Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a36393a3a2f34382d3438203d3e20313938383035.roa
File: 326130353a646663333a36393a3a2f34382d3438203d3e20313938383035.roa (raw, json)
Hash identifier: Ya3M+fPZ4P6mkv4I1F10HMp4asUhBxS1zsw+Y/YFMeI=
Subject key identifier: 7D:48:8E:E5:43:FF:76:06:D3:81:9B:96:14:D6:9F:DE:52:EA:0E:AB
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 0B8158049D88A5D6FE647B6D9684F01691D81691
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a36393a3a2f34382d3438203d3e20313938383035.roa
Signing time: Thu 20 Apr 2023 15:04:47 +0000
ROA not before: Thu 20 Apr 2023 14:59:47 +0000
ROA not after: Thu 18 Apr 2024 15:04:47 +0000
asID: 198805
IP address blocks: 2a05:dfc3:69::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:81:58:04:9d:88:a5:d6:fe:64:7b:6d:96:84:f0:16:91:d8:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 20 14:59:47 2023 GMT
Not After : Apr 18 15:04:47 2024 GMT
Subject: CN=7D488EE543FF7606D3819B9614D69FDE52EA0EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:78:4e:eb:62:42:60:95:ea:90:0c:1a:c0:
73:b3:6e:7d:0f:d9:a5:5c:59:52:2f:c0:35:57:95:
b6:58:d4:74:3c:06:60:ec:7c:b7:4f:04:ef:78:35:
7c:14:7c:4a:48:28:f5:a4:22:22:15:31:a9:e5:ee:
b8:7e:49:5c:cb:c2:48:42:82:12:a2:9a:c7:f2:50:
36:3b:7c:01:e5:ff:b7:91:08:b9:a2:90:72:6a:19:
c7:e7:74:f8:95:5c:3f:77:f3:cb:3d:bd:22:aa:18:
b7:56:86:50:fa:fd:2b:5a:aa:6f:b2:8a:28:80:7d:
3b:f9:3d:db:b7:1e:bd:30:b0:ec:62:3d:c2:8f:28:
ee:cc:44:fc:b6:60:0d:41:79:de:c1:a7:d0:51:05:
12:b8:be:c2:25:e8:31:a0:39:d1:0c:e0:cb:fd:b9:
9b:1a:de:f7:c7:ef:c9:e3:01:83:b6:d9:80:e6:8f:
bc:e9:58:a3:2a:65:11:23:a7:55:45:59:ed:22:e4:
4d:87:ab:84:a5:ff:a7:e0:f1:f7:6b:83:49:c3:e8:
47:52:0c:33:df:9e:6a:ed:41:78:e8:90:a9:c4:d2:
d4:ef:56:f3:6a:65:46:65:46:7c:ad:89:b5:91:86:
4b:f6:f4:f2:71:d6:22:a1:ea:da:6d:bd:ef:bf:93:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:8E:E5:43:FF:76:06:D3:81:9B:96:14:D6:9F:DE:52:EA:0E:AB
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a36393a3a2f34382d3438203d3e20313938383035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:69::/48
Signature Algorithm: sha256WithRSAEncryption
50:96:2d:cc:b1:c1:d0:32:d9:7e:e2:8c:be:c2:8e:8c:f2:a2:
49:18:ec:1a:ec:f6:36:84:cb:45:39:76:07:67:20:68:be:3b:
5b:7b:08:4c:6c:82:4c:94:a7:7c:31:52:7f:e3:06:21:99:88:
02:d6:cc:8b:ab:2e:9a:18:c1:e3:15:35:12:c5:59:a4:9d:fa:
5a:47:e5:c0:e0:9e:e5:21:fd:82:3d:ad:ca:2c:fa:99:56:14:
c3:6f:25:d4:5c:a9:34:5d:67:1a:dd:33:2d:a1:3d:c7:ef:73:
49:b3:e7:83:dd:49:40:e3:30:9a:63:b5:ee:2a:f0:c3:4d:54:
90:71:c2:8f:31:69:06:99:5b:cf:0b:fd:41:55:56:43:22:52:
87:72:88:1b:5f:1a:63:98:f8:48:35:3f:72:07:09:76:15:ab:
ad:21:da:83:84:e1:ed:e3:b0:3e:1e:91:e8:de:aa:fb:4b:9b:
61:a8:c3:b7:0e:1d:08:54:6a:20:99:d1:f6:7a:ca:6b:70:cc:
ae:b5:6b:7a:24:4f:33:35:84:54:76:a8:17:9c:2b:d4:2c:ee:
cf:ae:74:ec:fb:c9:22:bb:9b:73:ba:7e:11:a0:fb:68:be:71:
5a:c9:bd:9e:a8:ad:6e:fa:11:81:86:5c:11:17:a4:ee:6b:8f:
5f:70:d8:5a
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUC4FYBJ2Ipdb+ZHttloTwFpHYFpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yMzA0MjAxNDU5NDdaFw0yNDA0MTgxNTA0NDdaMDMxMTAvBgNV
BAMTKDdENDg4RUU1NDNGRjc2MDZEMzgxOUI5NjE0RDY5RkRFNTJFQTBFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UnhO62JCYJXqkAwawHOzbn0P
2aVcWVIvwDVXlbZY1HQ8BmDsfLdPBO94NXwUfEpIKPWkIiIVManl7rh+SVzLwkhC
ghKimsfyUDY7fAHl/7eRCLmikHJqGcfndPiVXD9388s9vSKqGLdWhlD6/Staqm+y
iiiAfTv5Pdu3Hr0wsOxiPcKPKO7MRPy2YA1Bed7Bp9BRBRK4vsIl6DGgOdEM4Mv9
uZsa3vfH78njAYO22YDmj7zpWKMqZREjp1VFWe0i5E2Hq4Sl/6fg8fdrg0nD6EdS
DDPfnmrtQXjokKnE0tTvVvNqZUZlRnytibWRhkv29PJx1iKh6tptve+/k+NDAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUfUiO5UP/dgbTgZuWFNaf3lLqDqswHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEFBQcw
C4ZzcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vSEFaRUxfVUlEXzE4
ODYwLzAvMzI2MTMwMzUzYTY0NjY2MzMzM2EzNjM5M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzEzOTM4MzgzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwwBpMA0GCSqGSIb3DQEB
CwUAA4IBAQBQli3MscHQMtl+4oy+wo6M8qJJGOwa7PY2hMtFOXYHZyBovjtbewhM
bIJMlKd8MVJ/4wYhmYgC1syLqy6aGMHjFTUSxVmknfpaR+XA4J7lIf2CPa3KLPqZ
VhTDbyXUXKk0XWca3TMtoT3H73NJs+eD3UlA4zCaY7XuKvDDTVSQccKPMWkGmVvP
C/1BVVZDIlKHcogbXxpjmPhINT9yBwl2FautIdqDhOHt47A+HpHo3qr7S5thqMO3
Dh0IVGogmdH2esprcMyutWt6JE8zNYRUdqgXnCvULO7PrnTs+8kiu5tzun4RoPto
vnFayb2eqK1u+hGBhlwRF6Tua49fcNha
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:05 2025 by rpki-client