Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323131313a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323131313a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: tDNmA7F1Jpy83lBnMhPm7avUTYMJcZ8Vz4p32dBw2Fg=
Subject key identifier: 6F:18:6E:43:A0:44:33:6A:04:37:77:A6:CE:EE:30:DD:B5:21:BC:21
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 5DD6C66D37D8F66E5BE4C6577A34C1AF8B898E87
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323131313a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:34 +0000
ROA not before: Sun 23 Apr 2023 18:48:34 +0000
ROA not after: Sun 21 Apr 2024 18:53:34 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2111::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d6:c6:6d:37:d8:f6:6e:5b:e4:c6:57:7a:34:c1:af:8b:89:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:34 2023 GMT
Not After : Apr 21 18:53:34 2024 GMT
Subject: CN=6F186E43A044336A043777A6CEEE30DDB521BC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:6f:1d:0d:82:0b:12:71:d7:40:1c:23:e4:
70:77:be:d4:7f:72:10:19:6e:2d:c2:e4:d6:90:01:
62:a6:67:0b:84:d9:8a:26:ee:a5:fd:1e:1a:ba:9b:
b3:3c:c9:ad:e5:df:e1:57:ff:61:41:f7:9e:9e:0f:
b1:10:6e:56:7b:7b:39:60:88:2e:b8:c3:66:c4:90:
9e:93:67:ed:8e:7e:cf:8a:3b:9d:5c:3a:79:e0:47:
38:ab:a3:16:18:d6:c6:4f:63:57:e2:e8:70:20:9e:
5a:81:2f:bf:7c:b7:5b:0d:45:66:1e:8f:71:dd:12:
b9:2d:4e:86:97:c2:cb:f5:23:f4:9e:d2:cd:47:17:
19:5c:42:6d:8e:ec:51:eb:6b:fc:27:54:15:67:3d:
cf:9f:25:77:81:3f:4e:14:01:b6:5f:dc:d2:40:71:
e0:72:5a:8a:30:ef:47:79:d4:51:61:0b:7b:f7:ee:
ec:2d:a6:d1:03:54:b5:9c:93:f3:b0:e0:ff:bc:8d:
06:53:3c:b8:f0:e9:0e:ec:9d:bc:4e:e5:18:d2:f3:
0e:dd:ff:33:a8:02:0f:26:de:67:4c:8c:ac:d0:dd:
5a:6d:58:49:53:74:7c:c6:d8:1f:d8:04:a9:66:21:
ee:63:6e:1f:37:ab:1b:ee:10:cf:b5:f0:a8:cb:97:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:18:6E:43:A0:44:33:6A:04:37:77:A6:CE:EE:30:DD:B5:21:BC:21
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323131313a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2111::/48
Signature Algorithm: sha256WithRSAEncryption
61:72:14:75:4e:b7:18:9b:0f:b3:c3:2c:a0:35:04:fe:3a:c9:
13:cf:73:f2:b0:97:5b:df:d0:3d:dc:53:9d:3f:44:e9:ce:9a:
3b:ff:64:3b:05:0f:7a:16:0b:49:c5:e5:03:63:3b:ab:65:1e:
fb:e8:32:de:68:7b:a8:1b:1b:04:90:d7:2b:5c:9c:31:bb:94:
f4:2c:af:ec:ed:18:e5:6d:ec:cd:ad:54:09:f2:29:10:78:c2:
f7:0c:25:ae:22:e2:97:19:55:63:8f:34:85:66:d4:59:47:d6:
df:b0:60:1e:c7:23:e0:a4:2c:d8:e5:45:81:7e:6b:6d:09:31:
a7:65:37:a4:b3:a9:af:18:bb:c3:3e:3e:2c:9f:96:ea:75:5d:
6c:c7:01:57:56:ba:2b:ab:c4:2c:ac:d6:ab:aa:54:76:09:fb:
67:06:69:87:48:9d:20:a4:d1:eb:63:5e:03:6e:27:5a:26:85:
e8:6d:14:fc:16:ac:04:3e:94:98:5d:3c:96:c8:6d:f9:34:f3:
25:fd:ea:e5:81:ec:94:59:8f:e3:aa:0f:fd:7e:43:3d:68:c0:
9f:62:2d:a1:bf:7e:73:bf:a0:ec:c1:28:ef:8c:13:1f:f8:4a:
0e:5a:21:ac:fd:94:ec:0d:00:8d:67:ef:26:03:b8:ca:68:e1:
52:66:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:50 2025 by rpki-client