Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313231303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313231303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: xtQYrjgpwm1jEk/DtkUya7OfYybovtBJZm9HlJ3GQBo=
Subject key identifier: 7B:0A:23:3E:D8:2D:CD:8A:26:4E:DB:64:4A:65:4D:7F:56:88:94:FB
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 675011E8AEB336A28E17FB020039EF2970C28EBA
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313231303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:35 +0000
ROA not before: Sun 23 Apr 2023 18:48:35 +0000
ROA not after: Sun 21 Apr 2024 18:53:35 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1210::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:50:11:e8:ae:b3:36:a2:8e:17:fb:02:00:39:ef:29:70:c2:8e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:35 2023 GMT
Not After : Apr 21 18:53:35 2024 GMT
Subject: CN=7B0A233ED82DCD8A264EDB644A654D7F568894FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:0d:90:a0:37:e9:86:a0:b6:5c:f9:a0:87:
61:ca:4f:b1:a6:ad:f5:89:a3:07:38:ea:3f:75:68:
7f:89:4d:4a:25:1a:0c:81:fa:6a:f5:e1:25:10:71:
0e:36:04:8e:58:68:4c:e8:2a:df:cd:3c:f6:06:c0:
05:84:bd:02:79:09:ce:c4:e7:7a:8c:54:71:57:12:
ce:ef:d1:7a:09:b3:3d:7a:85:b3:0f:03:e5:72:33:
4d:41:08:37:74:a7:ea:46:4c:52:0a:26:aa:b6:fe:
55:d7:be:a8:73:00:ed:2e:11:15:68:fa:b1:fb:ac:
e2:52:bf:fd:04:87:f3:97:00:a7:60:34:1c:1e:d0:
cf:6f:18:c2:69:14:28:72:c5:c7:18:05:0b:bf:9d:
a0:1a:72:9e:ea:38:ed:36:13:73:01:45:c4:60:df:
e0:c0:4f:2f:0c:72:16:22:91:4f:3c:81:95:37:42:
e8:7f:33:74:b5:2e:d6:08:b4:b5:2b:f3:5c:64:3f:
e4:45:b9:50:b9:3d:d2:57:95:35:56:e8:6a:b3:fc:
36:59:d1:f5:d3:9c:4c:d7:02:64:f3:cf:02:86:17:
8f:87:e3:f3:b5:86:e1:93:f9:36:64:78:1e:28:c8:
5d:e0:8b:be:56:2c:7a:be:39:be:cc:50:75:0c:bb:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0A:23:3E:D8:2D:CD:8A:26:4E:DB:64:4A:65:4D:7F:56:88:94:FB
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313231303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1210::/48
Signature Algorithm: sha256WithRSAEncryption
3a:ea:5d:68:68:6b:42:4c:fb:48:2e:99:75:40:39:c6:ea:71:
8f:28:b9:60:69:50:5e:2d:37:46:d6:3b:c1:17:c5:ad:ca:9d:
c6:56:bc:3c:fa:c0:32:ff:66:6d:4c:42:1b:60:43:66:f3:9f:
c7:5f:c5:2c:8b:f4:18:e7:29:9e:ad:f0:39:d7:a7:cc:f6:df:
a3:52:88:99:30:2f:df:03:39:da:26:19:01:e4:68:d4:57:8f:
a7:5d:b9:67:e8:94:44:8f:05:8c:b8:ef:cd:90:d6:c2:08:f9:
80:13:c7:a9:4d:34:ee:d6:01:58:f1:79:19:a7:f8:26:e7:5c:
81:1c:5f:c0:c7:87:bc:d5:85:e4:6d:c4:fb:5c:09:fc:f5:d5:
7c:93:ae:70:17:79:77:5a:5a:9a:4b:53:05:a7:c0:ca:f0:3a:
52:a6:c0:d3:21:7a:a3:33:e4:be:fc:ab:00:13:2e:ea:46:11:
8a:b1:13:f8:49:4f:44:a3:8b:f6:f0:49:68:a4:25:7a:e2:40:
72:e5:2e:57:9e:96:98:c4:6f:e3:29:66:a0:14:d1:93:3f:1d:
2c:fb:0a:6b:bb:37:40:d0:f8:68:6b:a0:7b:eb:25:19:ea:c8:
56:89:ba:c5:82:76:37:51:a4:fd:01:88:71:91:31:60:d1:22:
ac:2f:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:07 2025 by rpki-client