Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a3a2f34382d3438203d3e20323030323432.roa
File: 326130353a646663323a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: dZjIqBpfeKXsU5FgFcTZTvICQAifHBF4FG90ZqnXKrg=
Subject key identifier: B4:25:D3:1B:2E:56:48:AF:87:66:ED:AE:1F:C6:6A:F8:9C:C6:6A:BE
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 5F0EA72A12E1A4414A6BF7D80B1AF36E786697B1
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a3a2f34382d3438203d3e20323030323432.roa
Signing time: Sun 23 Apr 2023 18:53:33 +0000
ROA not before: Sun 23 Apr 2023 18:48:33 +0000
ROA not after: Sun 21 Apr 2024 18:53:33 +0000
asID: 200242
IP address blocks: 2a05:dfc2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0e:a7:2a:12:e1:a4:41:4a:6b:f7:d8:0b:1a:f3:6e:78:66:97:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 23 18:48:33 2023 GMT
Not After : Apr 21 18:53:33 2024 GMT
Subject: CN=B425D31B2E5648AF8766EDAE1FC66AF89CC66ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:32:e1:cb:55:6f:f2:10:c4:f0:33:15:2c:
13:a1:8b:e7:75:c4:46:d9:e8:ee:60:cf:29:11:ae:
3e:1e:91:3a:07:ae:27:71:4b:67:93:6d:5a:d7:80:
08:88:ae:d4:8a:bd:82:0a:ae:de:2c:46:97:c9:15:
6b:89:8b:c4:49:a7:78:da:54:9a:f9:6e:0a:d9:5c:
04:92:6d:01:29:d3:17:8a:3e:48:eb:45:7b:8f:e4:
52:1f:15:57:83:0a:d5:7d:b4:83:64:bf:cd:91:1a:
d7:09:83:74:f9:06:e1:6d:9a:af:e3:08:66:40:b2:
8b:07:26:fd:8b:f6:2d:77:73:b6:85:25:e8:65:7e:
58:d7:3f:e4:52:07:ca:c5:1a:7c:96:ff:2e:e9:31:
05:47:44:94:67:c0:9f:4c:42:3b:f5:3e:09:0a:c2:
3f:1a:68:3b:22:dc:e8:d7:0a:77:b9:6f:4d:24:ab:
ef:65:1c:98:92:a5:cc:e5:3c:fd:0c:d6:f7:57:9c:
64:82:57:65:0a:76:f0:97:35:20:95:19:75:fe:79:
05:0d:22:f1:45:03:f2:53:64:74:5d:54:68:12:92:
31:71:ed:b4:d3:6e:f4:28:08:91:07:df:92:ed:85:
bf:d3:37:00:2e:84:6e:a2:11:08:40:5f:df:09:37:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:D3:1B:2E:56:48:AF:87:66:ED:AE:1F:C6:6A:F8:9C:C6:6A:BE
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/48
Signature Algorithm: sha256WithRSAEncryption
29:1c:cc:37:ea:4e:46:83:75:e2:1c:ab:38:77:b5:ae:43:7a:
ae:06:d2:06:3a:95:ec:3d:9e:2b:d1:50:28:2e:d1:45:84:db:
36:30:d1:f7:51:e4:0a:79:b7:a6:f9:8d:0c:30:0b:07:a8:a5:
5f:0b:7c:9e:b1:90:4b:69:24:6c:2f:9a:6a:50:69:43:6e:e1:
f7:07:7e:b5:f4:37:42:c2:c4:21:16:af:5f:97:ae:2d:1b:9c:
34:8c:23:ca:76:09:0f:8c:81:83:e2:a0:71:1c:f4:ed:87:ae:
be:c8:98:ce:fe:02:11:39:77:28:ea:31:b6:b6:c2:b9:65:ff:
84:49:5a:5c:e7:e4:dc:a9:4c:ba:e8:42:3b:a7:1a:0a:e5:63:
2a:dc:63:a4:5d:8a:da:04:32:2e:0e:99:eb:15:63:33:9e:1d:
d1:83:bf:95:59:3e:ee:41:cb:f3:f2:d5:76:50:3e:f8:8d:ae:
10:a1:01:0d:9c:b5:d3:ec:f8:bd:ba:e7:64:64:31:38:4d:af:
42:f7:2a:bb:cd:4a:5f:9d:49:de:ff:4d:dd:c4:14:cb:c7:cd:
fa:31:97:f7:da:b1:80:fe:32:9c:68:42:d4:05:a8:d7:1d:d0:
31:45:57:7a:4e:22:b7:d8:c0:8a:33:19:1a:35:a8:be:5b:5e:
53:d3:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:37 2025 by rpki-client