Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a636166653a3a2f34382d3438203d3e20323035373839.roa
File: 326130353a646663323a636166653a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: GLKDtPEaEeQGt/9AoR9+8fGSlXnD9IKKvTkYoHSBrik=
Subject key identifier: AE:56:35:6A:C4:CA:69:97:79:62:3E:9B:A2:70:1C:17:AA:4C:7A:EC
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 1E18743033DEC4CA56833BBAF5BB39135452237E
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a636166653a3a2f34382d3438203d3e20323035373839.roa
Signing time: Wed 17 Jan 2024 20:57:45 +0000
ROA not before: Wed 17 Jan 2024 20:52:45 +0000
ROA not after: Wed 15 Jan 2025 20:57:45 +0000
asID: 205789
IP address blocks: 2a05:dfc2:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:18:74:30:33:de:c4:ca:56:83:3b:ba:f5:bb:39:13:54:52:23:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Jan 17 20:52:45 2024 GMT
Not After : Jan 15 20:57:45 2025 GMT
Subject: CN=AE56356AC4CA699779623E9BA2701C17AA4C7AEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:d7:60:3b:9a:9b:00:e3:d9:0a:04:56:17:
3f:43:db:c2:a6:13:03:62:cc:ea:0c:92:d4:00:88:
fc:1c:0d:e6:73:f9:f6:c6:77:79:c8:05:e7:c6:eb:
f3:ad:a9:aa:87:57:ba:fc:9f:bc:26:35:95:56:50:
d6:e2:24:13:c6:b0:98:6c:3a:02:8a:95:b2:a0:9d:
cd:41:66:93:db:f0:88:93:e1:2f:2e:02:40:b5:2e:
73:42:9d:c2:84:98:38:5d:7f:2e:c8:aa:5d:ad:e0:
c5:b1:c3:48:76:50:43:ad:68:6e:5d:74:04:67:2a:
9d:9f:70:89:d0:9e:52:b7:b1:40:83:19:f2:31:ee:
25:2c:23:54:5f:5e:fd:ff:05:0c:1b:a3:91:26:d0:
fd:2e:d7:59:bb:e4:8b:79:c0:7b:66:8e:dc:4a:05:
54:f3:41:e7:34:58:7b:82:ed:ae:e1:e1:a2:ce:9d:
b5:f3:26:82:8a:52:23:f0:78:a5:72:51:ef:f4:f6:
61:eb:13:05:6d:59:2c:54:63:c8:4c:b9:81:5e:8e:
d4:8d:29:15:71:0b:09:20:5a:23:82:4b:96:dc:9a:
c5:1f:fd:7b:d6:b2:c4:ff:a8:0c:cd:2b:58:81:0c:
65:3f:a9:55:ac:a2:e9:0f:b5:9c:9f:b1:78:c9:9c:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:35:6A:C4:CA:69:97:79:62:3E:9B:A2:70:1C:17:AA:4C:7A:EC
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a636166653a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
39:34:73:76:1c:ef:8b:4b:8e:a9:82:07:97:54:f7:de:e4:3a:
72:57:ba:19:1a:b2:7a:3f:db:b3:8a:80:b5:32:7e:29:d2:1a:
5a:f2:62:08:42:ed:a8:d0:42:0d:de:70:4e:81:d9:e9:e4:9f:
c2:2b:f1:ae:a9:85:c1:ff:97:b1:b7:7c:78:ae:21:b4:1b:69:
d8:a2:a2:5a:1d:e3:8d:87:8c:3f:70:b4:1d:df:02:c8:a2:3f:
69:77:dd:02:8a:17:77:47:cf:52:2f:09:53:0d:bb:a0:e4:8f:
25:fa:5b:b4:dd:4a:6d:e3:d6:4d:2e:18:e6:69:cb:36:6b:0b:
b9:e9:ea:9c:51:b1:4b:ff:61:f2:b0:8b:ea:79:a9:9f:e3:64:
8c:c2:c4:a4:f1:98:3f:ef:c5:b1:d6:6b:bf:6a:59:f6:1e:54:
f4:68:d8:32:18:5d:61:8c:52:a3:52:1b:48:41:5c:b8:78:2e:
2e:ed:90:41:f7:52:b2:cd:05:1c:16:a8:0c:d7:08:2e:3d:95:
83:73:55:c2:eb:45:f0:e9:29:b8:b8:69:48:51:99:26:f7:c4:
bd:ac:66:46:0b:a0:2e:a2:82:a7:c4:63:21:53:5f:38:94:56:
64:cb:8f:ce:d4:18:af:0b:d6:36:40:7b:b5:ee:6a:82:d9:77:
7d:9f:ad:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:22 2025 by rpki-client