Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa
File: 326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier: SgvQWHFGZGtOv/pmgtn+By0rWwg8U8JZJbQeyaOgidQ=
Subject key identifier: F0:FD:81:E3:30:54:CD:80:AA:26:9B:B4:B2:2C:6C:DE:D0:41:9B:A4
Certificate issuer: /CN=14082299D486857A824F7308B67507C731520D07
Certificate serial: 7FA4192127832C260DE48D8753BFF673BD2E5215
Authority key identifier: 14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa
Signing time: Sat 20 Jan 2024 02:01:15 +0000
ROA not before: Sat 20 Jan 2024 01:56:15 +0000
ROA not after: Sat 18 Jan 2025 02:01:15 +0000
asID: 205789
IP address blocks: 2a07:54c0:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a4:19:21:27:83:2c:26:0d:e4:8d:87:53:bf:f6:73:bd:2e:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14082299D486857A824F7308B67507C731520D07
Validity
Not Before: Jan 20 01:56:15 2024 GMT
Not After : Jan 18 02:01:15 2025 GMT
Subject: CN=F0FD81E33054CD80AA269BB4B22C6CDED0419BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:60:43:3b:60:12:28:ee:70:2b:b5:76:f1:
54:39:61:20:ea:5a:4d:7f:59:65:f9:0a:3d:7d:da:
9b:d0:45:56:76:39:44:63:8d:57:a9:4e:cb:ed:af:
b9:cc:39:ac:af:9f:ef:56:b3:74:ec:02:75:1b:08:
bd:1d:1a:2a:ae:b1:59:04:37:20:d0:f4:97:d5:a9:
4f:98:55:fc:13:d8:70:92:e1:8f:00:01:90:9b:8a:
8a:fa:5a:54:be:82:69:6b:77:d2:4d:73:10:8c:82:
46:c0:19:7f:fc:e6:8b:59:03:0f:7c:4b:72:92:40:
73:23:6e:f3:e3:18:33:9a:40:0f:8c:7f:35:c8:a9:
ee:ce:90:90:a3:fc:9e:de:a7:ff:2b:47:8a:59:38:
12:27:a9:6c:30:85:18:a1:3b:0b:62:9e:e7:12:be:
bc:85:ca:8b:28:c7:68:3a:66:2d:c6:b5:75:12:bb:
29:ed:72:38:d5:c4:90:75:2e:f9:dd:ce:cd:e4:e7:
49:22:af:ef:13:21:bd:88:53:a8:09:f9:d3:31:1e:
59:06:64:17:23:33:4d:f1:52:31:0a:85:11:ce:ce:
19:1b:af:39:25:7b:ee:61:ec:69:4d:f0:07:c1:0a:
93:26:5d:59:7d:f1:ee:18:95:60:29:11:40:06:ac:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FD:81:E3:30:54:CD:80:AA:26:9B:B4:B2:2C:6C:DE:D0:41:9B:A4
X509v3 Authority Key Identifier:
keyid:14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
1c:42:f6:69:97:47:f9:cf:7b:d9:8f:08:3f:e9:e2:67:0c:2f:
5a:b0:87:ef:df:cc:a3:e6:d7:9b:c8:6c:f6:ef:a9:03:af:5a:
2e:c3:f1:20:7a:a2:fd:a6:31:db:8a:b5:76:7c:1e:8d:ea:98:
f9:b6:99:32:62:24:86:dd:1e:76:5e:d4:bd:34:7b:ea:21:26:
22:fc:8e:30:2b:8b:c1:88:a3:ab:ee:d1:d2:94:8a:31:e7:c6:
80:b9:bd:3b:1b:ad:bc:d4:6a:a5:ff:ca:41:29:25:a3:10:2d:
20:fd:9e:ba:0a:47:cd:25:7d:b6:cd:31:f2:08:f4:ed:ec:98:
e9:c3:fd:5e:85:54:28:3c:b6:b6:44:16:25:51:57:c7:32:bd:
db:70:9f:e8:ca:4c:88:f2:1c:83:76:ae:9b:75:a3:64:be:20:
c3:15:ca:65:7a:94:72:d1:3c:9e:ee:b9:cf:ec:68:21:4a:f5:
92:1d:a9:26:96:b4:d9:0a:c4:ee:4d:50:4f:98:28:01:fb:5e:
1c:1e:8f:9c:9b:6a:38:ed:b9:81:b9:ee:61:2c:97:cc:ae:67:
07:19:b6:2e:a8:98:12:c5:cd:d5:8a:4f:2f:2a:23:07:db:1d:
3e:8b:52:85:44:94:17:51:c7:c9:f4:ad:e6:cb:98:4e:5f:fc:
6f:ff:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:22 2025 by rpki-client