Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313131303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: Un5P7Q1MxMB+Os5L1UzP4uTmXoUoDXvZ0MjebBMlZnA=
Subject key identifier: A2:93:34:15:48:09:E7:73:CD:85:AB:B1:F9:64:C8:4D:AA:01:05:BD
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 421F3A86798A584BDE0CF383B4F5A01E628B8F39
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:34 +0000
ROA not before: Sun 23 Apr 2023 18:48:34 +0000
ROA not after: Sun 21 Apr 2024 18:53:34 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1f:3a:86:79:8a:58:4b:de:0c:f3:83:b4:f5:a0:1e:62:8b:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:34 2023 GMT
Not After : Apr 21 18:53:34 2024 GMT
Subject: CN=A29334154809E773CD85ABB1F964C84DAA0105BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:5d:da:4e:4c:6c:9d:3a:91:e9:a1:e3:00:
f3:ab:98:b5:74:cd:07:77:2e:c9:64:87:ea:1f:af:
80:d2:20:93:4f:15:57:5f:a2:3c:cd:b4:70:3f:ba:
21:e0:ec:ba:96:64:83:66:9d:46:52:a5:39:74:8d:
a4:9d:c2:6c:f0:bb:18:94:7f:3f:82:a8:88:61:31:
91:d4:0e:c0:6e:44:9c:43:3e:12:27:f6:00:63:1c:
34:ba:ae:38:af:86:93:67:54:d1:c8:21:27:d7:cf:
9a:b8:19:7a:51:e0:d7:78:c3:c2:0b:3a:33:52:82:
20:06:fa:b9:65:2e:9e:12:0f:47:08:b0:1e:c3:6f:
be:e0:3d:30:0b:85:0a:91:46:0c:3d:c3:90:a4:bc:
1a:b1:70:31:50:ac:7e:77:3b:bd:52:1b:f2:64:3a:
99:61:86:5c:96:a0:77:01:91:e4:7d:2b:ef:c2:19:
5b:84:da:0d:1f:ea:f6:6d:c0:98:76:11:62:3a:c9:
ad:c3:9d:1f:e8:28:33:29:cb:77:dd:46:02:9f:ea:
75:5d:53:56:9c:32:75:bc:a9:39:84:55:4f:3e:45:
31:2a:49:e7:c3:0b:db:c2:7a:38:28:7a:82:de:a4:
3f:13:d2:b1:fa:39:1b:3f:36:69:4e:20:4d:14:31:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:34:15:48:09:E7:73:CD:85:AB:B1:F9:64:C8:4D:AA:01:05:BD
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1110::/48
Signature Algorithm: sha256WithRSAEncryption
91:83:9e:8d:5f:a8:bd:a0:1c:cb:7d:74:41:a5:14:8e:fd:f9:
43:99:f6:ed:91:84:2b:2e:3e:87:64:b1:54:4e:8d:56:84:69:
f9:4c:16:b1:e9:83:be:78:5f:26:83:a8:da:69:89:39:72:b3:
d2:5b:6f:48:60:82:83:09:83:16:4a:ac:f0:92:9e:a2:f4:a9:
82:7d:1c:dc:17:f7:15:5c:24:b7:87:ba:c0:ba:ba:85:11:42:
2b:fa:a4:4c:61:56:f9:f0:f8:76:0f:d0:44:cb:c9:dd:4b:d9:
20:a2:2e:ec:df:4d:05:b2:06:58:77:34:b5:3a:7e:56:03:aa:
67:cf:9e:a4:44:f9:50:eb:50:14:22:c0:4b:7e:4d:bf:4e:a8:
1b:33:87:38:f4:48:cf:bf:52:42:98:07:0f:08:a5:be:87:8e:
43:55:8a:c0:eb:70:16:0d:a8:49:c5:e3:d3:a9:35:20:9f:0b:
7e:90:50:76:ac:cc:f1:07:84:71:37:d5:da:07:b3:e0:33:89:
2d:a8:cc:7d:38:ff:fe:bf:c8:89:74:35:3b:d2:ed:4a:8c:35:
33:a5:60:3b:9b:dd:56:31:03:c8:e1:c1:aa:a6:8c:b9:65:dc:
28:f7:25:42:1c:dd:29:5e:70:f0:4b:58:3b:ff:28:e2:30:cf:
f6:17:7e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:00 2025 by rpki-client