Route Origin Authorization
$ rpki-client -vvf krill.stonham.info/repo/Stonham/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: 5mYBCnb4GzurxkXg5f+OoBPkYQwPs12lpVzd2Gzk6Ik=
Subject key identifier: 8E:09:CC:63:AE:C3:12:C8:E1:B5:A6:52:16:63:DD:82:AC:3E:8A:43
Certificate issuer: /CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Certificate serial: 3A784B7C7C8A413168FAA7D5E20BD069074DEB32
Authority key identifier: 63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject info access: rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
Signing time: Fri 16 Feb 2024 14:46:16 +0000
ROA not before: Fri 16 Feb 2024 14:41:16 +0000
ROA not after: Fri 14 Feb 2025 14:46:16 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8902::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:78:4b:7c:7c:8a:41:31:68:fa:a7:d5:e2:0b:d0:69:07:4d:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Validity
Not Before: Feb 16 14:41:16 2024 GMT
Not After : Feb 14 14:46:16 2025 GMT
Subject: CN=8E09CC63AEC312C8E1B5A6521663DD82AC3E8A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:6d:44:4a:bc:cc:45:3f:d4:bf:9e:3d:c9:
16:ae:5f:4b:93:ae:2a:93:ad:6d:01:01:ca:4f:44:
35:98:d9:a5:f1:5b:97:4f:f9:93:ac:c2:43:21:8c:
aa:8e:5b:2d:00:04:2c:dc:c1:65:cd:f8:27:cd:9b:
7f:19:4c:9b:e5:b3:b1:b7:4c:80:33:55:31:7d:99:
00:af:d3:3b:ab:89:33:a5:f7:2e:d4:2f:1c:84:2c:
0f:ab:e6:90:eb:8e:da:e5:11:eb:13:16:d3:f8:1c:
36:c5:87:1c:cb:dd:44:00:60:d2:95:00:8e:c7:9a:
2a:9c:50:82:a6:e4:c3:07:e0:3c:90:80:df:2c:7c:
7e:ff:2a:04:4e:f3:0c:0f:ec:17:5f:07:9b:37:a1:
41:99:2e:4e:53:eb:bc:83:da:03:6d:48:a0:38:a1:
9d:65:47:e7:23:90:28:5e:42:6e:e7:99:d6:43:5c:
aa:64:2b:52:24:7b:f5:0e:29:5f:cd:bf:02:06:53:
a9:1d:9b:24:dd:ac:13:59:58:10:5c:6d:90:f7:73:
03:40:6e:85:04:fc:2a:a9:c3:1d:73:c4:37:35:0c:
24:6e:08:62:e5:44:9e:81:a0:15:55:f0:33:20:24:
3c:e9:d0:1e:29:ba:ac:66:c5:62:94:0e:34:7b:3e:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:09:CC:63:AE:C3:12:C8:E1:B5:A6:52:16:63:DD:82:AC:3E:8A:43
X509v3 Authority Key Identifier:
keyid:63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject Information Access:
Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8902::/48
Signature Algorithm: sha256WithRSAEncryption
94:30:d8:88:22:57:0d:8c:2e:db:58:79:2f:80:99:e9:02:00:
62:74:7d:c0:ec:85:7b:da:eb:12:d5:1c:ee:8f:fd:8e:44:66:
e2:8a:98:f6:f1:00:0f:5a:10:37:6c:e9:a2:28:88:b8:59:e6:
b5:2e:c1:2b:e4:75:e6:12:da:86:17:9e:65:a9:ea:cf:ee:5c:
81:ad:b3:67:c2:b3:2f:4d:0d:93:01:a0:ba:88:f9:b7:e0:c2:
2f:98:80:45:0a:71:41:e3:72:31:61:86:fd:88:be:11:84:8c:
47:ba:98:a9:6a:ea:61:1e:6a:b1:49:c2:13:e3:db:10:0c:d8:
11:55:b4:70:60:3a:67:6c:fe:40:e1:c4:9c:00:de:00:5a:4e:
4a:44:c9:60:8e:55:aa:b8:5a:ae:fd:af:5d:47:70:66:c7:13:
9f:be:bb:95:03:d0:41:aa:19:6f:66:46:d3:fc:70:7f:a6:8b:
9f:51:ac:0f:2c:02:ae:03:ac:c1:e9:f7:40:66:b0:a2:a8:db:
04:0f:9d:2e:c7:13:67:8f:39:82:e0:58:28:83:50:f0:4c:f9:
3a:8e:3b:72:4e:00:5e:c6:ad:39:b9:ea:2c:d6:e5:61:ab:05:
99:18:1b:ca:08:9f:d0:c4:b1:81:07:c8:8d:ad:71:31:8c:5d:
dc:0b:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org