Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313331303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313331303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: ZYfYmx1D/RdX3zsBrwAwdc1a6X0C6RchysMztdmseBE=
Subject key identifier: A8:82:C6:D3:6C:CE:2F:47:F1:AB:62:CD:FA:A5:25:47:FC:28:F1:02
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 3619BB71283B9D0F9109F73B040952CC6F5ABAB1
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313331303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Wed 02 Aug 2023 20:17:08 +0000
ROA not before: Wed 02 Aug 2023 20:12:08 +0000
ROA not after: Wed 31 Jul 2024 20:17:08 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1310::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:19:bb:71:28:3b:9d:0f:91:09:f7:3b:04:09:52:cc:6f:5a:ba:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Aug 2 20:12:08 2023 GMT
Not After : Jul 31 20:17:08 2024 GMT
Subject: CN=A882C6D36CCE2F47F1AB62CDFAA52547FC28F102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:aa:c3:d4:a8:2e:8d:d7:96:04:a4:db:6f:
e0:1c:fe:93:57:a0:fd:8f:61:8e:a7:a2:d0:02:27:
8d:64:6d:7a:ea:f5:48:fb:28:b3:bb:bc:cc:f3:db:
15:a6:17:ae:fc:0e:db:17:4b:c8:79:16:53:9a:e0:
b6:54:fb:8a:67:67:7a:9c:0c:10:68:c9:dc:52:c3:
63:1b:e5:e1:20:d0:a8:f6:e5:0f:98:79:0b:c0:32:
87:36:2a:67:fa:45:09:64:d2:33:2d:45:23:ab:34:
fb:06:ac:5a:fc:bd:90:ba:f5:bf:b8:69:af:36:7e:
2d:c7:9d:33:8d:b5:40:8d:83:2a:a2:9c:a5:3d:88:
f9:11:1c:5a:a2:2f:68:6c:56:b5:4b:ff:3a:6d:70:
56:a6:f4:4c:1f:74:12:5e:08:a6:b8:39:ad:21:67:
76:02:56:74:ea:03:9c:98:d1:92:ae:0b:99:51:75:
ab:a9:ad:73:c8:23:e1:ec:d2:8e:a8:96:b1:31:81:
70:c8:3a:1c:73:9e:e0:f6:fc:04:dc:fa:72:96:18:
6c:b9:78:42:90:d6:57:58:59:6b:6f:e7:9d:62:64:
d4:15:c5:1b:d7:ad:34:2b:eb:15:92:33:ce:52:53:
fe:4e:06:c3:fb:59:29:54:83:6f:c4:ab:6b:8c:48:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:C6:D3:6C:CE:2F:47:F1:AB:62:CD:FA:A5:25:47:FC:28:F1:02
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313331303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1310::/48
Signature Algorithm: sha256WithRSAEncryption
64:bd:fd:ec:06:02:6f:b2:6b:81:61:3d:4e:37:d6:6a:73:16:
c7:04:88:96:6b:1a:4f:3a:86:b9:9f:bc:22:01:f8:f4:d5:5f:
e5:85:d2:8d:b0:2a:2f:3a:8a:65:58:49:08:3a:de:cf:fd:18:
ff:1d:d0:5e:98:ff:c9:cd:58:cd:88:a2:9d:57:56:3f:04:bd:
11:94:6b:a7:71:c1:be:70:d3:94:c4:0e:01:f7:ec:e5:d4:ac:
77:f6:18:09:89:fb:29:cd:4a:ce:ef:65:2c:c6:6f:c9:74:ba:
98:82:d9:36:36:4f:e4:59:0f:51:23:79:7b:97:b1:3d:13:89:
a1:c1:73:b1:b0:10:53:6f:9d:27:0c:36:82:bb:be:34:e5:19:
6b:c8:db:e9:24:b4:d8:f3:1a:e9:7c:e0:6a:6b:36:93:a4:e6:
a5:55:db:49:b9:81:bf:a7:42:51:a7:96:b6:98:38:98:36:99:
ca:18:f1:0c:f1:77:c4:46:ab:3a:89:d1:f4:89:2f:22:a2:3e:
e3:45:58:3f:b1:d2:1e:bf:22:fe:d0:49:af:42:b3:2b:89:c3:
e3:a4:48:da:87:4e:3d:94:ae:2e:33:9c:e7:0a:52:d9:76:dd:
dc:9c:0d:c9:7d:66:34:da:34:e6:5b:d6:c9:4e:31:e9:36:b5:
1a:fc:25:be
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUNhm7cSg7nQ+RCfc7BAlSzG9aurEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yMzA4MDIyMDEyMDhaFw0yNDA3MzEyMDE3MDhaMDMxMTAvBgNV
BAMTKEE4ODJDNkQzNkNDRTJGNDdGMUFCNjJDREZBQTUyNTQ3RkMyOEYxMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChKrD1KgujdeWBKTbb+Ac/pNX
oP2PYY6notACJ41kbXrq9Uj7KLO7vMzz2xWmF678DtsXS8h5FlOa4LZU+4pnZ3qc
DBBoydxSw2Mb5eEg0Kj25Q+YeQvAMoc2Kmf6RQlk0jMtRSOrNPsGrFr8vZC69b+4
aa82fi3HnTONtUCNgyqinKU9iPkRHFqiL2hsVrVL/zptcFam9EwfdBJeCKa4Oa0h
Z3YCVnTqA5yY0ZKuC5lRdauprXPII+Hs0o6olrExgXDIOhxznuD2/ATc+nKWGGy5
eEKQ1ldYWWtv551iZNQVxRvXrTQr6xWSM85SU/5OBsP7WSlUg2/Eq2uMSPoFAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUqILG02zOL0fxq2LN+qUlR/wo8QIwHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8x
ODg2MC8wLzMyNjEzMDM1M2E2NDY2NjMzMjNhMzEzMzMxMzAzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMwMzAzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/CExAwDQYJKoZI
hvcNAQELBQADggEBAGS9/ewGAm+ya4FhPU431mpzFscEiJZrGk86hrmfvCIB+PTV
X+WF0o2wKi86imVYSQg63s/9GP8d0F6Y/8nNWM2Iop1XVj8EvRGUa6dxwb5w05TE
DgH37OXUrHf2GAmJ+ynNSs7vZSzGb8l0upiC2TY2T+RZD1EjeXuXsT0TiaHBc7Gw
EFNvnScMNoK7vjTlGWvI2+kktNjzGul84GprNpOk5qVV20m5gb+nQlGnlraYOJg2
mcoY8Qzxd8RGqzqJ0fSJLyKiPuNFWD+x0h6/Iv7QSa9CsyuJw+OkSNqHTj2Uri4z
nOcKUtl23dycDcl9ZjTaNOZb1slOMek2tRr8Jb4=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:20 2025 by rpki-client