Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38342e302f32322d3234203d3e203631313338.roa
File: 352e3235332e38342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: Gdg7cfgAzYzTthviWttFf/DMtZUYHO0jAStsOPP7nrw=
Subject key identifier: 04:19:10:11:B0:30:F5:CE:B5:BC:D9:47:15:F3:AE:A7:5B:DD:11:EC
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 15D99230757BB9AE93D0C88A7309821BD57A22F7
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38342e302f32322d3234203d3e203631313338.roa
Signing time: Fri 09 Dec 2022 05:05:59 +0000
ROA not before: Fri 09 Dec 2022 05:00:59 +0000
ROA not after: Fri 08 Dec 2023 05:05:59 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d9:92:30:75:7b:b9:ae:93:d0:c8:8a:73:09:82:1b:d5:7a:22:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 05:00:59 2022 GMT
Not After : Dec 8 05:05:59 2023 GMT
Subject: CN=04191011B030F5CEB5BCD94715F3AEA75BDD11EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:9a:3e:a7:fc:6f:c9:0b:32:e4:9e:d7:7c:
b4:ee:ac:37:9b:64:f7:d9:7b:fa:10:ed:28:f9:8b:
f4:9a:10:e7:0c:92:30:db:fe:b9:01:3f:ce:bc:c5:
4e:0a:9a:2c:b9:f5:62:cc:62:0b:3a:f1:ad:a1:4b:
0d:96:bf:6d:ba:91:0c:62:d4:9e:d8:69:31:80:e1:
52:3b:29:79:d8:21:b3:37:4a:aa:37:8a:bb:65:57:
cc:8b:68:ed:79:2f:86:2f:29:ae:b8:b1:4c:e8:46:
71:bb:6d:7e:ef:20:4f:b9:8e:89:e2:fc:11:e6:94:
3b:1d:ec:5c:0c:8f:ea:55:44:0d:dd:b6:90:d3:3a:
e7:b3:d8:49:a4:bf:6a:86:25:dc:45:63:9d:66:bd:
53:2b:b9:e0:f1:0d:9a:ec:b4:e9:ce:84:c5:db:c8:
8c:0b:eb:6f:d6:a1:61:2b:41:3c:af:ac:2e:73:03:
97:a8:45:94:90:27:e2:14:e6:ee:0b:4c:4e:35:f8:
d1:fb:92:7e:3f:e3:da:f7:52:df:bf:4a:a3:7b:f9:
5d:d1:84:74:fd:95:23:b9:16:4f:db:05:45:98:6b:
4b:ec:24:cb:af:28:7f:45:7d:ed:d1:0d:38:74:bf:
78:b9:ee:45:e5:33:1e:65:c5:fa:97:bf:1b:c7:f5:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:10:11:B0:30:F5:CE:B5:BC:D9:47:15:F3:AE:A7:5B:DD:11:EC
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/352e3235332e38342e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:75:11:88:8b:af:b5:ab:69:2b:f6:04:fd:35:3d:27:a7:18:
89:db:bb:7a:a5:ee:6d:21:79:f7:5c:65:50:5e:ea:c5:85:db:
f8:06:43:0c:ab:c2:92:da:8c:df:06:83:98:21:ac:cd:d5:8f:
2a:0e:a3:36:94:d2:63:21:15:41:f7:ae:92:49:12:bd:65:ac:
40:26:23:aa:a4:a1:ac:14:38:08:f2:64:b4:67:30:5e:e7:09:
75:ea:97:1e:2f:00:eb:93:59:fa:1a:2d:c9:0f:b1:bf:78:4b:
32:e6:bc:99:f0:55:11:19:24:bc:51:21:56:f3:98:96:c1:75:
c2:f4:cf:0e:57:b2:20:14:12:67:6f:ec:7b:e2:a1:d6:72:82:
5e:5f:61:d0:3b:f6:38:d3:56:56:14:d2:b9:7c:ac:6a:5d:1a:
88:81:e3:ad:98:ad:93:79:6b:cd:84:66:a2:52:dd:97:d8:0f:
bd:87:e2:1f:56:8c:ce:f3:7e:0a:22:b8:ff:c3:76:ef:d7:52:
ad:5d:20:b6:61:c9:10:e6:23:49:74:89:b5:f8:c9:3e:76:0c:
97:a5:b8:68:5e:11:74:3f:ee:e6:63:13:9d:69:6a:12:b0:37:
10:33:91:42:92:b5:d7:30:f4:48:ae:6c:08:84:71:89:14:ff:
16:02:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:57 2023 by rpki-client on console.sobornost.net