Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323231313a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323231313a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: vv55iL/vthLslev74FetP5ndlR8wsDcdpoLvYTZOlHc=
Subject key identifier: 00:79:89:53:49:1B:0B:95:70:5C:4F:F4:C9:F9:31:4C:F6:3E:1E:EA
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 5EAD79365C3A8FAF25BD0DDC8EF6E63163001349
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323231313a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:33 +0000
ROA not before: Sun 23 Apr 2023 18:48:33 +0000
ROA not after: Sun 21 Apr 2024 18:53:33 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2211::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ad:79:36:5c:3a:8f:af:25:bd:0d:dc:8e:f6:e6:31:63:00:13:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:33 2023 GMT
Not After : Apr 21 18:53:33 2024 GMT
Subject: CN=00798953491B0B95705C4FF4C9F9314CF63E1EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:7a:ae:da:e8:14:6b:ab:96:3e:00:b6:8b:
73:c7:25:3e:84:19:f1:ea:e3:64:15:b3:ed:62:bc:
b0:4b:b5:e1:4f:7b:cb:8a:9d:bc:c9:be:14:65:f0:
37:62:c2:01:4c:e6:f5:35:27:67:49:05:c1:3b:79:
52:73:19:02:45:e8:4d:40:34:e5:da:df:b7:ec:fe:
75:f3:4f:f4:82:e1:e6:2f:a0:58:3c:fe:8b:3a:c7:
13:30:f2:b1:69:9b:23:e0:83:9b:7d:c8:e7:09:d0:
fc:a7:b8:a7:4b:16:67:38:18:81:8f:99:89:84:49:
df:76:0e:d4:d6:cd:7c:dd:98:84:ae:e9:d5:fe:28:
da:4e:0d:ae:48:d4:49:ac:67:2b:af:93:56:25:8d:
37:1c:91:93:01:45:53:e2:29:bd:bf:a3:83:00:cc:
6e:de:86:14:01:76:ab:24:86:1b:4a:4b:ca:fa:df:
26:93:9f:51:96:e8:c5:e4:a5:d6:ce:54:40:16:f4:
15:41:ed:45:90:93:e8:08:b4:3b:93:c4:02:43:ac:
8e:e7:27:a0:19:5c:a8:03:80:48:37:32:41:fc:bf:
31:5a:f5:b4:a0:59:96:a8:4b:a5:c6:e3:af:35:2f:
63:ce:31:ab:da:99:60:9e:a6:ee:d8:53:fc:a7:74:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:79:89:53:49:1B:0B:95:70:5C:4F:F4:C9:F9:31:4C:F6:3E:1E:EA
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323231313a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2211::/48
Signature Algorithm: sha256WithRSAEncryption
2a:d3:ce:d5:99:59:1b:ef:8f:03:77:48:e2:13:d0:a7:4e:7e:
ed:ad:b6:74:e4:0c:cb:16:a7:98:62:9e:8c:3e:43:0c:2e:59:
9c:09:5b:a4:f7:78:bd:8a:62:ac:75:a8:06:92:d9:52:cb:90:
50:a1:a5:b7:93:6e:6a:bb:02:aa:5a:3f:ba:62:38:b4:9b:b5:
38:11:0d:32:5d:b2:68:ef:95:de:00:58:34:d7:0b:00:bb:05:
ca:28:53:9e:20:d9:f5:97:3f:f2:30:e7:2f:0a:03:dd:eb:16:
31:1d:81:e0:83:bc:ee:f0:81:da:2c:e4:83:3a:ff:43:d8:da:
73:e3:21:bc:32:a3:c2:29:23:71:df:c6:05:b4:22:27:33:d1:
49:1e:b8:6a:b8:43:50:82:d3:66:fb:5b:7a:1f:5c:c8:5e:f4:
ce:3b:26:7d:e1:4b:15:94:03:c9:b0:8c:63:64:b2:88:86:d0:
ed:b1:21:d5:0c:a2:92:cc:96:03:80:02:19:b4:ad:64:56:37:
41:1f:e9:08:4d:56:1c:0a:d2:cc:e2:e0:be:be:96:1f:d9:4c:
c4:67:73:a2:da:42:ae:26:84:8b:d9:38:74:c5:98:3b:24:5b:
e7:52:93:4e:f7:7b:9d:0e:8d:6c:5f:66:f7:9f:8e:21:6c:37:
39:64:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:12 2025 by rpki-client