Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa
File: 326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: KlchJpq1HG/rSDftnhbmRjlmCy8I52jI5khKdoqoISQ=
Subject key identifier: 40:98:93:0C:38:BA:93:CD:DF:4F:85:43:22:B0:F1:D3:04:E0:E5:4F
Certificate issuer: /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial: 43F40C88E16C8633D297C7ACAFD2C240B37565AD
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa
Signing time: Tue 04 Apr 2023 18:40:09 +0000
ROA not before: Tue 04 Apr 2023 18:35:09 +0000
ROA not after: Tue 02 Apr 2024 18:40:09 +0000
asID: 54681
IP address blocks: 2a05:dfc3:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f4:0c:88:e1:6c:86:33:d2:97:c7:ac:af:d2:c2:40:b3:75:65:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Validity
Not Before: Apr 4 18:35:09 2023 GMT
Not After : Apr 2 18:40:09 2024 GMT
Subject: CN=4098930C38BA93CDDF4F854322B0F1D304E0E54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:c1:89:e5:42:6e:f7:ed:eb:3c:c3:d0:b7:
be:a4:58:e1:43:fc:0c:f4:6b:59:6d:79:0d:c7:6c:
34:ee:e8:4e:3d:4a:01:47:38:c8:26:5e:bc:fb:b1:
93:8a:68:1c:7d:09:1c:9e:01:c7:54:83:ff:19:7f:
8b:6b:28:e9:4a:84:3f:be:08:2d:7d:8e:7b:08:00:
55:ae:a7:8a:96:2e:13:e1:6b:9a:7b:1f:5b:30:29:
77:97:29:a9:a9:b4:07:4e:ad:6b:b5:f1:0c:d3:6d:
19:63:a5:04:ce:c4:ec:c0:2c:21:fe:dd:a3:83:e0:
61:f4:d4:11:81:52:61:e2:ca:e8:58:77:15:54:ed:
00:7e:1b:3f:fe:64:d1:bf:40:c0:93:8e:b6:00:54:
97:10:89:61:cc:54:4f:b4:29:e2:98:d5:5e:ff:b2:
74:f5:83:18:b5:0d:c8:d1:cd:8d:9e:dc:f2:e0:ea:
3b:15:d3:df:af:ff:ce:de:b2:c5:dd:c1:76:70:6e:
ab:c4:b8:d7:dd:81:bd:0f:b0:46:ab:49:1c:00:9a:
91:7f:12:93:62:9e:05:b0:aa:8f:46:04:cc:19:8a:
43:e5:82:a3:98:55:de:90:6e:8e:48:26:35:23:78:
43:5f:82:d7:01:93:f5:5c:cf:e7:bc:db:f0:40:fd:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:93:0C:38:BA:93:CD:DF:4F:85:43:22:B0:F1:D3:04:E0:E5:4F
X509v3 Authority Key Identifier:
keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:dead::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a2:7f:d9:af:82:fd:d9:a8:86:35:4a:1e:ee:ac:32:73:94:
70:7f:df:f5:74:9f:fa:46:38:44:a1:17:f4:3c:53:90:d0:ad:
48:3d:94:e6:74:6c:a0:dd:00:06:a0:20:2a:ca:f9:b4:59:73:
dc:37:94:d9:4a:50:fa:a6:47:5c:47:ac:a9:f7:d0:d0:e4:61:
7d:4c:55:d7:97:19:9c:23:e2:f7:6b:f5:a7:20:a8:a4:e5:56:
be:4e:90:a1:95:3f:b9:26:97:38:c8:5a:45:de:0e:19:bf:4a:
a8:00:ab:5f:0d:87:55:d3:38:5a:21:26:83:d0:2d:bc:b9:4c:
2f:8d:3e:cd:ce:a3:e2:be:a6:16:25:20:8b:0a:8d:b9:e4:ed:
47:4b:85:bf:fb:5f:bb:a3:c6:19:14:a8:2a:9b:66:78:71:43:
c4:55:af:19:14:1b:94:63:8f:eb:51:01:60:82:4d:c2:bc:35:
2b:cd:80:1c:1a:b9:08:86:95:b4:27:e3:44:29:06:ad:37:92:
a0:02:85:f4:2c:d1:1c:0f:fc:f4:96:39:23:d4:8a:f9:97:1a:
92:9b:b7:ff:d7:98:c0:03:ad:08:68:28:24:a6:11:23:d2:5c:
72:c4:32:e9:20:68:f7:44:f0:db:a9:de:fa:4d:f2:15:69:e4:
d4:83:56:a4
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUQ/QMiOFshjPSl8esr9LCQLN1Za0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0NkE0MzExNTk4QkU0QzBFQUJENEU4ODE3Qzc3M0FB
Q0NGQTg2MjAeFw0yMzA0MDQxODM1MDlaFw0yNDA0MDIxODQwMDlaMDMxMTAvBgNV
BAMTKDQwOTg5MzBDMzhCQTkzQ0RERjRGODU0MzIyQjBGMUQzMDRFMEU1NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pcGJ5UJu9+3rPMPQt76kWOFD
/Az0a1lteQ3HbDTu6E49SgFHOMgmXrz7sZOKaBx9CRyeAcdUg/8Zf4trKOlKhD++
CC19jnsIAFWup4qWLhPha5p7H1swKXeXKamptAdOrWu18QzTbRljpQTOxOzALCH+
3aOD4GH01BGBUmHiyuhYdxVU7QB+Gz/+ZNG/QMCTjrYAVJcQiWHMVE+0KeKY1V7/
snT1gxi1DcjRzY2e3PLg6jsV09+v/87essXdwXZwbqvEuNfdgb0PsEarSRwAmpF/
EpNingWwqo9GBMwZikPlgqOYVd6Qbo5IJjUjeENfgtcBk/Vcz+e82/BA/XJxAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUQJiTDDi6k83fT4VDIrDx0wTg5U8wHwYDVR0j
BBgwFoAUxkakMRWYvkwOq9TogXx3OqzPqGIwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8wL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgxN0M3NzNB
QUNDRkE4NjIuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJz
eW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQw
NjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0M2NDZBNDMxMTU5OEJFNEMwRUFCRDRFODgx
N0M3NzNBQUNDRkE4NjIuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUH
MAuGdXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVMX1VJRF8x
ODg2MC8wLzMyNjEzMDM1M2E2NDY2NjMzMzNhNjQ2NTYxNjQzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNTM0MzYzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfw96tMA0GCSqGSIb3
DQEBCwUAA4IBAQAuon/Zr4L92aiGNUoe7qwyc5Rwf9/1dJ/6RjhEoRf0PFOQ0K1I
PZTmdGyg3QAGoCAqyvm0WXPcN5TZSlD6pkdcR6yp99DQ5GF9TFXXlxmcI+L3a/Wn
IKik5Va+TpChlT+5Jpc4yFpF3g4Zv0qoAKtfDYdV0zhaISaD0C28uUwvjT7NzqPi
vqYWJSCLCo255O1HS4W/+1+7o8YZFKgqm2Z4cUPEVa8ZFBuUY4/rUQFggk3CvDUr
zYAcGrkIhpW0J+NEKQatN5KgAoX0LNEcD/z0ljkj1Ir5lxqSm7f/15jAA60IaCgk
phEj0lxyxDLpIGj3RPDbqd76TfIVaeTUg1ak
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:15 2025 by rpki-client