Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323331313a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323331313a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: gTYptUPQvhUUPE2y3i3ed31Ux27NPtW1VYKoHo/BM70=
Subject key identifier: 79:4D:0B:8D:50:B7:3D:8F:F2:83:1D:6E:75:D4:C9:96:2D:3A:BA:45
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 3C8E7AA70831E28ADC2A5217554958D9180D9F0A
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323331313a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:34 +0000
ROA not before: Sun 23 Apr 2023 18:48:34 +0000
ROA not after: Sun 21 Apr 2024 18:53:34 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2311::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8e:7a:a7:08:31:e2:8a:dc:2a:52:17:55:49:58:d9:18:0d:9f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:34 2023 GMT
Not After : Apr 21 18:53:34 2024 GMT
Subject: CN=794D0B8D50B73D8FF2831D6E75D4C9962D3ABA45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:37:66:02:37:30:9d:57:53:3b:8b:83:d3:
c9:76:2e:7c:4a:2d:47:88:32:a7:5b:29:57:e2:54:
fd:ce:95:46:40:02:bb:2e:f2:02:40:0d:98:e1:f2:
13:5b:39:f1:47:28:2d:09:59:8e:37:0e:6b:ed:14:
02:03:8e:de:04:33:5a:c5:b5:31:4e:97:81:76:58:
10:fa:17:77:45:51:22:36:7d:80:cb:28:ae:23:d6:
2f:f8:0b:a7:8e:6e:10:f0:21:08:9d:13:66:79:b3:
55:8c:55:22:76:27:7b:6e:d8:97:25:9c:04:0e:92:
d1:37:5a:55:39:6b:27:70:e3:53:4f:c2:84:b6:90:
d5:d9:36:d6:a3:3e:ae:54:e2:d9:bb:e7:c9:17:b9:
a1:c6:63:98:3c:22:b3:69:f2:0f:89:32:a3:58:33:
0f:c0:10:ec:bd:e4:8b:fc:6e:6f:15:be:cc:fb:11:
e1:af:f6:fc:02:b0:5d:67:b9:be:02:30:9d:5d:aa:
9d:9a:a6:6c:e2:70:6e:fc:2f:07:f9:23:f5:1d:a3:
5a:a8:f1:e7:06:83:68:03:1e:d5:fb:88:7a:22:66:
af:15:e3:95:bd:f7:26:08:62:ce:3a:a3:66:66:e0:
05:4a:c7:72:b5:cb:44:50:ed:f7:6e:ac:c9:51:6c:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:0B:8D:50:B7:3D:8F:F2:83:1D:6E:75:D4:C9:96:2D:3A:BA:45
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323331313a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2311::/48
Signature Algorithm: sha256WithRSAEncryption
80:6b:80:30:80:00:d1:90:e4:1c:6c:d2:b1:81:96:84:5a:88:
4b:0a:46:2a:69:0b:21:4a:3d:36:ac:c0:c8:e7:29:1b:f5:47:
6a:c0:19:66:38:12:9a:68:6a:2f:80:92:2b:19:77:97:f9:52:
a0:3a:f0:3e:60:ab:c9:ae:b0:5f:a7:86:17:de:c9:fb:c4:fe:
5e:e9:23:5e:b6:63:38:0d:60:61:20:1c:96:bd:7c:64:5c:6d:
ec:a9:ca:ed:7c:0a:f8:cb:35:04:e5:a7:05:a1:f0:a6:64:8f:
94:60:06:91:4e:85:9e:e9:c1:4c:b0:de:9c:08:ff:56:84:90:
41:84:e0:2c:a5:77:51:91:cc:28:3d:a2:44:d8:db:1f:b2:14:
29:88:02:5a:70:e7:44:bb:72:8b:d1:1c:6f:c2:f8:7c:7f:11:
c3:1f:fa:d9:8d:22:42:f8:b3:be:0d:03:4d:5b:3c:8d:d2:a9:
c7:0a:e6:ce:21:57:0a:4f:18:6a:57:26:db:e4:50:da:00:cd:
5a:3b:4a:31:5d:d7:3d:3a:27:03:94:b9:af:6b:52:19:24:a7:
ad:34:27:69:e8:a9:e8:d0:e1:ea:8d:47:c0:be:e7:ce:55:e4:
8b:62:81:61:18:95:72:41:36:ff:2a:a2:62:b1:e6:a0:4e:5a:
5d:e5:af:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:57 2025 by rpki-client