ba:9b:2d:37:fe:
14:20:a5:b4:45:6e:fa:43:2f:ac:26:5e:86:45:e2:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:2C:D0:61:94:95:B1:6A:99:47:D9:EB:56:B2:E1:80:28:58:2B
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3139352e3233362e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.236.0/22
Signature Algorithm: sha256WithRSAEncryption
72:7b:a6:61:3a:a2:8c:e9:31:0e:74:47:fd:64:54:8c:e4:a5:
b9:95:6f:15:5e:f2:41:7d:2b:4a:ef:ad:a3:35:b0:ce:2f:b6:
15:80:4e:b3:d9:bc:87:d0:b1:9b:f8:97:53:bf:27:d2:37:6e:
8d:68:8b:0a:77:f5:df:f3:a2:88:ce:1a:43:b8:f9:c3:07:e0:
f6:3e:4f:bc:36:5e:a1:e5:26:0c:86:2c:ad:38:d5:3b:a5:20:
e1:8d:3e:74:29:7d:0f:6d:11:e7:78:98:43:0c:c3:58:6f:3e:
b8:04:60:c9:7b:32:dd:dd:49:a3:1d:41:8c:38:25:ff:ed:80:
91:14:45:10:fe:6c:54:dc:e1:02:3e:7c:67:e7:6a:cd:55:c7:
d7:4f:84:7e:e6:44:45:0c:6d:2b:8e:e8:3a:5a:d2:1b:44:95:
3c:a3:bb:77:68:b9:c6:3a:4c:4d:b2:0c:76:c9:55:8d:4f:c2:
f7:0b:7d:06:2b:15:ba:24:5d:b9:ef:f4:6d:a7:a1:c9:2f:20:
8c:3f:30:b3:16:ec:69:e3:2b:ae:5c:48:f0:4b:9e:d5:3f:37:
a9:c7:64:49:97:44:4d:bc:26:e9:84:13:88:83:23:20:89:f2:
cb:19:c8:95:7a:f1:5f:d3:4d:69:8f:a7:0f:a4:8a:62:24:94:
dd:7b:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:57 2023 by rpki-client on console.sobornost.net