Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313130303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313130303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: KIQYv1hU4TuFir1sN3Lr8Ilyzre1EiT/EVmMontqhpY=
Subject key identifier: 3B:1E:EB:CF:A8:57:8A:7F:B5:62:4F:35:C3:BA:53:82:52:71:D6:C2
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 020CE1463FA43360F0C7B701D9760A87B3DFCD39
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313130303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:34 +0000
ROA not before: Sun 23 Apr 2023 18:48:34 +0000
ROA not after: Sun 21 Apr 2024 18:53:34 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0c:e1:46:3f:a4:33:60:f0:c7:b7:01:d9:76:0a:87:b3:df:cd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:34 2023 GMT
Not After : Apr 21 18:53:34 2024 GMT
Subject: CN=3B1EEBCFA8578A7FB5624F35C3BA53825271D6C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:47:f6:74:65:45:46:b4:21:67:72:b4:98:
01:1d:dd:6e:6a:4d:99:22:af:17:6a:e6:e4:53:b3:
dc:ee:53:32:4c:3f:95:cb:64:c2:ba:d3:4d:6d:b8:
24:bc:1b:4e:9b:dd:a7:f9:5c:5d:ef:6d:40:83:27:
d5:84:65:7a:3b:92:04:ff:4d:2c:ed:34:87:87:9f:
e9:82:c5:59:4c:15:98:2f:94:fe:ae:01:d6:8f:eb:
8a:f7:be:35:08:db:64:f9:86:b8:a7:b0:79:34:0f:
0a:07:26:20:f8:85:b2:ef:83:b5:15:64:17:f6:44:
af:9b:3c:5a:2d:d6:0c:65:3f:e3:09:8d:b7:52:6d:
0a:72:90:81:24:35:7b:43:24:37:7a:b9:6a:8d:85:
b8:33:da:35:39:b3:75:e1:4c:39:06:8b:8f:90:f9:
7b:9b:1e:fc:26:32:be:87:90:b1:13:6b:49:91:4b:
50:87:c0:1f:cd:67:79:4f:9f:7e:45:6d:63:e4:15:
06:2a:d1:17:22:7b:f1:d8:db:df:72:74:6d:84:87:
89:5b:4a:9e:5e:97:e3:6f:96:c5:35:7d:76:2d:68:
d3:64:90:61:16:6d:81:31:be:f9:d7:de:25:d9:90:
55:04:6d:77:39:db:9d:2f:45:3b:c1:c5:bb:d2:22:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1E:EB:CF:A8:57:8A:7F:B5:62:4F:35:C3:BA:53:82:52:71:D6:C2
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313130303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1100::/48
Signature Algorithm: sha256WithRSAEncryption
30:d9:2f:74:b5:65:97:be:89:eb:29:2b:b9:94:75:60:b9:d2:
9e:bb:ce:72:e1:fa:7d:42:6b:62:ac:8a:74:32:0b:ef:6c:78:
50:70:63:a6:77:5b:fa:6f:fb:7b:62:04:e3:fe:75:81:ea:a0:
2c:cc:c6:45:01:2a:7d:28:59:cd:b0:36:34:15:f1:9a:ac:ec:
5e:b7:c2:27:36:3d:70:08:9d:cb:78:5d:69:4d:5e:d2:3f:b1:
b4:7a:82:dc:c3:da:c6:33:54:4e:e5:9e:56:da:1c:c6:f6:12:
7d:d5:91:32:c4:2b:7e:d3:c2:24:32:46:41:3c:4d:c9:c2:5a:
ce:23:1d:92:8b:46:10:3f:2c:bd:18:fd:77:80:00:ad:17:ef:
cc:f1:90:53:4a:73:dd:ca:80:ee:1f:8d:aa:1a:f5:bf:f0:4d:
53:fe:55:35:ad:f5:31:56:58:f5:ad:dd:b1:ff:14:a7:e3:04:
19:0d:f4:b2:55:93:95:12:f0:c6:a4:c0:13:56:e3:87:78:91:
91:27:ce:02:28:5c:3e:f3:45:12:b6:27:c0:f9:44:90:0a:94:
fa:8a:0f:5a:47:5c:13:63:33:bd:0c:cd:d4:c8:b2:f4:fc:3d:
a3:6b:2c:5e:c0:c1:45:b4:47:c3:ac:f0:8e:11:ed:fc:9a:2f:
8a:0e:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:12 2025 by rpki-client