Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323130303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323130303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: FJIg6YW1KQcnpaGOpO8Jaf6WJlt0C3czbdevskwIb+s=
Subject key identifier: 6F:A9:4C:9D:46:FE:DE:91:A3:DC:B1:E2:02:0C:B0:B5:FB:F2:98:8D
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 6DF4C50A53A4310F737EFB4643E3EB25E5307247
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323130303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:34 +0000
ROA not before: Sun 23 Apr 2023 18:48:34 +0000
ROA not after: Sun 21 Apr 2024 18:53:34 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f4:c5:0a:53:a4:31:0f:73:7e:fb:46:43:e3:eb:25:e5:30:72:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:34 2023 GMT
Not After : Apr 21 18:53:34 2024 GMT
Subject: CN=6FA94C9D46FEDE91A3DCB1E2020CB0B5FBF2988D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:0d:15:a2:90:59:17:b5:61:0f:09:76:8e:
63:40:3f:6d:ef:84:f6:1a:2d:05:a0:6c:fa:ec:bb:
7a:18:34:8e:16:1c:09:df:c2:e2:65:0f:0c:98:40:
30:03:8c:91:77:16:5b:59:42:6c:60:6e:67:60:f0:
da:85:c2:70:4c:49:23:a0:e8:96:3d:84:40:3e:a2:
ea:d1:6e:76:dc:03:90:a9:69:ae:e1:ab:d1:9d:ea:
ce:11:b2:06:2c:18:7e:8f:77:e7:93:06:71:9f:68:
29:f2:b7:2d:e7:00:44:c9:23:f6:d2:f2:0e:fd:84:
5f:79:bc:aa:d0:a3:65:43:b0:dc:f3:35:90:3d:cb:
07:79:70:bd:e9:27:81:ce:31:52:68:0a:9f:4e:95:
08:20:68:15:5f:c4:6b:fd:e1:ff:1e:8d:e6:57:b0:
24:22:04:d3:2f:d3:5e:17:72:f3:24:90:b1:d6:4e:
0d:14:f1:7b:15:48:58:f4:30:0d:ae:b5:bb:9b:0c:
93:18:25:4f:6d:1a:bb:f1:ee:8b:72:b8:f3:82:fe:
a7:5c:08:10:e8:3e:e9:bb:5a:01:3e:1f:c5:42:2f:
75:f1:5d:4f:1b:7a:a1:30:75:10:9c:92:38:24:58:
c1:c2:18:ca:89:04:ab:96:26:0b:ff:42:19:cf:b6:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A9:4C:9D:46:FE:DE:91:A3:DC:B1:E2:02:0C:B0:B5:FB:F2:98:8D
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323130303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2100::/48
Signature Algorithm: sha256WithRSAEncryption
36:b0:0e:31:6d:da:11:9a:8b:85:4e:ff:db:d7:f7:a4:9a:03:
ad:27:79:6f:6f:81:38:95:d7:3d:27:9d:7b:7a:d3:62:42:67:
3e:89:d4:cf:16:d4:79:55:e6:c2:57:66:c6:1e:a6:dc:e4:f7:
f4:4c:88:e3:9f:32:cf:a5:20:1b:be:f6:b1:1b:4c:34:e7:2e:
77:cf:f3:9e:29:cb:49:9d:38:26:94:ae:c7:c3:6b:c0:af:a4:
dc:a5:aa:fa:e3:2c:fd:7f:43:90:1a:c5:76:69:82:45:c3:0d:
e5:ed:d7:44:9d:f8:b5:40:c7:a3:5f:e4:93:46:c8:25:7f:d3:
0e:65:d0:59:a4:6e:7f:b9:23:9c:20:30:76:9e:fe:c1:77:7c:
dc:c5:e0:09:92:48:a3:c9:ae:49:f2:a6:a3:4f:a6:e5:99:6b:
6c:2f:13:29:05:1e:ad:0d:3a:a1:a0:cf:e6:24:68:ba:62:3e:
8c:c7:79:06:a1:76:55:ad:f1:f0:cd:cf:cf:cb:ce:df:6d:cb:
4f:7b:c0:62:d1:cf:b0:7f:08:af:da:b3:b8:45:62:3c:0b:ff:
e2:75:83:60:5d:e2:46:9d:1a:c2:37:cb:99:65:2e:da:cc:41:
af:3f:d8:c5:99:a3:bb:07:8f:92:2c:f1:98:89:f6:ef:45:15:
56:0e:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:40 2025 by rpki-client