Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323431313a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a323431313a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: 2r0CMvmQSfY9pFtKFeYhKD65rxvY64z8e+F6KsTZ9rE=
Subject key identifier: 66:B6:10:A3:95:DA:79:CF:A2:12:D3:18:5F:14:AD:53:3A:33:C5:90
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 3AF0EEE4057CB252263541AE68A3EEEEB837973E
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323431313a3a2f34382d3438203d3e20323030323432.roa
Signing time: Wed 05 Jul 2023 00:18:57 +0000
ROA not before: Wed 05 Jul 2023 00:13:57 +0000
ROA not after: Wed 03 Jul 2024 00:18:57 +0000
asID: 200242
IP address blocks: 2a05:dfc2:2411::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f0:ee:e4:05:7c:b2:52:26:35:41:ae:68:a3:ee:ee:b8:37:97:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Jul 5 00:13:57 2023 GMT
Not After : Jul 3 00:18:57 2024 GMT
Subject: CN=66B610A395DA79CFA212D3185F14AD533A33C590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:34:89:c6:ff:04:8d:ef:c6:a0:22:e2:4c:
11:b0:10:86:59:9f:83:d5:3f:e5:19:40:b9:79:8e:
24:67:a8:08:e2:e7:9e:aa:9d:b1:aa:7f:31:32:cb:
af:7c:d2:2e:b2:b3:a8:94:a7:56:dc:1f:2d:26:e4:
cf:27:ce:2f:91:93:e6:3e:b0:7d:aa:9e:64:a9:22:
62:19:8b:11:e3:e3:d1:d4:8f:95:1f:38:7c:32:ec:
1e:5e:e2:2e:fe:3e:bc:00:1e:1f:7e:da:b6:f3:ce:
63:8a:06:01:a8:d2:f6:8c:4e:b5:bf:5a:9e:66:d5:
24:49:1c:21:32:c1:f0:2b:80:91:c4:eb:99:c3:79:
e9:2c:6c:c7:30:a2:62:b3:71:b1:cf:11:c3:91:a9:
db:35:e2:be:01:23:c0:28:1f:b7:68:70:e6:80:ff:
fc:b6:fc:98:49:7a:d1:77:db:9d:b1:b6:26:55:97:
68:a4:84:cc:6e:e3:5b:f6:fb:f5:96:37:4e:bd:86:
cf:0e:c4:8d:20:70:89:b8:91:bb:0c:1c:8c:ae:c8:
2f:c8:79:f3:62:1a:52:df:6f:6a:d6:82:19:1b:b5:
72:ca:0e:5a:5d:03:a7:3b:09:b0:a1:93:ef:76:45:
e1:35:f2:e9:4c:46:54:59:4f:88:32:da:b3:08:df:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:10:A3:95:DA:79:CF:A2:12:D3:18:5F:14:AD:53:3A:33:C5:90
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323431313a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:2411::/48
Signature Algorithm: sha256WithRSAEncryption
04:4d:6e:6f:74:67:40:76:d2:76:ab:47:09:db:80:97:ba:03:
af:38:ac:84:a3:1e:71:8a:e6:b3:d0:31:29:73:3f:cb:e1:b9:
a5:ea:78:f1:fc:7b:0a:0d:88:3d:d4:d4:be:c0:b0:5b:12:b7:
46:72:d0:4a:6a:aa:25:a3:c5:a4:be:41:35:57:96:48:3b:b3:
fd:62:79:8d:50:63:5f:41:2e:f6:41:dc:81:25:bb:83:61:13:
bb:b8:c5:55:aa:51:85:b2:e4:4f:78:ff:b7:d4:fd:76:a8:ef:
0c:1c:42:ca:12:7a:08:1f:00:f1:6a:ad:ec:64:5f:68:bd:ac:
de:2e:fb:06:3c:39:1a:2c:7d:53:bb:b9:8b:50:e6:4a:03:ea:
15:20:f3:55:b6:61:34:2f:33:75:8b:70:a7:94:8e:e5:74:55:
67:e7:25:c3:87:57:5c:0c:39:bd:f1:cf:3e:9f:8f:53:1f:5b:
b2:e9:f6:b2:4a:9d:dc:df:e0:5e:2c:58:a5:52:d8:d4:bf:e9:
e5:3b:75:c2:3c:72:c6:98:93:a2:3e:50:79:b0:b5:59:b9:75:
e5:5e:c9:0b:1e:73:26:c5:f5:df:cb:11:cd:10:69:75:c5:2a:
5e:e8:6c:8e:20:7c:32:98:cf:27:59:d3:3f:99:2f:49:56:45:
5c:06:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:26 2025 by rpki-client