Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa
File: 326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: 4wSOSUJ2RizFpA57oKG5le01pM7Bs2Accr7SOlAUt68=
Subject key identifier: 72:9F:42:12:3C:5F:BB:BA:CC:EA:07:C6:64:9F:4A:46:E5:45:E3:3D
Certificate issuer: /CN=14082299D486857A824F7308B67507C731520D07
Certificate serial: 3B2EB151BDE411D88D89757EB4B4723A75C955D4
Authority key identifier: 14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa
Signing time: Sat 20 Jan 2024 01:52:10 +0000
ROA not before: Sat 20 Jan 2024 01:47:10 +0000
ROA not after: Sat 18 Jan 2025 01:52:10 +0000
asID: 54681
IP address blocks: 2a07:54c0:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:2e:b1:51:bd:e4:11:d8:8d:89:75:7e:b4:b4:72:3a:75:c9:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14082299D486857A824F7308B67507C731520D07
Validity
Not Before: Jan 20 01:47:10 2024 GMT
Not After : Jan 18 01:52:10 2025 GMT
Subject: CN=729F42123C5FBBBACCEA07C6649F4A46E545E33D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:e2:61:8d:56:48:ea:60:b6:63:32:b5:fa:
75:3e:d8:75:2c:0e:c9:15:0b:d8:d7:ed:a6:aa:07:
5a:f3:72:6d:a2:e0:0e:40:45:ab:19:f1:ee:c8:f4:
89:a0:3d:32:fd:17:6d:c6:26:95:82:2d:ef:af:da:
2a:95:e7:63:2c:36:96:bc:71:5f:c9:ed:21:17:ab:
57:c2:f4:ca:87:34:e7:51:f2:81:b6:ec:ef:d8:80:
69:bd:75:b3:27:1c:a6:ae:97:2a:39:91:8b:42:6c:
67:ac:7d:ed:ae:2c:9c:56:da:7d:0e:af:96:15:e3:
da:3a:a5:59:5f:51:86:46:a6:d8:dc:f5:4e:4e:fa:
3e:e1:7f:d4:36:f6:71:46:0b:6a:a7:9a:93:11:0b:
ff:6c:3e:3d:a0:b2:70:77:28:33:ec:c5:2c:7d:2f:
43:62:33:aa:d3:a5:96:11:b4:8e:ad:0f:35:5f:ad:
d2:e8:a9:0e:21:75:61:6c:2a:2b:d6:58:27:8d:e6:
e1:38:0c:3c:25:36:1a:5d:5e:6b:90:07:e5:2f:ca:
1e:73:e5:63:3a:27:15:60:7b:ad:77:d5:2b:12:e5:
44:d4:cb:21:89:18:23:a6:a6:57:32:01:70:58:8f:
94:f2:b3:07:ee:e6:bc:bf:7b:e2:2b:ae:dd:a6:41:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:42:12:3C:5F:BB:BA:CC:EA:07:C6:64:9F:4A:46:E5:45:E3:3D
X509v3 Authority Key Identifier:
keyid:14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:dead::/48
Signature Algorithm: sha256WithRSAEncryption
48:ba:a9:7c:5e:89:3f:ec:77:82:76:4d:7d:f8:9a:fc:9f:ab:
6c:af:65:3b:51:a0:21:84:b6:9e:a8:f9:47:1d:a4:fd:ae:5e:
f4:34:0b:d5:cd:18:f4:ad:41:ad:9f:74:1e:04:a3:76:92:63:
d4:cd:58:a8:40:56:3f:c3:68:ec:20:53:93:e1:79:6c:8a:34:
82:22:0b:3d:0e:52:fc:9b:f5:2a:4b:24:44:39:ec:cd:f6:ab:
16:7f:be:8e:ef:19:1c:95:2d:78:f7:6a:60:03:7c:f7:4a:85:
65:6f:f2:8f:4d:ee:28:b0:63:37:7b:70:63:25:51:13:f0:6e:
11:c5:ef:c7:2c:24:ca:5a:ef:f9:c1:5b:27:45:b5:a2:02:f4:
a7:a8:b0:64:54:df:37:bb:47:bd:0e:21:be:51:f2:f8:b7:c0:
85:fd:9c:1d:62:9d:df:5b:11:fb:24:da:11:71:5a:b5:db:b4:
e5:01:61:5a:a5:4a:02:42:5c:ea:c2:1d:8f:b0:fe:e3:32:25:
65:3e:b6:9b:89:47:17:07:00:88:a6:3f:0e:47:98:5f:a4:68:
7c:28:23:9e:f2:f8:aa:5c:5c:12:9c:0b:ec:7e:11:06:bc:d0:
85:40:1f:91:8a:b4:c5:6b:ae:db:fc:66:c9:bf:aa:35:36:52:
9a:2b:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org