Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313030303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313030303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: 59dF7eFwwOAmEts2j5I9h+B8Qx1YWnw89oevo3sVxXs=
Subject key identifier: 7C:3E:DD:BD:AE:27:44:A8:AE:D2:B2:40:3B:A0:E7:77:F4:82:47:F0
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 6DC4895FC10E60BF3D127E0577FC234D052A2D37
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313030303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:34 +0000
ROA not before: Sun 23 Apr 2023 18:48:34 +0000
ROA not after: Sun 21 Apr 2024 18:53:34 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c4:89:5f:c1:0e:60:bf:3d:12:7e:05:77:fc:23:4d:05:2a:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:34 2023 GMT
Not After : Apr 21 18:53:34 2024 GMT
Subject: CN=7C3EDDBDAE2744A8AED2B2403BA0E777F48247F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:8a:b4:90:1d:33:d9:23:2f:89:cf:12:0e:
e1:6e:ee:fc:46:f4:c9:25:de:a9:35:df:11:b1:44:
3e:88:6c:59:58:4b:80:a2:3a:d9:84:ce:95:9c:73:
6d:c1:20:bf:5a:4c:db:84:d9:e9:d8:9d:71:37:eb:
af:b3:8c:31:71:8d:c0:14:eb:76:a6:38:d6:f5:ba:
3d:15:b8:60:b9:63:da:db:45:44:15:8a:7e:5d:4b:
67:47:eb:03:41:fc:45:1f:5b:70:55:9b:d9:c4:d2:
2f:c3:18:38:0b:99:35:13:8b:4c:6c:4c:16:d7:25:
76:2e:f8:bc:a9:15:e1:2b:c6:31:14:3c:9b:13:38:
4c:49:77:08:4e:bc:ce:5d:57:0d:4b:af:86:c9:5e:
95:89:2e:0a:bf:8b:86:a2:83:6c:23:e0:f5:d0:fa:
9f:93:ab:b3:1f:0a:af:af:c8:86:34:67:18:3e:d4:
16:c0:06:70:b4:45:9e:e2:dd:6d:7d:11:cc:90:77:
61:82:32:a8:ae:c0:61:9b:93:d0:05:cd:0d:be:2a:
5f:98:a8:92:df:94:18:26:3b:54:2a:f1:ea:47:28:
66:4e:8b:96:db:d0:b2:e7:60:53:c0:a6:04:0a:cf:
2c:fc:bb:a4:4f:e2:cb:aa:e7:55:fa:82:8e:c8:4d:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3E:DD:BD:AE:27:44:A8:AE:D2:B2:40:3B:A0:E7:77:F4:82:47:F0
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313030303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1000::/48
Signature Algorithm: sha256WithRSAEncryption
75:6e:0e:9d:aa:df:4b:e4:26:69:b6:aa:3c:46:10:99:6a:83:
55:5e:37:d0:2f:cb:75:94:b8:68:42:ef:74:94:33:09:cb:01:
cd:b3:cf:6c:6d:ee:c0:a4:79:99:67:5b:c2:d2:a5:2e:be:7c:
4f:4a:91:0c:60:2d:70:60:bc:0e:a2:18:7e:7f:e3:66:b7:34:
9e:4a:2e:72:51:c6:c5:07:4c:cb:be:a8:25:cc:7d:a9:cb:7d:
14:52:f3:7a:7f:ca:73:54:bd:3f:df:b2:65:96:68:77:21:a2:
9d:b5:5f:0e:ef:63:11:41:ef:de:cf:fd:b7:d5:fc:a2:c4:8c:
31:4b:74:20:1a:db:14:ec:c1:c7:01:80:c3:29:8b:07:c4:59:
44:02:8b:96:84:c7:0c:f5:8f:7a:8f:56:ec:60:a7:5d:96:ea:
e9:ae:af:db:bc:22:04:f0:63:eb:8f:83:92:68:a2:16:32:c4:
c1:4f:37:7a:ad:fd:85:93:7c:7d:1f:6d:b5:32:7f:f4:b0:b9:
4c:8c:1b:89:d5:b4:f0:6c:1c:20:a4:42:01:86:97:ee:56:f3:
61:0b:a9:01:d3:b3:a2:2b:4e:f5:66:9d:2e:d7:d2:9d:2a:e6:
34:a1:8b:53:72:5e:40:8c:64:f2:76:d1:c0:95:1b:96:95:66:
f4:9b:c5:b9
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUbcSJX8EOYL89En4Fd/wjTQUqLTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yMzA0MjMxODQ4MzRaFw0yNDA0MjExODUzMzRaMDMxMTAvBgNV
BAMTKDdDM0VEREJEQUUyNzQ0QThBRUQyQjI0MDNCQTBFNzc3RjQ4MjQ3RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8boq0kB0z2SMvic8SDuFu7vxG
9Mkl3qk13xGxRD6IbFlYS4CiOtmEzpWcc23BIL9aTNuE2enYnXE366+zjDFxjcAU
63amONb1uj0VuGC5Y9rbRUQVin5dS2dH6wNB/EUfW3BVm9nE0i/DGDgLmTUTi0xs
TBbXJXYu+LypFeErxjEUPJsTOExJdwhOvM5dVw1Lr4bJXpWJLgq/i4aig2wj4PXQ
+p+Tq7MfCq+vyIY0Zxg+1BbABnC0RZ7i3W19EcyQd2GCMqiuwGGbk9AFzQ2+Kl+Y
qJLflBgmO1Qq8epHKGZOi5bb0LLnYFPApgQKzyz8u6RP4suq51X6go7ITU2zAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUfD7dva4nRKiu0rJAO6Dnd/SCR/AwHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8x
ODg2MC8wLzMyNjEzMDM1M2E2NDY2NjMzMjNhMzEzMDMwMzAzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMwMzAzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/CEAAwDQYJKoZI
hvcNAQELBQADggEBAHVuDp2q30vkJmm2qjxGEJlqg1VeN9Avy3WUuGhC73SUMwnL
Ac2zz2xt7sCkeZlnW8LSpS6+fE9KkQxgLXBgvA6iGH5/42a3NJ5KLnJRxsUHTMu+
qCXMfanLfRRS83p/ynNUvT/fsmWWaHchop21Xw7vYxFB797P/bfV/KLEjDFLdCAa
2xTswccBgMMpiwfEWUQCi5aExwz1j3qPVuxgp12W6umur9u8IgTwY+uPg5JoohYy
xMFPN3qt/YWTfH0fbbUyf/SwuUyMG4nVtPBsHCCkQgGGl+5W82ELqQHTs6IrTvVm
nS7X0p0q5jShi1NyXkCMZPJ20cCVG5aVZvSbxbk=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:35 2025 by rpki-client