Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131313a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313131313a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: B+0X9rqOxp0xjqj1x+lVxFk/yM3OOHVVshNbi53juoY=
Subject key identifier: 0B:CA:7E:AC:76:49:D2:15:53:9A:DE:6C:EC:18:A2:F5:A8:51:08:A5
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 55FA07AD600AAC84FD128D33068086A938436811
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131313a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:33 +0000
ROA not before: Sun 23 Apr 2023 18:48:33 +0000
ROA not after: Sun 21 Apr 2024 18:53:33 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1111::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fa:07:ad:60:0a:ac:84:fd:12:8d:33:06:80:86:a9:38:43:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:33 2023 GMT
Not After : Apr 21 18:53:33 2024 GMT
Subject: CN=0BCA7EAC7649D215539ADE6CEC18A2F5A85108A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:19:28:64:83:ed:46:a6:c8:f5:37:bc:4c:
31:da:c0:80:7d:15:29:92:c8:c0:cf:2b:72:cf:be:
37:4a:34:22:48:66:a7:8f:1b:c8:ec:59:69:cf:a0:
fb:8a:78:a2:80:ad:8e:df:bd:78:ad:c1:0f:ad:9e:
17:fb:ee:f3:80:36:2f:3d:39:28:7f:36:b6:ab:73:
46:89:8b:cd:6a:b8:85:8e:1c:72:93:7f:44:84:50:
57:92:e2:79:e1:e1:af:90:13:dc:7b:18:10:f4:00:
72:9f:98:db:90:5d:9e:cf:55:3b:5d:ec:41:50:7e:
ae:05:67:b1:4f:d2:54:cf:99:e5:6e:37:1f:da:97:
bd:49:b5:ee:79:fa:40:94:d0:21:44:07:5e:c6:c3:
d4:4a:a8:b2:86:de:80:15:06:d1:f7:d8:10:de:96:
f7:b6:ac:be:b3:08:6a:f1:84:65:3c:d2:ad:7a:0d:
73:cb:96:16:36:34:a3:bc:39:16:6c:0f:a5:9d:42:
ae:4a:b3:ae:07:8c:55:59:3e:10:b3:b3:a6:67:5f:
94:f7:24:83:35:92:29:28:ff:71:65:30:f9:22:94:
61:5c:e5:7e:5a:91:29:ac:30:44:56:80:0d:2d:0b:
59:d9:db:19:58:e3:4c:59:64:b7:1f:d0:e6:ba:71:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CA:7E:AC:76:49:D2:15:53:9A:DE:6C:EC:18:A2:F5:A8:51:08:A5
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131313a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1111::/48
Signature Algorithm: sha256WithRSAEncryption
9e:37:75:02:65:cb:d6:43:17:f8:d0:b1:37:8c:51:51:e2:6d:
6b:82:f0:a8:e0:e9:07:3b:82:73:32:50:80:98:50:9d:c3:89:
6d:0e:a5:d8:a1:9a:69:42:f7:30:b8:57:2e:98:55:79:a3:67:
c5:57:41:ac:27:46:ea:23:c6:08:ca:fb:65:fd:7a:6a:dc:49:
0e:32:65:28:26:37:a5:84:13:5f:ae:a1:0a:2f:56:46:2b:35:
c8:02:72:76:a0:34:bb:0e:c9:65:d9:27:4b:9d:67:31:4d:c8:
61:a9:a7:e2:c0:b2:31:65:f5:32:35:a9:1a:f3:95:78:d9:9a:
12:46:c7:21:0d:bd:fa:a0:8d:73:7a:a5:bf:2d:97:ee:4a:a2:
1d:8b:03:b7:0d:2c:e3:db:f9:e8:75:55:ec:c4:39:75:52:c8:
a5:d1:af:d3:c8:4a:35:20:e0:a2:d7:83:22:56:c6:ee:3d:ea:
35:ae:82:eb:44:9d:89:21:95:9e:5d:49:f5:4a:d6:c9:11:41:
f1:40:08:7e:7b:c7:79:b3:4a:ff:83:7b:59:91:45:a3:d4:38:
f1:3d:ad:42:41:d7:5d:f7:df:f5:3c:ee:ef:66:d1:04:e4:3b:
96:55:5b:d9:81:ed:21:ba:04:8e:4a:3b:a8:43:eb:7a:dc:25:
53:81:6a:c0
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUVfoHrWAKrIT9Eo0zBoCGqThDaBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yMzA0MjMxODQ4MzNaFw0yNDA0MjExODUzMzNaMDMxMTAvBgNV
BAMTKDBCQ0E3RUFDNzY0OUQyMTU1MzlBREU2Q0VDMThBMkY1QTg1MTA4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUxkoZIPtRqbI9Te8TDHawIB9
FSmSyMDPK3LPvjdKNCJIZqePG8jsWWnPoPuKeKKArY7fvXitwQ+tnhf77vOANi89
OSh/Nrarc0aJi81quIWOHHKTf0SEUFeS4nnh4a+QE9x7GBD0AHKfmNuQXZ7PVTtd
7EFQfq4FZ7FP0lTPmeVuNx/al71Jte55+kCU0CFEB17Gw9RKqLKG3oAVBtH32BDe
lve2rL6zCGrxhGU80q16DXPLlhY2NKO8ORZsD6WdQq5Ks64HjFVZPhCzs6ZnX5T3
JIM1kiko/3FlMPkilGFc5X5akSmsMERWgA0tC1nZ2xlY40xZZLcf0Oa6ce7ZAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUC8p+rHZJ0hVTmt5s7Bii9ahRCKUwHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8x
ODg2MC8wLzMyNjEzMDM1M2E2NDY2NjMzMjNhMzEzMTMxMzEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMwMzAzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/CEREwDQYJKoZI
hvcNAQELBQADggEBAJ43dQJly9ZDF/jQsTeMUVHibWuC8Kjg6Qc7gnMyUICYUJ3D
iW0OpdihmmlC9zC4Vy6YVXmjZ8VXQawnRuojxgjK+2X9emrcSQ4yZSgmN6WEE1+u
oQovVkYrNcgCcnagNLsOyWXZJ0udZzFNyGGpp+LAsjFl9TI1qRrzlXjZmhJGxyEN
vfqgjXN6pb8tl+5Koh2LA7cNLOPb+eh1VezEOXVSyKXRr9PISjUg4KLXgyJWxu49
6jWugutEnYkhlZ5dSfVK1skRQfFACH57x3mzSv+De1mRRaPUOPE9rUJB11333/U8
7u9m0QTkO5ZVW9mB7SG6BI5KO6hD63rcJVOBasA=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:17 2025 by rpki-client