Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313331313a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a313331313a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: NtdKbIV/i2BsQsos/tZnoXS772Yxxddq02e+0YzYsCw=
Subject key identifier: A4:16:64:02:2C:B8:A1:DD:2D:F6:FD:15:D7:B5:5D:A4:21:60:C7:D0
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 40766A14F97BB80DFC5AD7FB164AC73499C5BDD4
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313331313a3a2f34382d3438203d3e20323030323432.roa
Signing time: Wed 02 Aug 2023 20:16:53 +0000
ROA not before: Wed 02 Aug 2023 20:11:53 +0000
ROA not after: Wed 31 Jul 2024 20:16:53 +0000
asID: 200242
IP address blocks: 2a05:dfc2:1311::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:76:6a:14:f9:7b:b8:0d:fc:5a:d7:fb:16:4a:c7:34:99:c5:bd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Aug 2 20:11:53 2023 GMT
Not After : Jul 31 20:16:53 2024 GMT
Subject: CN=A41664022CB8A1DD2DF6FD15D7B55DA42160C7D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:48:8a:d1:5b:93:5f:d1:e5:9e:40:ac:9d:
b2:6c:b5:87:76:d6:3d:43:ae:1c:5d:9e:e3:15:4c:
2a:d0:d3:a3:42:65:89:44:e6:f6:ea:95:a2:f7:f9:
2d:c2:d6:af:50:d2:d8:6a:5a:aa:df:68:da:f2:02:
60:a4:03:ea:13:f4:dd:06:87:ee:e1:be:c8:c6:54:
98:c3:da:3f:15:3c:dc:08:e4:61:87:b0:62:c2:04:
80:44:68:cf:ab:c5:14:05:e4:21:2b:a6:b4:ee:b4:
a1:01:75:88:ee:74:ce:4c:8d:dd:0d:27:1b:1b:86:
e5:64:c3:c2:08:ff:a6:ff:47:c2:82:68:47:29:7f:
6c:b6:db:ee:cd:de:8b:f9:d8:be:25:ac:3c:57:f1:
77:ed:73:fd:4d:30:e1:81:d6:3f:c1:a6:99:e3:ab:
d1:52:07:68:9b:d6:01:28:92:e7:a5:f1:8a:f6:4c:
0e:fe:47:83:53:0b:12:79:b8:c8:d5:ac:ae:66:1e:
ad:a5:e4:b4:df:ef:b2:5e:91:50:b1:4f:62:0c:83:
26:14:99:6c:e3:ad:3c:89:f5:4e:c5:e6:2b:d5:ed:
89:81:4c:33:98:b1:3d:96:1d:0d:11:d0:2a:2a:de:
bd:24:e6:1e:da:7c:e1:0f:50:af:50:7d:e8:00:a7:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:64:02:2C:B8:A1:DD:2D:F6:FD:15:D7:B5:5D:A4:21:60:C7:D0
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a313331313a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:1311::/48
Signature Algorithm: sha256WithRSAEncryption
27:25:0b:a8:24:93:74:c4:e6:e3:18:69:04:a9:1e:18:0e:85:
41:58:9a:76:06:bb:a0:8a:12:d6:07:b9:1b:5d:e8:2e:58:ef:
a7:dd:33:ac:d4:a8:2c:9b:6c:47:ac:ae:06:14:db:cb:ae:4f:
22:5d:4f:c3:be:78:bb:93:24:2d:e9:52:d8:ac:0e:ba:b1:9d:
12:1e:0e:4a:28:9b:82:05:8a:82:e9:d7:e7:40:e1:7c:7d:f9:
00:1f:8a:42:b6:ce:fa:20:fa:64:19:13:1f:2f:6c:fc:23:f5:
2a:67:b1:2e:fd:35:13:4c:86:4b:ab:77:bd:32:f5:c8:c2:00:
49:26:7b:e4:53:49:f8:5a:51:5e:8a:47:98:9e:1b:b9:17:c5:
7f:bb:4b:f8:ef:29:f9:94:66:37:6e:30:c1:6a:19:12:66:05:
d0:4a:c6:34:6f:2a:5f:03:61:6b:91:06:b4:80:5d:53:12:c6:
51:76:92:d9:ae:d4:12:03:50:95:e6:e1:59:65:4f:31:1f:69:
e1:33:41:77:34:f8:58:fd:af:d0:bf:a9:89:11:d5:54:d9:bf:
d4:80:86:25:5f:e5:f5:26:9b:0b:3b:43:c6:59:9e:4b:28:11:
f5:12:71:e5:0a:53:83:c9:50:ee:65:37:05:8e:1a:99:33:30:
f9:83:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:51 2025 by rpki-client