Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a3a2f33322d3438203d3e20323030323432.roa
File: 326130353a646663323a3a2f33322d3438203d3e20323030323432.roa (raw, json)
Hash identifier: tG/sPfZ4juLK/qjfCRJbfstgXzsBfgR25yFga/5ZFVw=
Subject key identifier: 91:8C:15:9B:03:A3:E8:55:35:51:E6:1D:B4:44:92:86:3A:AC:54:1E
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 0561CC05A054364B7A7CA2600BE60C6458270111
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a3a2f33322d3438203d3e20323030323432.roa
Signing time: Sun 31 Dec 2023 22:43:31 +0000
ROA not before: Sun 31 Dec 2023 22:38:31 +0000
ROA not after: Sun 29 Dec 2024 22:43:31 +0000
asID: 200242
IP address blocks: 2a05:dfc2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:61:cc:05:a0:54:36:4b:7a:7c:a2:60:0b:e6:0c:64:58:27:01:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Dec 31 22:38:31 2023 GMT
Not After : Dec 29 22:43:31 2024 GMT
Subject: CN=918C159B03A3E8553551E61DB44492863AAC541E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:38:0f:15:ee:aa:d0:7d:e6:8b:bc:0c:47:4b:
0e:28:42:85:37:5b:fa:dc:20:76:ef:27:a7:5a:e1:
d5:a6:1a:1c:2b:08:08:de:e9:cf:6b:67:a9:84:21:
8a:dd:bd:fb:12:73:25:a6:c0:49:5a:bc:e6:25:9e:
2b:55:46:71:0d:ca:90:69:12:8f:8b:88:cb:8d:7b:
d8:23:1c:91:85:f4:c4:5c:1a:2b:23:dd:79:7e:e5:
e6:43:2c:c6:86:79:79:3f:7f:56:42:ec:c6:c5:d5:
75:38:21:9f:4f:36:0e:6a:ea:e2:a3:60:e2:55:74:
da:2e:42:fe:15:49:2f:6d:3c:1e:2e:da:b7:21:e8:
65:77:56:2c:16:71:8a:04:86:ad:53:8c:a5:0e:d1:
11:56:f1:63:8e:e2:91:0e:87:a1:91:e4:95:7a:43:
a4:af:0b:b2:08:d5:fd:7d:4e:3c:de:f9:67:2c:fa:
72:d1:96:5a:d5:d2:bb:7c:fc:66:05:fa:f6:63:6f:
ee:ab:53:7a:28:5c:96:96:55:2c:44:e8:9d:fd:7f:
f1:74:0f:31:a9:b5:01:0a:5c:a0:5c:b8:75:de:3b:
15:a6:a1:39:40:6f:32:54:77:1c:65:61:b9:13:59:
95:4f:3b:59:cc:c5:8f:69:72:d6:cc:fd:c4:44:d9:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:15:9B:03:A3:E8:55:35:51:E6:1D:B4:44:92:86:3A:AC:54:1E
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a3a2f33322d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/32
Signature Algorithm: sha256WithRSAEncryption
7b:9e:13:9c:98:ce:9f:94:be:e5:56:69:31:a9:9f:f0:47:b2:
6f:34:e4:f9:9e:ba:06:bb:68:35:59:6c:9c:0c:23:85:1f:30:
75:6e:17:d5:d9:ab:ca:d1:de:4e:65:06:ea:14:93:03:18:16:
57:ef:15:4e:82:e2:3f:a5:33:49:6c:c0:66:87:b3:6b:98:a9:
77:40:64:7f:b1:43:b8:dc:ab:5f:f3:43:2f:f5:8f:a1:2a:9e:
de:b7:80:d3:22:bb:22:5a:3a:3f:e7:56:f2:55:2e:18:37:b2:
d7:6e:3f:ef:7e:7c:28:37:80:70:b7:44:59:93:a0:41:01:10:
5e:e1:9d:9d:0a:a8:80:7e:e6:ce:a2:dc:ec:62:9e:41:13:2e:
8f:92:9c:4f:b7:48:20:9c:45:55:86:7e:5a:75:c5:42:64:06:
94:51:55:86:f2:b1:f1:35:3e:90:94:40:ed:ce:2f:3e:fd:48:
1d:63:e4:d8:63:ce:2e:e1:7f:f7:09:f0:b8:25:d8:1c:50:d8:
ad:9d:1f:9a:0c:20:dd:f6:d0:ae:f2:4c:f8:93:0e:4c:bc:d8:
99:b9:7b:43:61:3e:2d:36:d8:68:58:65:b8:af:ad:14:9d:07:
73:73:99:9a:83:30:f7:cf:fa:c6:4e:f9:19:b2:19:b4:50:db:
b7:0b:7b:79
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUBWHMBaBUNkt6fKJgC+YMZFgnAREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yMzEyMzEyMjM4MzFaFw0yNDEyMjkyMjQzMzFaMDMxMTAvBgNV
BAMTKDkxOEMxNTlCMDNBM0U4NTUzNTUxRTYxREI0NDQ5Mjg2M0FBQzU0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOA8V7qrQfeaLvAxHSw4oQoU3
W/rcIHbvJ6da4dWmGhwrCAje6c9rZ6mEIYrdvfsScyWmwElavOYlnitVRnENypBp
Eo+LiMuNe9gjHJGF9MRcGisj3Xl+5eZDLMaGeXk/f1ZC7MbF1XU4IZ9PNg5q6uKj
YOJVdNouQv4VSS9tPB4u2rch6GV3ViwWcYoEhq1TjKUO0RFW8WOO4pEOh6GR5JV6
Q6SvC7II1f19Tjze+Wcs+nLRllrV0rt8/GYF+vZjb+6rU3ooXJaWVSxE6J39f/F0
DzGptQEKXKBcuHXeOxWmoTlAbzJUdxxlYbkTWZVPO1nMxY9pctbM/cRE2RNXAgMB
AAGjggIkMIICIDAdBgNVHQ4EFgQUkYwVmwOj6FU1UeYdtESShjqsVB4wHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUHMAuG
bXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8xODg2
MC8wLzMyNjEzMDM1M2E2NDY2NjMzMjNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMy
MzAzMDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF38IwDQYJKoZIhvcNAQELBQADggEBAHue
E5yYzp+UvuVWaTGpn/BHsm805Pmeuga7aDVZbJwMI4UfMHVuF9XZq8rR3k5lBuoU
kwMYFlfvFU6C4j+lM0lswGaHs2uYqXdAZH+xQ7jcq1/zQy/1j6Eqnt63gNMiuyJa
Oj/nVvJVLhg3stduP+9+fCg3gHC3RFmToEEBEF7hnZ0KqIB+5s6i3OxinkETLo+S
nE+3SCCcRVWGflp1xUJkBpRRVYbysfE1PpCUQO3OLz79SB1j5Nhjzi7hf/cJ8Lgl
2BxQ2K2dH5oMIN320K7yTPiTDky82Jm5e0NhPi022GhYZbivrRSdB3NzmZqDMPfP
+sZO+RmyGbRQ27cLe3k=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:37 2025 by rpki-client