Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a3a2f33322d3438203d3e20323030323432.roa
File: 326130353a646663333a3a2f33322d3438203d3e20323030323432.roa (raw, json)
Hash identifier: 7SBw0gp7J2WlQeu4ARM4Mf6Gskd6V01J31GiUUV3o4M=
Subject key identifier: 46:D6:2D:FA:6B:38:11:2B:88:8E:5C:44:30:14:BF:AE:00:8E:95:8A
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 0C5A7448ED222D44E0397707B5E77EB8988863C2
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a3a2f33322d3438203d3e20323030323432.roa
Signing time: Thu 27 Apr 2023 13:45:28 +0000
ROA not before: Thu 27 Apr 2023 13:40:28 +0000
ROA not after: Thu 25 Apr 2024 13:45:28 +0000
asID: 200242
IP address blocks: 2a05:dfc3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5a:74:48:ed:22:2d:44:e0:39:77:07:b5:e7:7e:b8:98:88:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 27 13:40:28 2023 GMT
Not After : Apr 25 13:45:28 2024 GMT
Subject: CN=46D62DFA6B38112B888E5C443014BFAE008E958A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:bb:35:d3:39:6d:4f:79:06:a0:58:41:c7:
33:3e:f8:f5:24:1d:36:73:2b:15:e4:0a:67:b3:c3:
fb:40:8d:63:b8:65:10:15:88:19:b9:97:e9:44:86:
99:fc:26:f9:99:6c:d4:16:a6:e1:d3:a5:54:6f:7c:
a6:69:de:3a:01:4a:b7:e9:e7:37:8b:a5:44:36:46:
2a:80:c3:d7:f0:9d:de:ec:fa:46:3b:e5:59:d5:ae:
bd:13:a4:b6:5c:c6:58:2b:b5:83:4a:39:ee:37:f7:
ab:1f:4c:8e:3b:35:f3:67:d2:d8:d3:13:66:9d:99:
65:2b:7c:48:b1:65:d4:61:0c:bb:8e:82:9b:7c:f8:
30:78:f9:25:1d:db:a8:71:ed:5e:e3:35:f0:c5:9f:
eb:1f:1f:6b:01:89:9e:d1:fe:b9:7b:f5:b8:7f:5d:
6f:96:b9:60:e8:57:b7:35:27:f6:2f:ae:da:4a:8f:
f6:21:71:03:41:b4:a1:50:3b:ce:74:e9:7e:c8:86:
8c:2d:f7:fb:de:40:d6:27:af:05:03:31:a9:f6:10:
eb:7c:52:8e:33:17:79:35:a8:70:de:92:d8:67:07:
ed:45:80:29:7f:2d:6e:d0:24:8b:cf:08:79:09:d3:
aa:12:fa:db:4f:f9:bc:74:9c:28:d8:b2:71:fe:7b:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D6:2D:FA:6B:38:11:2B:88:8E:5C:44:30:14:BF:AE:00:8E:95:8A
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a3a2f33322d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3::/32
Signature Algorithm: sha256WithRSAEncryption
44:08:8f:7e:c9:41:46:1f:61:c8:94:c1:5c:25:21:70:66:a1:
53:1f:c6:46:de:1e:bd:10:ac:4c:0a:4a:c4:7b:1c:21:6b:69:
08:50:61:7e:96:f1:cd:19:28:8d:31:b7:4d:22:a6:27:10:04:
3c:11:01:87:a9:f8:c8:7b:2b:26:8e:85:c6:e0:8f:e1:c5:6f:
c7:4b:be:45:66:d8:87:1a:bd:59:a8:32:12:1f:0a:24:58:07:
31:36:40:57:a6:e7:6f:c7:d5:cf:e7:d2:31:1d:03:5d:46:ee:
22:c0:92:c7:5c:1d:c5:91:6e:bb:12:14:1b:74:62:92:4d:db:
4e:63:3d:39:6e:68:e7:c6:dc:f3:ac:d9:5a:97:77:a4:da:64:
20:c7:80:7a:e6:f9:50:8b:f9:0d:04:32:41:28:a3:f4:c4:a9:
32:e2:a8:ea:60:d1:f1:f2:37:54:4c:d9:be:63:d1:13:bb:41:
a2:2a:da:8b:5a:15:8f:78:4a:6c:6c:86:5e:33:72:e5:d1:18:
ba:c2:34:49:82:0a:ed:ec:9a:bf:a6:2c:60:d2:06:5c:72:cb:
24:c5:74:f1:09:c1:d4:da:0a:c5:71:8d:28:53:eb:69:59:ec:
a3:6a:f5:f2:e9:2e:a7:bf:6c:8a:d8:f0:09:4c:f5:49:40:b1:
40:10:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:07 2025 by rpki-client