Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131323a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313131323a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: AN0XSYESy3yDAMDqvN/Kt59FjJD7yWr/r15uVBNUe4E=
Subject key identifier: 16:11:32:6E:EC:61:F7:47:A5:1C:75:00:CA:11:9F:38:E7:34:35:7E
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 7D91E23CE01F6782EFC2D10AD4BD4ED50E543FB4
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131323a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:33 +0000
ROA not before: Sun 23 Apr 2023 18:48:33 +0000
ROA not after: Sun 21 Apr 2024 18:53:33 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:91:e2:3c:e0:1f:67:82:ef:c2:d1:0a:d4:bd:4e:d5:0e:54:3f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:33 2023 GMT
Not After : Apr 21 18:53:33 2024 GMT
Subject: CN=1611326EEC61F747A51C7500CA119F38E734357E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:0b:14:4b:d1:c4:1e:01:5e:d6:69:9f:69:
2a:53:e3:48:67:94:63:ee:5f:29:91:d8:3e:5f:2c:
9a:a5:0e:91:2f:3f:51:54:b3:fb:ed:ec:ca:5b:8d:
69:61:4a:23:21:96:01:8a:38:35:99:18:23:73:a1:
7e:a7:c9:bc:61:6d:3d:ce:2f:5d:a4:d1:ae:e1:4a:
32:d6:1c:f4:04:4e:e2:2f:63:60:e0:5f:6d:9b:fe:
06:47:3b:a6:fd:c8:db:e0:e4:a9:9e:30:7c:23:de:
08:65:8e:05:8b:4d:b1:aa:63:73:56:d7:92:45:ec:
8d:3d:b0:7e:2c:b9:79:bc:08:c2:54:9c:d6:bb:62:
c3:1d:4a:a2:7d:ec:11:7f:a8:84:62:09:58:67:df:
bf:dd:0a:03:6f:77:18:65:73:9f:31:bf:43:42:01:
96:5c:dd:7a:1d:38:92:95:b3:73:1a:2e:53:28:34:
a8:3b:0e:dd:1a:68:0e:6e:e2:95:bb:91:67:f4:d5:
e6:b1:f2:37:2a:d5:86:84:81:f8:c9:17:d9:db:03:
e2:53:56:30:c0:8b:30:b8:c9:35:2d:10:c1:d9:07:
00:7a:b0:e1:ae:96:c5:6a:09:e6:c1:fe:91:1d:8e:
0a:3e:b8:d5:8a:44:99:c2:26:2b:07:84:ea:14:98:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:32:6E:EC:61:F7:47:A5:1C:75:00:CA:11:9F:38:E7:34:35:7E
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313131323a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1112::/48
Signature Algorithm: sha256WithRSAEncryption
1c:91:a5:df:88:a4:35:d5:73:fa:0d:27:4f:7f:1e:77:ef:e3:
d4:81:33:d5:74:8a:09:93:7b:12:be:6a:7a:57:c9:79:96:e6:
13:9f:a8:0a:72:d4:d0:38:47:cd:6d:85:93:18:42:ef:9d:7d:
b4:44:07:be:83:31:0f:4f:13:2d:e7:3d:a3:c2:10:c8:b7:11:
ae:f7:a1:7b:6e:14:73:d0:ba:d1:9e:91:d3:45:ac:f9:16:27:
c4:a4:d3:fe:90:4f:7b:33:02:5d:11:73:4a:0b:09:bf:ab:b7:
b5:28:3d:c2:d9:c9:be:a4:6f:1d:b1:b9:ba:33:15:19:73:8a:
f3:61:e9:0b:45:bb:cb:9c:55:b7:e5:a6:7b:c3:e2:fe:34:a6:
d3:7d:06:dd:9e:7a:a8:3e:f3:de:fc:49:b5:fa:26:93:7c:c0:
4c:f3:2c:32:2b:06:e8:f0:aa:d0:94:d6:86:be:fc:2d:5a:86:
46:92:71:09:ff:ec:48:fa:21:30:01:47:4a:89:13:19:fc:9f:
f9:ad:55:be:a3:a5:4e:78:d1:07:6b:cb:d2:f9:3f:1f:a8:84:
fb:a2:e3:a3:b9:e6:38:93:7c:18:b4:a6:ef:44:e3:84:77:57:
db:80:08:7e:b7:be:8c:40:c1:ec:7e:d4:11:15:2b:72:c5:bd:
c8:3c:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:41 2025 by rpki-client