Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a383030303a3a2f34302d3438203d3e20323037323030.roa
File: 326130353a646663333a383030303a3a2f34302d3438203d3e20323037323030.roa (raw, json)
Hash identifier: Yz6QyCaZ1lNn1oosvJQbSeLLDgFZsVSawPD6Mf9o+mQ=
Subject key identifier: 25:08:8C:04:DE:FC:4F:42:64:B5:1D:41:4B:8D:0E:6F:FA:C1:51:03
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 2E6BED9439B3F5881DCBC6BC8DE946225A3CCCCF
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a383030303a3a2f34302d3438203d3e20323037323030.roa
Signing time: Sat 12 Aug 2023 21:11:22 +0000
ROA not before: Sat 12 Aug 2023 21:06:22 +0000
ROA not after: Sat 10 Aug 2024 21:11:22 +0000
asID: 207200
IP address blocks: 2a05:dfc3:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6b:ed:94:39:b3:f5:88:1d:cb:c6:bc:8d:e9:46:22:5a:3c:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Aug 12 21:06:22 2023 GMT
Not After : Aug 10 21:11:22 2024 GMT
Subject: CN=25088C04DEFC4F4264B51D414B8D0E6FFAC15103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:9d:7d:cb:f4:c5:e6:b9:e2:b0:38:88:de:
3c:68:5f:b8:63:34:62:92:f7:90:65:46:9d:f5:f7:
0f:18:bf:5d:cd:a4:e5:34:52:c4:7a:28:95:62:92:
bc:f8:d6:53:ec:5a:97:27:28:46:21:3c:e7:bd:a6:
0a:53:16:d5:74:44:be:59:a8:2b:1d:45:19:fa:62:
78:81:60:76:49:c2:5e:0b:af:4d:0e:89:c3:94:42:
a5:fc:91:7a:f7:c5:1a:f9:ff:8b:42:ba:31:00:9a:
27:0d:a5:58:53:64:c0:db:7c:22:43:db:4c:d3:e7:
61:11:4e:68:4e:62:7f:e4:09:33:cf:9f:6f:45:62:
5c:3e:23:17:d1:a6:6e:5f:32:6b:97:2d:9e:56:e8:
20:5c:67:59:14:19:7a:17:11:42:01:da:18:7d:a7:
06:51:cc:64:78:19:09:c0:9f:95:1b:62:b1:0b:6f:
7d:b8:73:d6:54:6a:97:0c:eb:65:7c:c0:c2:ed:ff:
23:c0:be:bd:5e:88:9b:36:63:4a:ef:a8:9a:7b:08:
f7:50:ba:6d:9d:4c:63:9e:ca:79:52:f5:7e:94:09:
01:9c:d7:b4:5a:07:6d:86:05:20:c9:e7:09:a3:1f:
0e:e3:4b:cb:99:f0:56:e6:60:d1:a9:2a:e6:e7:5d:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:08:8C:04:DE:FC:4F:42:64:B5:1D:41:4B:8D:0E:6F:FA:C1:51:03
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a383030303a3a2f34302d3438203d3e20323037323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:8000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:0a:74:e3:d5:3a:6b:21:51:6a:8e:07:db:c0:ac:4e:7a:ac:
d7:92:73:ca:54:91:68:3e:e2:ce:4a:02:1f:69:59:d1:c5:56:
18:cb:93:89:2d:61:0a:3c:df:18:fc:1d:f0:fd:86:07:6c:63:
d3:e5:bf:a6:9f:0f:a4:9c:14:a8:55:10:ea:79:0a:21:be:93:
d5:da:a7:e7:f9:69:c5:f3:b8:2a:4e:aa:0d:64:54:a8:e3:f2:
2c:76:bf:66:d2:f5:3b:49:be:c8:00:5f:04:e6:0d:80:b0:27:
99:93:58:06:19:0d:56:aa:d9:f1:e0:53:98:c8:e3:8b:db:ab:
c0:f1:2d:fc:b2:3c:fc:0f:7e:d5:21:6b:53:1f:90:7a:1b:f4:
e5:9e:94:bf:2c:6e:b9:68:d8:ed:e3:d0:93:dc:3d:16:ed:24:
82:7c:67:bc:05:26:97:99:89:f1:9b:59:e0:96:b5:1e:50:b1:
fa:32:fb:67:f5:a6:6e:7a:eb:8c:00:f2:c2:02:5d:ab:57:67:
8e:78:0a:d2:f2:3c:8b:a6:b6:d4:b4:e4:09:e9:17:3a:b5:f8:
e1:15:67:a6:42:ba:e2:72:60:30:a5:96:76:33:c3:76:85:44:
e2:21:db:1c:e9:12:c1:f4:18:ec:90:0d:e2:5a:83:fa:91:a9:
46:a3:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:12 2025 by rpki-client