Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313231313a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313231313a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: G3+SF5rcmD1KigxKqOIgPCwNoRMvxF8Omq220dfOkK0=
Subject key identifier: A3:89:1B:BA:80:D9:B2:35:03:BC:F1:42:11:DC:C0:B9:98:BB:F0:1F
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 2CDFA8119786B8487170743B114895D561578A44
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313231313a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:35 +0000
ROA not before: Sun 23 Apr 2023 18:48:35 +0000
ROA not after: Sun 21 Apr 2024 18:53:35 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1211::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:df:a8:11:97:86:b8:48:71:70:74:3b:11:48:95:d5:61:57:8a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:35 2023 GMT
Not After : Apr 21 18:53:35 2024 GMT
Subject: CN=A3891BBA80D9B23503BCF14211DCC0B998BBF01F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:5f:81:f9:fc:79:c1:df:b6:65:5b:3b:ad:
ce:7d:18:45:8d:93:42:a3:7c:aa:f3:00:6f:91:ee:
2f:4b:19:37:ef:a1:01:c6:a5:62:94:72:b6:f0:05:
79:53:1f:ab:cc:ec:0c:c8:50:1f:49:ea:a3:88:6b:
89:17:a3:d9:b9:6c:5d:0e:4c:be:5a:3e:e3:c6:b4:
3e:30:f1:c6:46:08:29:4f:7a:fe:f8:e7:13:68:92:
13:74:e7:ae:8d:e2:28:b5:f7:81:d2:5f:99:a9:e2:
fe:89:1a:0f:38:ca:11:fe:0b:48:99:a7:e8:fc:83:
8c:d5:c0:9d:5c:38:ac:70:7f:fe:61:df:b4:01:79:
00:b6:70:13:43:c4:c5:d4:35:10:ad:bc:28:0b:1f:
f6:24:aa:c0:ec:2d:f0:69:be:50:96:02:6d:3b:c5:
44:90:1f:4d:a7:8e:ee:26:9c:23:45:1d:19:3f:60:
31:6e:f4:88:1f:a7:b3:5a:53:2f:5c:e1:be:86:45:
90:c7:f3:f7:99:5f:c2:93:81:9e:40:1e:15:e2:f2:
ec:42:b3:b5:45:22:d1:87:7c:1d:42:5a:8c:7d:93:
74:cb:f6:ae:a9:b8:cc:10:20:1d:27:d9:4a:8e:f9:
33:89:91:a1:22:38:f9:52:8d:3d:0a:10:bd:2c:90:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:1B:BA:80:D9:B2:35:03:BC:F1:42:11:DC:C0:B9:98:BB:F0:1F
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313231313a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1211::/48
Signature Algorithm: sha256WithRSAEncryption
74:a8:2a:3d:d4:cd:22:02:a7:81:43:cc:1d:4d:42:18:85:8b:
73:a3:27:88:66:20:77:21:d1:8e:8c:2b:00:c2:17:b3:b1:66:
8f:f5:ee:f4:69:4a:63:11:62:82:89:29:6a:15:40:9e:ea:11:
07:76:76:d2:2b:e8:67:d0:86:46:54:d7:ea:96:8c:20:bd:7e:
59:36:b8:fa:f6:fc:65:0e:74:1d:be:5d:6f:ba:15:65:37:9d:
1d:22:83:8e:11:aa:31:1f:a9:5a:91:7b:45:da:04:75:5b:1a:
cc:a3:ca:65:d2:dc:49:a2:f3:d2:18:42:19:74:12:7e:ad:80:
f1:17:fd:1d:84:8e:18:9e:56:01:04:48:00:a4:dc:db:ec:bb:
8b:e9:50:59:3b:36:62:fb:c5:28:be:55:c0:c5:e4:d8:59:35:
71:dd:a4:51:c2:a9:1a:fa:68:1c:0f:8c:f0:ab:d3:22:a4:f5:
83:5a:84:7b:96:02:a1:9b:a2:49:26:b2:aa:31:d7:11:28:30:
62:fe:97:5a:47:0d:e2:fa:01:70:3c:ce:b1:70:4f:18:17:b2:
eb:dc:5f:d9:41:32:3a:10:b4:a4:a0:4a:e1:52:a7:96:79:a6:
c8:78:8d:e0:c0:aa:5a:6f:ae:00:3c:07:43:02:b4:cf:49:ac:
25:26:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:06 2025 by rpki-client