Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a633066663a3a2f34382d3438203d3e203534363831.roa
File: 326130353a646663333a633066663a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: hUUZoePd8FPi8KkHiuhNeF5jael2AFXkPYcuda+bDfk=
Subject key identifier: 12:61:2A:53:A0:17:75:D4:F6:B5:06:92:03:6F:22:84:4A:CA:D0:84
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 4665CBA860D5FB5A2D1A0505846B6D3CB25C2B29
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a633066663a3a2f34382d3438203d3e203534363831.roa
Signing time: Tue 04 Apr 2023 18:39:58 +0000
ROA not before: Tue 04 Apr 2023 18:34:58 +0000
ROA not after: Tue 02 Apr 2024 18:39:58 +0000
asID: 54681
IP address blocks: 2a05:dfc3:c0ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:65:cb:a8:60:d5:fb:5a:2d:1a:05:05:84:6b:6d:3c:b2:5c:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 4 18:34:58 2023 GMT
Not After : Apr 2 18:39:58 2024 GMT
Subject: CN=12612A53A01775D4F6B50692036F22844ACAD084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:50:1c:17:b8:69:a3:da:e1:e7:85:e6:bf:
a2:e7:9d:db:17:4a:12:e9:04:15:06:57:fd:19:31:
9b:6c:58:85:ea:2a:72:6a:90:22:57:46:f7:e3:d8:
1b:09:d9:9f:5c:78:59:b7:14:7e:e9:f2:af:64:e9:
6e:1c:80:6a:09:6c:3e:2b:37:63:a4:e4:5e:21:d1:
18:4a:37:c7:63:75:76:7f:39:a4:a3:d6:96:26:35:
b6:3b:0d:97:10:18:ea:65:99:59:25:1c:5c:19:b9:
ea:94:7f:2e:a4:f3:3f:42:ed:ee:03:66:85:c9:89:
06:4c:4e:42:94:8a:07:d8:d6:2b:95:d8:06:e5:b9:
a3:76:4d:4a:26:b0:63:6c:82:47:de:7a:7a:0c:e1:
84:5b:74:d9:79:bb:af:6b:76:24:26:25:87:93:92:
42:84:c1:d1:e4:77:80:6f:df:8f:5e:52:52:3a:a4:
31:83:6e:70:cd:d9:bb:12:d9:30:a3:04:23:82:77:
20:dd:09:67:8a:0a:83:60:63:d8:09:67:66:d5:90:
c5:f5:fc:94:7f:c6:49:f3:f2:a8:e4:69:0d:b3:6a:
b7:58:e7:72:f5:c1:94:6d:d1:77:19:9c:67:77:fb:
83:8a:f1:b9:93:1a:36:66:33:67:9c:c4:17:6e:52:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:2A:53:A0:17:75:D4:F6:B5:06:92:03:6F:22:84:4A:CA:D0:84
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a633066663a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:c0ff::/48
Signature Algorithm: sha256WithRSAEncryption
43:e7:f0:a0:8e:94:84:af:6f:7b:a7:18:e5:28:c2:80:db:07:
9c:9f:dc:bd:e0:a7:f0:a6:2a:85:47:48:38:f3:65:a5:bb:fe:
f6:8c:9a:4d:aa:af:0e:a4:33:8a:72:ec:87:17:bc:d8:69:98:
95:bb:cd:3b:ad:28:de:05:f3:ad:e6:5a:28:44:6f:6f:3f:cd:
58:1c:7f:27:56:4a:ae:ee:2f:6b:ad:72:39:7a:2d:45:c4:eb:
90:7f:08:4f:eb:cd:f2:ff:22:47:04:65:71:7d:27:bf:0c:ae:
79:a9:f8:80:c7:50:6d:3e:20:f3:f9:94:3b:9e:36:d0:6c:6f:
7a:79:3e:72:44:5a:ea:be:7e:1c:f2:0c:93:d3:5b:91:a0:77:
df:5a:f1:91:e5:4d:c0:b6:60:b4:27:5a:95:92:25:fa:fa:16:
69:2f:8d:9c:48:6c:1f:8d:3b:4d:07:92:bc:38:82:92:c9:c0:
b5:f9:86:4b:d1:b7:e0:a2:b8:e4:0c:0b:7e:fc:87:d0:2f:55:
e1:81:10:8b:9a:1b:24:89:88:67:23:d2:4c:72:ee:02:b8:bc:
9a:4c:66:15:75:3f:91:20:20:c4:2d:e5:4d:09:5b:59:76:f1:
dc:5a:43:c4:86:c1:d8:60:91:62:30:06:cd:b0:7d:89:d9:32:
ed:f8:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:22 2025 by rpki-client