Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a646561643a3a2f34382d3438203d3e203534363831.roa
File: 326130353a646663323a646561643a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: Rh4Nlu/ft5A+ZpZN2G5SlAH5moWZ3sLh4gPtY9H181Q=
Subject key identifier: E1:3C:98:04:08:E3:D2:C1:BB:62:65:C0:21:D8:BA:92:66:F0:A5:66
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 08359DC657366EA98B0487F9E0300005189CBE0F
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a646561643a3a2f34382d3438203d3e203534363831.roa
Signing time: Wed 17 Jan 2024 20:59:15 +0000
ROA not before: Wed 17 Jan 2024 20:54:15 +0000
ROA not after: Wed 15 Jan 2025 20:59:15 +0000
asID: 54681
IP address blocks: 2a05:dfc2:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:35:9d:c6:57:36:6e:a9:8b:04:87:f9:e0:30:00:05:18:9c:be:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Jan 17 20:54:15 2024 GMT
Not After : Jan 15 20:59:15 2025 GMT
Subject: CN=E13C980408E3D2C1BB6265C021D8BA9266F0A566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:8b:ed:9d:53:37:0c:bc:eb:d1:75:16:b6:
1d:1b:58:db:35:54:e1:ef:e7:22:09:9c:97:63:b5:
7d:64:34:67:b5:e7:87:43:1e:95:5f:84:dc:21:7a:
cb:48:79:be:69:73:bb:cc:e2:4e:27:37:96:e1:8c:
cb:c2:df:83:b1:ab:27:51:0c:28:2e:65:e3:56:44:
9f:1a:00:b4:63:48:1c:c6:8a:b7:95:4a:ac:fb:ed:
f5:fd:e3:92:19:7e:bc:a5:da:9d:a2:13:f5:ae:8a:
61:ad:bd:49:b1:cc:01:63:6a:62:8c:36:e4:0a:66:
4b:d6:7e:40:5f:2c:cb:03:86:33:93:15:b6:0e:53:
2e:15:43:5c:dc:e7:8a:c2:6b:d2:35:89:40:44:97:
c7:13:d1:d4:3f:7e:9e:b7:62:7a:55:5a:61:4c:75:
82:38:7b:ba:c7:d3:ab:27:6c:5c:58:22:ec:96:90:
55:c0:fc:b4:51:39:8d:df:ca:2a:31:b5:10:1a:16:
73:f6:e8:e4:15:84:6f:df:ee:52:86:fe:d4:51:45:
12:d2:26:13:a3:72:85:b3:ab:45:91:b3:d1:cd:8f:
02:36:8c:b9:81:76:ed:0f:df:45:cc:eb:2b:36:91:
4f:37:b3:51:61:5a:49:50:db:cd:e6:12:29:08:2b:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:98:04:08:E3:D2:C1:BB:62:65:C0:21:D8:BA:92:66:F0:A5:66
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a646561643a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2:dead::/48
Signature Algorithm: sha256WithRSAEncryption
8a:33:da:de:6f:42:26:ad:52:65:3a:f2:6e:37:e3:ca:ac:03:
9b:30:d4:7e:a5:0e:56:1b:8f:e4:7e:05:19:df:f5:e2:71:d3:
e5:ba:2b:0e:2d:f0:f1:45:92:8b:fe:09:df:dc:6e:1e:be:98:
2f:d7:17:20:f6:91:45:74:69:96:30:0b:4b:bf:9f:43:03:c9:
14:30:cb:0e:e8:c7:cd:65:b5:7f:5b:7c:fe:f2:e3:c3:93:bc:
75:25:4f:09:f1:db:56:72:7f:66:b3:f6:f2:ef:47:8d:44:e4:
3d:8a:7f:19:26:14:e5:57:63:ad:57:da:3a:13:7b:5e:b9:42:
31:41:42:79:93:22:4b:d6:49:f9:fd:30:b8:a6:a5:27:4a:4b:
9c:88:5c:45:b7:f5:8c:49:ae:d7:87:67:42:40:a7:b4:3b:d5:
c9:64:75:9e:b5:40:4f:90:46:56:ed:2b:c5:72:8e:a5:96:0a:
06:06:8c:6f:be:15:40:a3:72:5e:ba:18:69:38:b9:b2:64:db:
fb:29:13:9c:3c:db:77:32:a9:63:ce:95:b6:4d:4a:c0:0a:bf:
61:5d:bf:c9:1e:fc:63:1c:59:de:d4:39:3c:8a:c6:bf:5a:c6:
54:af:6c:ec:72:89:f6:0c:e5:f6:b1:bc:34:ac:e7:15:a3:75:
e7:4f:49:00
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUCDWdxlc2bqmLBIf54DAABRicvg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yNDAxMTcyMDU0MTVaFw0yNTAxMTUyMDU5MTVaMDMxMTAvBgNV
BAMTKEUxM0M5ODA0MDhFM0QyQzFCQjYyNjVDMDIxRDhCQTkyNjZGMEE1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T4vtnVM3DLzr0XUWth0bWNs1
VOHv5yIJnJdjtX1kNGe154dDHpVfhNwhestIeb5pc7vM4k4nN5bhjMvC34OxqydR
DCguZeNWRJ8aALRjSBzGireVSqz77fX945IZfryl2p2iE/WuimGtvUmxzAFjamKM
NuQKZkvWfkBfLMsDhjOTFbYOUy4VQ1zc54rCa9I1iUBEl8cT0dQ/fp63YnpVWmFM
dYI4e7rH06snbFxYIuyWkFXA/LRROY3fyioxtRAaFnP26OQVhG/f7lKG/tRRRRLS
JhOjcoWzq0WRs9HNjwI2jLmBdu0P30XM6ys2kU83s1FhWklQ283mEikIK3OZAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQU4TyYBAjj0sG7YmXAIdi6kmbwpWYwHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUH
MAuGdXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8x
ODg2MC8wLzMyNjEzMDM1M2E2NDY2NjMzMjNhNjQ2NTYxNjQzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNTM0MzYzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwt6tMA0GCSqGSIb3
DQEBCwUAA4IBAQCKM9reb0ImrVJlOvJuN+PKrAObMNR+pQ5WG4/kfgUZ3/XicdPl
uisOLfDxRZKL/gnf3G4evpgv1xcg9pFFdGmWMAtLv59DA8kUMMsO6MfNZbV/W3z+
8uPDk7x1JU8J8dtWcn9ms/by70eNROQ9in8ZJhTlV2OtV9o6E3teuUIxQUJ5kyJL
1kn5/TC4pqUnSkuciFxFt/WMSa7Xh2dCQKe0O9XJZHWetUBPkEZW7SvFco6llgoG
BoxvvhVAo3JeuhhpOLmyZNv7KROcPNt3MqljzpW2TUrACr9hXb/JHvxjHFne1Dk8
isa/WsZUr2zscon2DOX2sbw0rOcVo3XnT0kA
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:55 2025 by rpki-client