Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a633066663a3a2f34382d3438203d3e203534363831.roa
File: 326130353a646663323a633066663a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: xghU4Ex7SY/5qvEcQQNVw6g64i2cqWqSSZjkVWoQuzs=
Subject key identifier: E0:9A:88:A0:CD:B9:39:63:2F:D4:2F:20:36:C0:E4:34:9A:F1:92:FF
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 0AFAF0355313CFC95FCF9EA530F130FFDF089874
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a633066663a3a2f34382d3438203d3e203534363831.roa
Signing time: Wed 17 Jan 2024 20:58:55 +0000
ROA not before: Wed 17 Jan 2024 20:53:55 +0000
ROA not after: Wed 15 Jan 2025 20:58:55 +0000
asID: 54681
IP address blocks: 2a05:dfc2:c0ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fa:f0:35:53:13:cf:c9:5f:cf:9e:a5:30:f1:30:ff:df:08:98:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Jan 17 20:53:55 2024 GMT
Not After : Jan 15 20:58:55 2025 GMT
Subject: CN=E09A88A0CDB939632FD42F2036C0E4349AF192FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:5a:79:36:43:0a:35:39:22:a1:4e:27:1e:
5e:6f:1f:83:9e:bb:4f:dd:71:9b:c5:52:59:58:e5:
64:3c:80:ae:99:c3:99:d5:6e:1a:e9:d0:72:6a:82:
12:a1:7b:64:99:17:96:35:0e:f1:9b:d1:29:94:6c:
9e:dd:5e:86:10:c7:c2:71:4c:a4:bc:2f:46:12:df:
c4:31:28:91:1f:b2:9c:70:72:2b:bd:ca:98:22:48:
13:c9:19:66:28:e8:fd:b7:b2:36:53:e8:2e:04:32:
a0:bd:18:2a:02:31:b2:ea:a1:7a:0f:3e:c5:29:a5:
70:48:89:fc:2f:0e:e4:c6:48:75:8a:b2:17:d6:1b:
3d:d8:39:ae:aa:a7:3d:a0:6c:a0:ba:36:4a:97:58:
b2:4a:36:f9:4a:3a:30:6b:d0:6b:24:8a:26:4c:be:
71:25:f9:c6:89:7e:35:e9:18:fe:ce:7c:11:b1:94:
c5:b8:5f:83:a6:0b:10:f0:a0:b5:87:d6:1e:ce:8d:
78:e9:79:09:40:e6:04:b8:04:aa:8b:a1:43:07:60:
37:13:5b:04:7e:a0:be:ee:c8:8d:8a:90:cf:bb:6e:
ef:fc:e4:35:8f:d1:0d:26:33:8e:15:ca:4b:d2:3e:
b1:de:97:f9:71:8e:59:18:5d:3b:82:f5:1a:52:29:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:88:A0:CD:B9:39:63:2F:D4:2F:20:36:C0:E4:34:9A:F1:92:FF
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a633066663a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:c0ff::/48
Signature Algorithm: sha256WithRSAEncryption
24:9b:f6:aa:77:3a:79:a1:ef:8b:24:01:77:85:fa:5c:d3:5d:
6d:1d:2a:15:b8:00:e3:2e:08:4c:09:a4:90:2b:ee:24:9e:5a:
76:a2:ac:9b:fa:71:a4:a3:c7:00:60:8b:02:a8:8d:8c:7f:b0:
e1:66:c1:02:f4:49:bc:16:19:d7:ad:fe:75:c0:98:af:3c:9a:
a0:d8:3c:94:92:7d:94:c2:12:65:ec:37:95:e5:97:9c:8e:42:
60:d0:67:e2:0b:79:ec:c3:a0:ad:68:cd:33:50:c6:fd:dd:79:
d1:0a:bb:8d:27:91:89:95:b0:2f:9c:e9:ef:9b:3d:ae:06:fc:
d4:f6:a2:40:de:87:62:3e:6d:69:d6:d9:a8:3c:84:72:53:ee:
cf:66:c7:b8:52:f0:bb:b8:b3:02:da:d7:5b:ea:d9:5c:23:e1:
99:e7:1c:91:e9:40:2c:0f:a9:b9:b1:25:81:d9:f4:9a:6a:0e:
24:d4:48:f8:d8:e2:4b:62:c5:bc:0b:23:31:b4:b1:85:1f:97:
96:8d:96:d2:3f:e6:9d:bf:ab:ca:93:e3:b5:7c:fd:69:7c:92:
d6:5d:41:09:26:fc:4b:53:f7:73:33:bf:f8:7d:bf:12:3e:0d:
ba:69:e9:f7:e1:aa:a0:57:00:5b:1a:66:20:69:b4:b5:49:c3:
6a:5d:63:df
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUCvrwNVMTz8lfz56lMPEw/98ImHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yNDAxMTcyMDUzNTVaFw0yNTAxMTUyMDU4NTVaMDMxMTAvBgNV
BAMTKEUwOUE4OEEwQ0RCOTM5NjMyRkQ0MkYyMDM2QzBFNDM0OUFGMTkyRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnj1p5NkMKNTkioU4nHl5vH4Oe
u0/dcZvFUllY5WQ8gK6Zw5nVbhrp0HJqghKhe2SZF5Y1DvGb0SmUbJ7dXoYQx8Jx
TKS8L0YS38QxKJEfspxwciu9ypgiSBPJGWYo6P23sjZT6C4EMqC9GCoCMbLqoXoP
PsUppXBIifwvDuTGSHWKshfWGz3YOa6qpz2gbKC6NkqXWLJKNvlKOjBr0GskiiZM
vnEl+caJfjXpGP7OfBGxlMW4X4OmCxDwoLWH1h7OjXjpeQlA5gS4BKqLoUMHYDcT
WwR+oL7uyI2KkM+7bu/85DWP0Q0mM44VykvSPrHel/lxjlkYXTuC9RpSKUNhAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQU4JqIoM25OWMv1C8gNsDkNJrxkv8wHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUH
MAuGdXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8x
ODg2MC8wLzMyNjEzMDM1M2E2NDY2NjMzMjNhNjMzMDY2NjYzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNTM0MzYzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwsD/MA0GCSqGSIb3
DQEBCwUAA4IBAQAkm/aqdzp5oe+LJAF3hfpc011tHSoVuADjLghMCaSQK+4knlp2
oqyb+nGko8cAYIsCqI2Mf7DhZsEC9Em8FhnXrf51wJivPJqg2DyUkn2UwhJl7DeV
5ZecjkJg0GfiC3nsw6CtaM0zUMb93XnRCruNJ5GJlbAvnOnvmz2uBvzU9qJA3odi
Pm1p1tmoPIRyU+7PZse4UvC7uLMC2tdb6tlcI+GZ5xyR6UAsD6m5sSWB2fSaag4k
1Ej42OJLYsW8CyMxtLGFH5eWjZbSP+adv6vKk+O1fP1pfJLWXUEJJvxLU/dzM7/4
fb8SPg26aen34aqgVwBbGmYgabS1ScNqXWPf
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:43 2025 by rpki-client