Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313330303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313330303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: UB55wZMoNmAPZig5/Zh6A3sNHsm+XCBSRo8JCujiLjk=
Subject key identifier: 4B:0D:10:35:45:5A:58:9D:A3:43:E7:73:2C:3C:4C:20:E9:05:72:AE
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 5B7FED8FCF3FE98FCB8665E2A45264327205735C
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313330303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Wed 02 Aug 2023 20:17:18 +0000
ROA not before: Wed 02 Aug 2023 20:12:18 +0000
ROA not after: Wed 31 Jul 2024 20:17:18 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7f:ed:8f:cf:3f:e9:8f:cb:86:65:e2:a4:52:64:32:72:05:73:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Aug 2 20:12:18 2023 GMT
Not After : Jul 31 20:17:18 2024 GMT
Subject: CN=4B0D1035455A589DA343E7732C3C4C20E90572AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:27:80:3d:b1:2d:5a:bb:bf:7d:d2:85:0f:
ac:cf:33:47:b8:1f:93:7e:2b:a0:aa:ba:c5:6f:be:
97:c6:36:1e:f7:bc:aa:cf:4a:42:1e:41:7d:59:ce:
e9:10:51:f4:e1:57:c7:1d:c1:5c:f5:b7:aa:12:f3:
dd:f6:5a:d2:ba:7b:87:a6:98:89:9b:12:b0:22:3e:
d0:68:51:aa:f1:1f:88:db:39:d5:8a:ce:a9:66:4d:
96:73:3c:e2:a5:e8:86:29:45:ad:58:df:f0:ba:c1:
54:6d:22:fc:15:89:ce:e9:d6:7a:3d:03:81:c5:14:
5b:5a:6c:e3:92:71:58:ee:e6:cc:17:3f:1c:0c:d8:
1f:cd:8f:55:d7:51:3f:ed:44:b8:cc:04:ac:53:b8:
e2:bd:86:50:5f:d3:64:db:cd:9f:f9:ff:0e:a5:b6:
26:58:47:10:3a:13:f1:1d:03:25:69:d2:a1:2c:37:
3c:07:8e:a8:e5:40:52:bb:55:7b:94:ae:55:97:3a:
33:68:5d:d0:5a:0a:51:30:c8:48:fe:4f:86:ff:64:
a8:99:d1:bd:ad:02:73:91:9a:b4:1d:a2:0e:c1:11:
22:ae:80:9e:f8:48:66:cb:18:53:c0:62:ab:3a:e5:
d8:0c:8c:0b:c9:07:b4:72:f6:54:e7:dd:b0:77:c2:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:10:35:45:5A:58:9D:A3:43:E7:73:2C:3C:4C:20:E9:05:72:AE
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313330303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1300::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f0:98:55:04:49:91:5f:0d:25:3d:4d:35:15:7c:16:48:68:
14:dc:4b:60:4a:b4:63:ad:c5:96:3f:3a:53:ca:19:fd:6a:f5:
79:53:9b:3b:4f:c4:a9:b1:51:97:99:ad:92:ff:dc:13:ba:79:
d5:27:ca:5f:73:4d:dd:39:1f:e6:4b:9b:a6:b5:5f:67:f1:03:
9f:8d:6e:0d:ee:f1:9e:9f:1d:90:c5:b7:b1:1e:35:2f:08:db:
b7:f9:1e:a4:21:f9:d3:ab:18:1b:62:9b:89:74:8c:f4:7d:47:
02:f3:6f:21:08:09:5d:ea:b6:c2:f7:cf:71:aa:b5:61:2d:05:
88:fc:ed:9c:56:d6:7e:09:c6:0a:a0:51:da:9a:8d:6f:d0:9d:
6e:06:e1:ec:b7:b7:7d:fa:04:bc:2d:be:53:8a:5c:33:b4:29:
56:0c:b9:8f:00:2f:3b:3b:96:de:f1:a8:00:53:77:a9:1a:a8:
96:7b:f9:0a:d2:65:20:50:1a:b3:ae:4f:fb:0e:91:e8:46:32:
61:3c:92:48:1c:15:d6:b7:63:47:e9:16:77:a8:e4:1d:2b:f4:
5b:c4:f8:b5:f1:c2:40:ac:9a:35:7c:9a:b8:ea:20:eb:1b:c3:
47:c5:b1:e6:6c:89:34:e8:fd:f5:6a:32:ff:e8:e8:df:66:74:
e4:42:52:a2
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUW3/tj88/6Y/LhmXipFJkMnIFc1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yMzA4MDIyMDEyMThaFw0yNDA3MzEyMDE3MThaMDMxMTAvBgNV
BAMTKDRCMEQxMDM1NDU1QTU4OURBMzQzRTc3MzJDM0M0QzIwRTkwNTcyQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjieAPbEtWru/fdKFD6zPM0e4
H5N+K6CqusVvvpfGNh73vKrPSkIeQX1ZzukQUfThV8cdwVz1t6oS8932WtK6e4em
mImbErAiPtBoUarxH4jbOdWKzqlmTZZzPOKl6IYpRa1Y3/C6wVRtIvwVic7p1no9
A4HFFFtabOOScVju5swXPxwM2B/Nj1XXUT/tRLjMBKxTuOK9hlBf02TbzZ/5/w6l
tiZYRxA6E/EdAyVp0qEsNzwHjqjlQFK7VXuUrlWXOjNoXdBaClEwyEj+T4b/ZKiZ
0b2tAnORmrQdog7BESKugJ74SGbLGFPAYqs65dgMjAvJB7Ry9lTn3bB3wqV7AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUSw0QNUVaWJ2jQ+dzLDxMIOkFcq4wHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8x
ODg2MC8wLzMyNjEzMDM1M2E2NDY2NjMzMjNhMzEzMzMwMzAzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMwMzAzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/CEwAwDQYJKoZI
hvcNAQELBQADggEBAJ7wmFUESZFfDSU9TTUVfBZIaBTcS2BKtGOtxZY/OlPKGf1q
9XlTmztPxKmxUZeZrZL/3BO6edUnyl9zTd05H+ZLm6a1X2fxA5+Nbg3u8Z6fHZDF
t7EeNS8I27f5HqQh+dOrGBtim4l0jPR9RwLzbyEICV3qtsL3z3GqtWEtBYj87ZxW
1n4JxgqgUdqajW/QnW4G4ey3t336BLwtvlOKXDO0KVYMuY8ALzs7lt7xqABTd6ka
qJZ7+QrSZSBQGrOuT/sOkehGMmE8kkgcFda3Y0fpFneo5B0r9FvE+LXxwkCsmjV8
mrjqIOsbw0fFseZsiTTo/fVqMv/o6N9mdORCUqI=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:57 2025 by rpki-client