Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa
File: 326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: eYhCZl6CY67IB/uX4ULPqgFXgiOIgfgPhDbFY/JjEgs=
Subject key identifier: 66:43:C9:14:AF:A8:EA:D8:08:59:7F:B4:07:DB:07:B1:77:93:79:FA
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 1F0BBC8A0D04CAFAFEF74CF0A495A991DC86E76F
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa
Signing time: Thu 13 Apr 2023 22:17:10 +0000
ROA not before: Thu 13 Apr 2023 22:12:10 +0000
ROA not after: Thu 11 Apr 2024 22:17:10 +0000
asID: 205789
IP address blocks: 2a05:dfc3:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0b:bc:8a:0d:04:ca:fa:fe:f7:4c:f0:a4:95:a9:91:dc:86:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 13 22:12:10 2023 GMT
Not After : Apr 11 22:17:10 2024 GMT
Subject: CN=6643C914AFA8EAD808597FB407DB07B1779379FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:d0:59:c6:aa:02:13:42:f3:a0:bf:55:f1:
f1:ce:e0:fa:ff:23:8e:7f:8b:bb:ab:d8:04:88:01:
da:31:64:b2:ac:0f:fb:60:bc:64:91:23:d9:1d:06:
c0:c3:24:09:70:a8:c5:9c:7e:57:29:1f:ef:39:ef:
cd:43:6e:ed:ab:04:37:78:60:c1:4a:32:93:1f:c3:
90:60:8b:ef:02:d6:50:cd:82:2d:df:ae:38:8b:d0:
66:5c:e1:84:3f:23:d5:5e:34:22:4c:db:f3:c3:9d:
02:5c:9a:f6:17:e6:a5:dc:b0:40:6e:30:e3:50:f5:
be:57:53:46:8a:62:fd:2f:0d:78:d8:ab:ec:6c:fa:
b6:e2:86:df:d5:ca:26:cc:0f:52:fe:14:10:b6:bc:
98:42:4a:cf:c1:69:61:26:3f:4f:2d:3e:36:fa:48:
f0:b3:07:9c:e7:57:55:87:70:6d:8e:f7:2d:8a:78:
a5:8a:c8:56:e4:92:43:60:fd:89:02:96:63:6c:fa:
d8:bf:8f:b0:64:64:af:f9:7a:af:fb:cb:28:ce:0a:
c9:85:67:d0:74:e2:a9:87:21:d1:3e:62:17:e3:95:
7b:cb:f0:19:80:b5:6e:63:9a:49:d0:fc:38:3a:20:
d8:7e:f3:7c:c8:2a:12:f9:f6:dd:eb:fe:c5:14:78:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:C9:14:AF:A8:EA:D8:08:59:7F:B4:07:DB:07:B1:77:93:79:FA
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
37:10:09:07:8a:9f:cd:a0:9b:63:e6:cb:6d:f2:bf:3a:d9:64:
67:c3:af:65:b6:83:0e:d9:b2:4d:73:fb:00:66:16:e8:87:92:
ed:0a:63:3c:23:00:26:cf:93:4a:75:5b:08:19:fd:81:2d:f8:
4c:26:64:dc:f7:05:06:9c:11:6a:17:55:38:e6:8c:30:7f:f5:
d7:58:7e:35:4c:c4:6e:c5:47:15:ca:54:fb:fc:88:c5:0f:a7:
19:99:98:43:f2:16:8c:81:0a:20:da:1c:fe:b3:ac:e8:ca:67:
e2:36:29:b4:10:ce:7a:75:1d:14:e4:48:06:50:37:ab:ad:0e:
aa:87:c7:e1:58:20:74:4e:81:07:9d:5c:f8:ab:d1:b0:20:91:
59:4c:06:37:2a:7c:64:44:8e:b9:06:35:d7:27:cf:80:1a:9a:
c0:0d:c4:86:25:77:95:23:e0:d5:99:60:4f:19:ca:19:22:b6:
26:b7:d1:bd:03:16:17:f2:ba:da:27:1d:f8:4d:f6:8c:06:47:
ac:d7:99:38:2c:80:0c:f9:9e:c2:5a:92:62:40:e5:78:d1:25:
f6:42:7d:cf:79:27:b6:4f:7f:d4:76:22:f2:5f:22:21:a2:5c:
fd:df:c3:00:be:04:a4:98:d5:d8:7f:38:26:49:3f:56:1c:aa:
82:8a:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:42 2025 by rpki-client