Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a363936393a3a2f34382d3438203d3e20313938383035.roa
File: 326130353a646663333a363936393a3a2f34382d3438203d3e20313938383035.roa (raw, json)
Hash identifier: p/5dy74CVLFq+nJWwYGbeqyrNn0HdU0b41rVbSfLQt8=
Subject key identifier: E1:A5:01:FE:DA:5A:CC:FB:96:15:17:69:DE:A0:BE:30:68:7B:79:C4
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 28648E71B9790F981755E1FE3BF10858C3D6EF2C
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a363936393a3a2f34382d3438203d3e20313938383035.roa
Signing time: Thu 20 Apr 2023 15:04:58 +0000
ROA not before: Thu 20 Apr 2023 14:59:58 +0000
ROA not after: Thu 18 Apr 2024 15:04:58 +0000
asID: 198805
IP address blocks: 2a05:dfc3:6969::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:64:8e:71:b9:79:0f:98:17:55:e1:fe:3b:f1:08:58:c3:d6:ef:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 20 14:59:58 2023 GMT
Not After : Apr 18 15:04:58 2024 GMT
Subject: CN=E1A501FEDA5ACCFB96151769DEA0BE30687B79C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:50:14:99:56:f6:1e:ba:50:59:74:9b:cb:
90:c0:6d:bb:b1:6e:05:76:d1:d2:00:81:dc:d4:95:
05:86:ad:67:7a:8b:16:ba:d8:80:74:e9:57:71:ed:
c1:d7:50:85:a1:7a:b9:f2:7f:6b:b3:2b:92:f6:be:
6d:0d:f8:ed:b7:51:39:ae:81:2e:ac:8e:cf:e3:3e:
5b:d2:e5:b0:46:96:88:02:af:5b:5e:00:ea:e0:9b:
7d:d1:32:45:31:2c:a9:e1:f2:50:66:84:91:eb:63:
d9:eb:48:c7:d4:aa:49:83:d2:d9:fe:0f:91:82:34:
44:a1:3d:a4:4d:63:9a:97:45:2c:8e:0c:27:fa:cd:
15:75:47:d8:7e:79:9f:f6:d5:ea:4d:2e:b5:88:a1:
01:f8:6b:3f:49:e8:44:d1:05:ae:2a:75:bb:ba:2d:
40:ad:94:08:3a:ba:2b:14:cd:6e:39:e4:25:3e:0f:
4d:4e:85:a4:79:50:ba:7f:9f:02:e8:16:b9:93:96:
5e:c6:ac:b5:93:6f:64:f5:d6:ea:f5:5a:a3:2f:7c:
e8:8e:19:11:d3:b5:ae:85:7c:23:08:37:3b:be:27:
f9:c4:77:a3:b1:f5:49:6d:a6:93:2b:d6:a1:87:db:
90:2b:ca:6c:c8:55:e8:94:09:14:66:b2:96:65:5b:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:01:FE:DA:5A:CC:FB:96:15:17:69:DE:A0:BE:30:68:7B:79:C4
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a363936393a3a2f34382d3438203d3e20313938383035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:6969::/48
Signature Algorithm: sha256WithRSAEncryption
3e:95:02:fa:4a:fc:94:28:ce:15:07:92:4b:dd:61:07:2d:6e:
14:41:b4:46:f1:80:81:be:d1:1a:2a:7d:06:ad:1d:b4:70:88:
95:b7:de:73:b3:6d:79:16:73:94:9a:32:6c:19:a9:58:1d:68:
eb:ff:67:9d:63:bf:a5:21:5e:d9:77:31:f3:1f:9c:b8:a4:72:
20:e6:a9:5a:3a:6e:a3:c6:78:20:93:33:eb:be:69:18:a8:c8:
f2:b6:07:97:f9:7b:8c:a2:fa:30:e9:1b:c3:18:b2:2f:7c:b8:
51:fa:57:0a:ee:a2:2c:d0:21:2f:fb:b5:b0:ed:e0:ba:4a:d1:
c7:61:b3:6d:37:b3:cc:34:a3:dd:34:e4:2f:39:4a:16:f2:e7:
11:cc:b1:cd:b0:16:a8:71:b4:25:d8:f8:c2:56:03:84:bb:80:
80:99:b3:cf:53:ac:8c:be:7c:a0:77:cd:6c:2d:36:ab:78:a5:
f9:b1:e7:08:02:c5:84:35:3c:39:b4:6f:2b:32:18:6a:7a:e0:
00:26:6b:0b:23:42:02:1b:1b:3f:e6:72:c0:f5:50:08:d4:1b:
47:8c:cf:0a:c4:03:70:e3:e5:42:3f:ce:16:4f:ed:7c:db:40:
94:3c:32:cc:43:07:c8:a6:09:a5:30:bf:c1:b9:ed:76:be:7f:
69:3c:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:06 2025 by rpki-client