Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323431303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323431303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: 5zPl1ve2erYLBER98yPhoFxWb7abGXKaHl5OJ5OnEFM=
Subject key identifier: 84:7F:AD:DB:95:C6:9B:50:F9:C6:95:7C:11:4F:0E:6D:32:E8:CF:62
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 7D8A68BD25329D32EC78A5BF2D2521B8C5A1AEB6
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323431303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Wed 05 Jul 2023 00:19:08 +0000
ROA not before: Wed 05 Jul 2023 00:14:08 +0000
ROA not after: Wed 03 Jul 2024 00:19:08 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2410::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8a:68:bd:25:32:9d:32:ec:78:a5:bf:2d:25:21:b8:c5:a1:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Jul 5 00:14:08 2023 GMT
Not After : Jul 3 00:19:08 2024 GMT
Subject: CN=847FADDB95C69B50F9C6957C114F0E6D32E8CF62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:b4:63:6e:46:c3:29:35:8d:6a:fd:dd:09:
aa:50:4c:e1:45:23:0f:61:ce:c7:d1:8e:fe:18:34:
9c:72:f2:61:7a:9b:7b:72:1b:18:b0:37:10:47:d3:
96:a6:f1:c1:4e:2d:1c:e4:2c:c3:3e:9f:28:62:18:
e8:4a:52:00:bd:3b:1e:b7:60:51:5a:6f:90:08:11:
02:51:e8:ff:6b:4e:a6:15:4e:69:12:9a:f1:ef:1b:
b1:c3:79:09:11:f3:26:c0:dd:d4:86:52:a6:19:c4:
bc:c1:a1:8f:94:90:1a:6d:63:6a:b8:09:1f:e1:ed:
b4:db:2c:f9:d1:7c:fd:04:fb:cc:3a:25:20:fb:d3:
16:db:c3:6c:bc:a4:2c:14:0c:16:04:13:d1:58:30:
1d:0c:84:a4:eb:32:01:19:e1:4f:b6:c0:4d:4c:0b:
8b:79:d9:bb:3e:cd:75:a7:83:2d:fe:40:ac:cb:30:
59:c6:b6:be:89:de:c0:d9:ce:20:61:84:1d:21:b5:
eb:e9:7b:51:92:8c:86:87:66:ac:56:24:74:17:a2:
7c:16:5c:fb:07:56:8d:16:b2:69:1e:85:8a:c4:c1:
c3:6e:e5:89:0e:62:f1:5e:c7:1e:b6:a9:31:b1:35:
39:56:d8:e4:44:58:6a:4f:11:a5:7d:c1:79:be:42:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:AD:DB:95:C6:9B:50:F9:C6:95:7C:11:4F:0E:6D:32:E8:CF:62
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323431303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2410::/48
Signature Algorithm: sha256WithRSAEncryption
10:40:3d:6f:65:27:2c:44:7f:71:fe:c7:54:4e:40:b7:2b:43:
f6:8f:51:35:80:f4:e1:a9:42:20:67:12:0f:75:34:aa:15:f7:
e9:16:35:6c:4e:83:85:3d:e2:41:6f:86:1d:ef:2b:02:60:41:
5a:06:c6:59:07:fc:0d:24:34:0b:37:79:87:b7:86:62:d3:ef:
5c:86:f7:18:a4:fa:de:30:84:a8:79:06:ca:da:5a:e6:a3:f2:
54:d4:2d:4e:00:1d:db:54:89:62:12:0e:bb:eb:e6:15:3a:9b:
79:47:40:62:3d:1e:f9:14:a5:62:14:cf:a4:f9:5e:71:6f:0c:
77:6d:c9:0f:73:bf:9f:d0:8e:f1:78:7b:24:84:88:b1:f8:91:
f0:be:d2:d6:26:f7:bf:d8:9a:42:8c:77:fd:21:0d:e0:e0:0d:
54:6e:3a:09:b7:a8:cf:de:62:de:6a:71:8a:5c:da:88:da:e7:
0d:ee:78:e9:1d:5e:fc:7b:b5:5e:38:ce:5a:a1:24:64:e8:3d:
98:a4:a3:2e:6a:e9:02:14:f7:6c:ec:07:a2:1d:89:9c:9f:6c:
47:ca:26:8f:f9:92:f8:84:7e:c6:94:d4:05:82:99:4c:a2:3d:
33:52:e3:c6:bc:c2:87:b3:89:09:f3:08:9b:eb:9c:0d:92:2c:
2e:eb:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:30:24 2025 by rpki-client