Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323330303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323330303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: qOtOulTKSQfdpkEsRK315kcbzDXMzysgEhGbPMPnc9g=
Subject key identifier: 54:A1:D6:83:63:38:E3:AB:08:4D:74:0C:C7:7F:87:60:A5:70:3D:55
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 010F40E5865259F0144A9CDE7877FBE87B2D02DA
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323330303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:33 +0000
ROA not before: Sun 23 Apr 2023 18:48:33 +0000
ROA not after: Sun 21 Apr 2024 18:53:33 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0f:40:e5:86:52:59:f0:14:4a:9c:de:78:77:fb:e8:7b:2d:02:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:33 2023 GMT
Not After : Apr 21 18:53:33 2024 GMT
Subject: CN=54A1D6836338E3AB084D740CC77F8760A5703D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:28:35:9a:80:1f:98:d9:16:b4:2c:63:5d:
8b:c3:8b:6c:3b:4f:de:f2:08:7e:4d:25:fc:d6:44:
6d:fd:70:ca:91:c6:b6:8f:7e:a2:63:2e:78:4f:89:
a7:0f:4d:e9:f8:08:3e:78:a3:8f:17:0a:48:43:da:
8d:7e:13:4a:93:0f:7c:6b:0c:fe:59:ee:72:43:61:
da:39:0d:7d:fe:00:b9:d0:4e:80:0f:5a:a6:36:8c:
78:4c:6f:74:a9:38:1c:c7:d9:8a:f7:74:4a:53:c5:
8c:0f:a9:f9:d9:63:8d:c3:d3:3e:48:19:52:aa:07:
56:bf:63:b1:ea:6c:9a:49:2f:f8:90:69:20:59:d6:
7a:35:b0:92:9e:b9:27:39:c3:f1:ec:c4:ef:da:7e:
50:b0:9a:8f:05:f0:62:e7:ae:10:78:53:7a:a4:50:
67:6b:68:8b:da:64:6b:03:85:74:7c:df:8c:d5:95:
5b:9d:cd:0d:9a:7c:53:e1:ca:df:7c:9d:9d:a8:9f:
60:6a:50:c3:f4:38:5e:2a:99:58:3d:08:08:ca:be:
36:cb:29:d6:c2:7d:30:68:5e:11:75:3d:6e:f0:1d:
db:f4:6f:b6:8b:30:c4:1f:11:cc:4f:e7:8f:91:3c:
45:a4:32:0f:59:b4:75:cb:d9:51:87:da:15:c2:69:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:D6:83:63:38:E3:AB:08:4D:74:0C:C7:7F:87:60:A5:70:3D:55
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323330303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2300::/48
Signature Algorithm: sha256WithRSAEncryption
4b:17:c6:41:6e:12:04:a4:ed:7d:18:fd:af:d4:12:f6:f7:e8:
f2:c3:5f:47:83:b1:f9:10:2d:5d:aa:d8:e7:5b:a2:1a:3a:9a:
49:65:af:71:19:71:70:37:11:d8:5d:d6:a6:72:37:c3:c8:20:
32:e2:0b:84:46:5d:62:4c:b4:8f:03:10:64:0a:2c:00:f4:70:
f2:50:5f:ec:18:54:43:86:12:9b:5f:33:58:e6:2e:e9:cc:76:
3f:14:6e:9a:25:78:79:34:6d:22:df:32:52:10:10:cc:49:6f:
28:64:d6:1e:41:9e:b6:f6:3a:9a:3f:57:e1:af:5c:51:b8:c7:
51:40:c0:70:9f:88:73:57:28:ea:b4:aa:e8:f2:c3:20:e5:73:
5f:aa:6a:ac:b6:42:f5:2d:a8:04:1c:9a:0f:39:30:10:aa:ab:
9e:77:95:46:66:b3:b9:89:7a:12:37:3c:65:1f:ab:10:5e:ab:
a2:9c:42:63:29:77:30:16:1e:c3:69:0e:0b:5c:59:55:3c:00:
5f:7d:12:8f:33:b9:ef:59:ff:15:1f:50:5e:af:7f:61:27:2c:
49:a4:60:bb:78:d1:83:09:b5:7f:77:d2:ab:77:11:9c:6a:29:
75:63:c8:e3:58:d3:f3:bd:6e:e4:98:cd:95:68:8d:f6:84:34:
89:7a:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:23 2025 by rpki-client