Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323430303a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323430303a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: 50yCWCQ1zJB9egjA2Jgr9CI9iI971aOMw8RSBXqP7BI=
Subject key identifier: FD:03:02:57:15:0C:80:E5:DE:03:6B:D3:C1:FF:B0:B8:24:2C:81:4F
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 439EB851489F33D4D3F60E8F9A5AB65DA759E388
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323430303a3a2f34382d3438203d3e20323030323432.roa
Signing time: Wed 05 Jul 2023 00:19:19 +0000
ROA not before: Wed 05 Jul 2023 00:14:19 +0000
ROA not after: Wed 03 Jul 2024 00:19:19 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9e:b8:51:48:9f:33:d4:d3:f6:0e:8f:9a:5a:b6:5d:a7:59:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Jul 5 00:14:19 2023 GMT
Not After : Jul 3 00:19:19 2024 GMT
Subject: CN=FD030257150C80E5DE036BD3C1FFB0B8242C814F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:6f:37:84:d9:7b:3a:2c:ad:45:e2:36:d2:
f0:4c:e4:6d:ea:cd:d2:11:ce:77:74:fd:6b:b4:5d:
a2:39:1f:fa:bb:d9:54:62:e4:77:15:1c:13:85:ac:
2f:f3:22:f1:b3:5a:04:ef:57:bf:7f:8e:6f:6d:49:
bb:96:a6:39:d0:cb:ca:b9:19:9e:4f:6c:5f:11:a8:
59:86:3e:3c:92:93:f2:e2:20:78:05:d5:7c:94:4d:
73:bb:24:74:f8:bd:8d:39:36:8a:b7:25:35:e7:5a:
44:bd:af:80:e5:49:1f:e5:f1:83:26:ac:eb:d5:20:
02:d5:c0:11:e4:cc:65:e4:ec:ed:6d:69:38:87:63:
fb:48:07:2f:6a:84:c2:ac:7c:f1:1b:b6:fd:15:bb:
77:5a:3d:51:2b:b6:2e:d0:cd:22:e9:44:3d:5b:33:
06:7c:dc:74:1e:24:06:cd:c1:d8:14:2d:9d:1d:e7:
61:84:08:3f:07:ff:dd:30:f7:19:ca:80:44:79:4a:
ed:30:fb:10:83:af:73:cb:18:2d:c5:7d:a7:ae:51:
98:ce:0f:20:98:4a:75:7a:a0:d6:8d:2e:2d:47:b1:
e4:22:cc:ee:82:b9:f3:1e:58:ca:06:e4:4d:21:c3:
ad:87:a8:51:45:63:37:80:9f:4c:0b:14:50:49:36:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:02:57:15:0C:80:E5:DE:03:6B:D3:C1:FF:B0:B8:24:2C:81:4F
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323430303a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2400::/48
Signature Algorithm: sha256WithRSAEncryption
4e:42:9c:ff:a7:f2:a1:97:1b:61:ff:79:0c:c1:99:7e:a5:69:
4e:34:56:0c:40:9e:8d:0d:a6:dd:bf:df:44:af:c6:b8:07:6c:
e3:64:14:5c:66:c0:11:82:03:df:27:08:95:db:72:56:e4:15:
cf:df:8e:63:a3:e7:1f:9f:b3:a9:4f:82:85:8d:1f:d2:ca:fb:
82:f9:ee:04:87:f6:69:88:2b:65:da:34:21:56:6a:5d:9a:37:
c8:e7:f3:1e:74:c7:02:6b:ae:ab:9d:ce:c2:de:d2:e6:05:5a:
9e:d0:66:71:bc:af:ae:48:7a:8e:08:ce:36:28:a6:4e:29:ca:
45:dc:2f:42:df:e4:1f:bc:27:f9:ea:1f:1a:41:ba:cb:fd:5e:
68:16:7c:29:76:ec:68:ef:86:68:02:2f:41:c5:4c:cc:04:2e:
4e:9c:70:3a:a5:6c:8b:a3:f7:cf:77:b2:54:2b:a6:99:6c:b4:
fe:73:9a:da:b0:04:5b:b4:b5:ea:59:ed:d9:88:32:d3:ec:31:
07:54:d0:df:a8:5f:9a:90:5b:08:e5:c0:36:e6:8d:da:50:21:
6a:0a:33:26:af:22:81:69:e9:57:55:39:7d:6a:fc:ef:58:3b:
a5:c9:db:3e:ac:ba:f8:ef:39:11:60:29:3b:30:2a:ce:9a:ff:
29:2e:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:59 2025 by rpki-client