Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: bFTij2s1YYcrLeMylr0mbeLNqSugKpkq/ayTlJqk3fE=
Subject key identifier: 0F:11:56:24:82:15:B4:ED:63:95:A2:AB:B8:22:AC:5F:D2:9F:92:A9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4572A44E8932E5E53957CA549EC9F6D3EBE6151E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61138.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 24
185.90.60.0/22 maxlen: 24
185.99.132.0/22 maxlen: 24
185.121.160.0/22 maxlen: 24
185.121.168.0/22 maxlen: 24
185.121.168.0/24 maxlen: 24
185.121.176.0/22 maxlen: 24
185.147.32.0/22 maxlen: 24
185.195.236.0/22 maxlen: 24
185.195.239.0/24 maxlen: 24
185.214.172.0/22 maxlen: 24
185.236.212.0/22 maxlen: 24
2a06:1280::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a006::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:72:a4:4e:89:32:e5:e5:39:57:ca:54:9e:c9:f6:d3:eb:e6:15:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=0F1156248215B4ED6395A2ABB822AC5FD29F92A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:0c:c3:3f:ac:62:7b:19:50:3b:e8:c9:8e:
06:df:03:ce:e7:81:a6:dd:34:81:66:0b:9f:19:58:
6c:49:0c:35:cd:2d:22:22:48:b6:c0:41:56:67:19:
ed:f1:af:68:e5:e4:f5:5b:49:3e:ec:03:88:0c:11:
6d:0f:27:50:18:f9:8d:d4:ce:e2:cd:d7:a7:d0:ee:
21:0c:4d:a3:4a:4d:16:74:01:29:e0:95:cd:00:3d:
92:a3:6c:fb:05:0f:47:f5:dc:b3:1f:ac:5e:9a:53:
bf:b4:12:98:c5:6c:61:b6:d8:9a:15:d0:5b:e0:d5:
23:90:45:7f:d3:04:e4:09:d5:fc:19:6a:49:91:c2:
69:a6:9e:49:34:f1:f8:3d:10:4d:dd:5a:b9:26:c6:
6b:81:f8:b3:d0:b1:51:e4:b3:59:7e:ab:81:8e:60:
b6:1f:15:ac:f2:c5:44:c9:37:aa:97:10:3f:09:53:
c2:6b:b3:eb:ef:c0:82:5b:d7:be:e9:20:ec:42:03:
62:b4:fe:9a:f9:cf:c8:a1:87:93:54:8f:d0:16:6c:
00:e4:6e:09:81:50:d7:92:cd:8e:ff:ae:de:a7:f9:
82:69:64:66:92:98:00:20:71:87:27:ea:27:5d:15:
16:06:89:20:37:11:c6:52:6b:aa:69:09:28:b2:c7:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:56:24:82:15:B4:ED:63:95:A2:AB:B8:22:AC:5F:D2:9F:92:A9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
185.90.60.0/22
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/22
185.214.172.0/22
185.236.212.0/22
IPv6:
2a06:1280::/32
2a06:a004::/32
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
a1:12:7a:64:5a:d9:fb:ca:5f:7e:96:93:2a:65:d1:14:88:ef:
f4:2d:aa:66:9d:c0:fe:60:05:72:9d:6f:a1:01:ea:88:f9:42:
04:06:bf:f3:73:a9:2d:ec:9b:d5:fa:73:d5:9a:c9:65:51:22:
2d:a4:fe:2d:a0:35:7c:73:70:a0:2b:af:87:23:2a:b3:43:20:
46:b4:90:d4:49:7f:ae:3a:b5:f7:68:34:8f:2b:71:ee:bf:f5:
cc:4d:db:ff:79:7c:46:20:fb:a2:52:70:27:31:23:ca:60:eb:
da:0f:d1:17:d7:43:54:01:8a:02:6a:58:7e:cd:a9:2a:35:9e:
82:15:94:8b:a9:d4:04:29:b5:6a:bd:c9:09:83:ac:a1:f7:10:
82:10:50:c4:40:03:3c:f8:18:93:ba:ae:9e:13:c7:26:bc:9e:
c9:b8:6a:5a:13:99:64:1c:bf:2d:b2:48:f5:40:ff:ab:d4:f0:
54:62:f7:9a:b1:bb:2f:36:82:cc:db:d4:92:0c:2a:ee:7f:25:
0a:e6:30:dc:7c:e6:61:4e:b2:74:ad:81:b2:56:6b:d4:b9:d1:
10:91:9e:c8:44:8c:40:e2:7c:83:a4:6a:77:5e:a9:8c:63:ae:
76:b6:1b:9f:8b:5b:32:16:15:fe:87:55:bc:9f:fa:d9:64:42:
55:17:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net