Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a3432303a3a2f34382d3438203d3e20313937353130.roa
File: 326130353a646663333a3432303a3a2f34382d3438203d3e20313937353130.roa (raw, json)
Hash identifier: 3p9ht9vp7WPTIBbLdaLp1eeoiJKtDuo5bc2QkLeEcQw=
Subject key identifier: 65:1D:BC:AE:A6:4D:DD:35:27:71:39:FB:9D:83:41:48:38:7E:91:08
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 2C4593634D82C51953EDA3792D7C710B765D960A
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a3432303a3a2f34382d3438203d3e20313937353130.roa
Signing time: Fri 28 Jul 2023 11:22:30 +0000
ROA not before: Fri 28 Jul 2023 11:17:30 +0000
ROA not after: Fri 26 Jul 2024 11:22:30 +0000
asID: 197510
IP address blocks: 2a05:dfc3:420::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:45:93:63:4d:82:c5:19:53:ed:a3:79:2d:7c:71:0b:76:5d:96:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Jul 28 11:17:30 2023 GMT
Not After : Jul 26 11:22:30 2024 GMT
Subject: CN=651DBCAEA64DDD35277139FB9D834148387E9108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:1e:7e:e7:de:99:9b:58:92:d7:b5:a6:92:
45:71:4e:1a:4f:f2:69:e6:7d:7f:2c:41:40:07:2e:
79:8f:e6:3a:14:5b:f4:92:c4:51:f4:cd:f6:f0:47:
44:5d:a7:39:eb:6a:30:9b:71:b4:4b:5c:d9:ec:f2:
32:e5:e3:06:06:34:eb:8c:f5:bd:b7:eb:d8:44:5e:
4b:53:d2:96:b1:0c:40:66:fa:50:50:b9:20:19:4d:
15:ec:14:95:3d:b6:eb:35:66:8a:5b:4d:17:09:fa:
86:c9:e4:33:76:fa:1f:b8:5e:81:6a:8c:66:21:ae:
c2:9c:b7:91:3a:b6:96:d3:a9:07:b4:3d:1f:13:35:
ba:da:b5:fd:69:40:11:58:01:57:17:26:f2:69:28:
24:f3:55:80:ca:c3:6e:a0:df:7b:89:19:b2:b9:04:
11:c7:ba:b8:0e:20:58:a0:66:de:9e:13:d8:16:e2:
05:5a:dd:1f:73:61:f7:ff:79:95:c2:1c:a8:86:b2:
bd:39:f3:9b:2a:72:85:8b:62:8e:6d:c5:6c:7e:75:
18:66:37:02:d5:e3:17:fc:3a:53:37:60:e7:b1:8b:
a9:9c:d3:02:70:a9:b9:bf:87:34:19:b5:1a:6f:da:
ff:3d:fc:60:bb:8a:9d:67:d7:d9:24:d7:de:d1:10:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1D:BC:AE:A6:4D:DD:35:27:71:39:FB:9D:83:41:48:38:7E:91:08
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a3432303a3a2f34382d3438203d3e20313937353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:420::/48
Signature Algorithm: sha256WithRSAEncryption
6b:23:0b:cc:6b:f0:4c:d6:0b:e8:b4:2c:48:4a:9b:d1:ea:4c:
a7:9b:00:d8:27:f0:12:73:76:e2:02:82:41:fd:39:c4:75:de:
fc:c0:56:52:b5:fb:cb:55:97:0a:dc:76:b8:5d:bc:82:92:25:
63:9a:de:50:09:8e:4e:3c:0c:e5:79:d3:74:22:88:94:de:75:
a0:41:c3:77:04:66:5a:05:f9:c4:74:64:83:f6:c9:0d:9b:28:
a3:57:bc:a4:3f:ca:79:8d:71:31:dd:6d:49:71:31:13:55:80:
bc:01:a9:85:37:e8:e5:e1:dc:64:34:23:d7:b2:ea:65:c7:10:
8a:4b:91:76:86:48:21:f1:7c:40:3d:03:d2:ef:2a:57:78:bd:
50:39:e5:e6:cb:d0:a0:3d:6a:4d:a5:1c:6b:74:03:51:8b:90:
a3:0a:04:c3:19:30:e8:cf:8b:13:3d:c9:de:78:db:01:15:6d:
30:34:8d:fd:a9:cf:0e:4f:53:91:f8:07:59:dc:9d:07:f2:bd:
ee:2a:3c:f8:11:1f:7f:6f:f5:e0:ca:7b:37:ff:bc:d2:72:07:
75:bc:00:b3:27:ff:3c:26:db:33:2e:38:b9:52:35:f9:08:e7:
0a:a2:42:7d:74:e2:2c:84:e9:d6:4c:02:33:92:67:03:63:14:
4c:65:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:41 2025 by rpki-client