Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313230303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313230303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: jNwQBTsW+4J2/qGH9GktY83nhJEiNqf/gyc4KJPeOXU=
Subject key identifier: 28:E2:A2:D8:DA:5D:7C:56:34:4F:3E:E9:4A:E1:10:96:B1:76:E8:95
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 0334971F2DD9FEA44A4D4EFFBE209760AAD56CAE
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313230303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:35 +0000
ROA not before: Sun 23 Apr 2023 18:48:35 +0000
ROA not after: Sun 21 Apr 2024 18:53:35 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:34:97:1f:2d:d9:fe:a4:4a:4d:4e:ff:be:20:97:60:aa:d5:6c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:35 2023 GMT
Not After : Apr 21 18:53:35 2024 GMT
Subject: CN=28E2A2D8DA5D7C56344F3EE94AE11096B176E895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:68:56:dd:48:f4:01:67:36:5f:5e:27:73:
12:75:13:6a:06:0b:ca:a3:49:f7:eb:8d:80:cd:ec:
3d:ba:57:8d:29:ae:6c:d8:ca:1d:5e:06:b2:54:de:
ac:5b:6a:df:31:e8:74:1f:f8:02:40:67:45:3d:81:
a5:a3:7c:74:78:5d:c1:8a:79:90:a3:7d:f1:cf:04:
5a:1b:cd:70:f8:cd:6d:e5:13:ba:f1:6d:41:74:05:
12:a4:75:62:f6:e6:41:4a:d4:29:ff:8a:bc:dd:85:
c3:86:2a:80:1a:6b:22:1a:9f:f2:93:0d:e0:16:52:
8c:30:fa:93:83:a2:f0:60:c6:ff:a7:6a:9e:c8:ef:
20:c3:4a:98:87:c8:63:50:56:66:fe:d7:55:a5:a3:
da:53:83:66:7e:a5:80:9d:4c:c6:b1:fa:cf:5c:5e:
5d:b9:6a:ad:38:eb:79:fc:25:63:86:91:26:f6:b3:
3e:a5:6f:88:11:b5:9e:0e:4d:20:57:84:5b:e5:f9:
d4:aa:83:63:8e:67:16:cc:a0:8f:39:7c:f3:23:c1:
f1:11:d4:2f:d5:28:67:84:c8:bc:15:c4:bc:4f:11:
78:e7:bd:6a:b5:78:f2:92:77:06:37:a3:45:f3:d7:
f2:b5:20:ff:83:49:0e:85:5b:72:4a:f7:59:24:8b:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:A2:D8:DA:5D:7C:56:34:4F:3E:E9:4A:E1:10:96:B1:76:E8:95
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313230303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1200::/48
Signature Algorithm: sha256WithRSAEncryption
1d:77:07:72:1e:20:87:87:59:fa:ee:de:6a:52:74:e2:5d:27:
45:cc:df:78:86:4e:47:38:b2:25:3c:a3:b8:dd:97:79:90:02:
c8:bd:63:2b:2c:2f:c2:b1:dc:ab:72:ee:d8:dc:3b:fb:f1:b8:
43:e4:27:8a:a6:df:e8:f5:3f:2d:97:fe:a4:4f:0c:53:d3:0b:
10:52:77:93:03:d9:8c:1f:0e:82:4f:0f:1e:97:a2:0d:58:c5:
a4:4c:5e:d4:9d:96:34:9d:d9:e1:0e:dc:2e:68:58:b9:cb:57:
7d:33:4e:d7:a7:1a:32:27:c4:0d:10:91:82:07:f5:ca:99:81:
2b:7d:d9:fd:47:e3:66:b1:cf:4e:64:79:87:03:5e:97:5e:6f:
18:51:1c:46:af:da:8d:8e:15:dd:c4:e0:67:f0:f0:c1:b9:68:
94:8e:9b:f3:a0:1c:fa:bd:d3:0b:5b:2c:db:19:ef:07:1a:fd:
03:ed:d3:a0:67:69:43:dc:97:1a:13:73:c3:88:35:d5:5c:03:
30:c8:5c:20:c0:47:98:bf:d5:f7:9a:a6:40:03:b2:27:b6:2c:
44:d7:e6:e4:86:cd:89:53:70:a4:f1:29:8c:04:4f:4d:32:14:
56:30:cf:5b:cc:73:42:f2:a2:89:ed:3a:08:75:03:be:14:aa:
d9:2c:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:22 2025 by rpki-client