Route Origin Authorization
$ rpki-client -vvf rpki.caramelfox.net/repo/caramelfox/0/323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa
File: 323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa (raw, json)
Hash identifier: 9/OWkjfLoX2ilkHK55PSz2cj1dpWQ9U38vuNXZgKHN0=
Subject key identifier: 97:DE:4A:61:19:49:49:C3:BA:91:F8:B0:4E:4D:8D:90:D4:E1:FD:66
Certificate issuer: /CN=b14dde4d1d443e8dfc063d808b410cedf0f7ab4f
Certificate serial: 1F21C029485C736DF5E9244034307070DD59F779
Authority key identifier: B1:4D:DE:4D:1D:44:3E:8D:FC:06:3D:80:8B:41:0C:ED:F0:F7:AB:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sU3eTR1EPo38Bj2Ai0EM7fD3q08.cer
Subject info access: rsync://rpki.caramelfox.net/repo/caramelfox/0/323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa
Signing time: Tue 06 Sep 2022 05:16:07 +0000
ROA not before: Tue 06 Sep 2022 05:11:07 +0000
ROA not after: Tue 05 Sep 2023 05:16:07 +0000
asID: 211169
IP address blocks: 2001:678:f68::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:21:c0:29:48:5c:73:6d:f5:e9:24:40:34:30:70:70:dd:59:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14dde4d1d443e8dfc063d808b410cedf0f7ab4f
Validity
Not Before: Sep 6 05:11:07 2022 GMT
Not After : Sep 5 05:16:07 2023 GMT
Subject: CN=97DE4A61194949C3BA91F8B04E4D8D90D4E1FD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:79:7b:96:a8:cb:3b:bf:28:d0:7b:c5:93:
50:c0:fb:36:63:f2:96:d6:4b:26:ce:25:29:65:c4:
6c:7b:52:b5:c3:e1:50:32:71:69:c3:aa:b0:8d:a6:
e9:8b:a0:1f:dd:78:21:f8:98:c5:b0:3d:26:8c:f1:
fc:6d:0a:bf:62:30:f7:dc:51:c9:61:03:0d:25:85:
a4:dc:27:6a:55:9e:a5:b7:09:35:97:12:4b:02:89:
ae:8f:1e:53:b3:91:c5:13:1c:ea:5d:03:07:8c:a8:
c8:d1:dc:31:0a:92:16:01:4b:c2:9f:a9:0f:13:78:
99:7f:56:ce:3e:ff:14:3b:88:d6:40:89:51:36:36:
74:0e:95:b7:cc:e6:a6:9e:c7:03:00:55:7c:9b:eb:
ae:de:aa:75:5c:43:c6:0b:e2:17:d3:4e:8f:55:6a:
aa:cd:2c:12:87:2a:1e:01:41:1e:b5:8f:98:1d:5e:
a8:88:51:8b:87:33:38:c2:33:9c:a5:25:f1:0f:35:
7d:e3:ef:b4:29:67:24:ed:0b:3f:87:68:76:fe:a2:
6d:e2:6a:29:1b:85:c2:18:51:e6:31:e7:4b:d8:ea:
43:2c:98:30:70:f6:b9:65:5b:51:91:94:67:65:6c:
53:48:17:9a:48:5a:41:da:8d:7e:4f:5c:b8:25:45:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:4A:61:19:49:49:C3:BA:91:F8:B0:4E:4D:8D:90:D4:E1:FD:66
X509v3 Authority Key Identifier:
keyid:B1:4D:DE:4D:1D:44:3E:8D:FC:06:3D:80:8B:41:0C:ED:F0:F7:AB:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.caramelfox.net/repo/caramelfox/0/B14DDE4D1D443E8DFC063D808B410CEDF0F7AB4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sU3eTR1EPo38Bj2Ai0EM7fD3q08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.caramelfox.net/repo/caramelfox/0/323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f68::/48
Signature Algorithm: sha256WithRSAEncryption
4b:9d:18:e1:83:59:36:b3:07:79:9f:b7:25:66:b7:7b:cb:23:
56:3b:5c:be:20:20:42:15:62:6c:18:b0:5a:cd:62:f1:53:69:
4c:9d:bb:77:bb:d8:9a:b9:51:a6:44:be:58:37:d8:43:4e:de:
01:df:91:f9:6c:ac:ab:17:eb:b2:2b:32:d6:f5:a6:45:5d:3c:
1f:51:01:aa:66:a8:b5:59:ee:0e:6b:55:fc:b1:e7:44:5f:fe:
c3:b7:a7:f6:0c:74:9b:f0:4a:a7:bb:4c:ae:27:22:d2:27:fd:
8b:5d:b1:68:14:83:da:63:41:31:bd:8a:90:41:a5:a2:d7:79:
ad:76:af:67:e7:65:36:1e:89:7a:92:a2:86:59:ae:42:2a:03:
c8:ff:98:09:18:85:1d:5d:e0:1f:3f:6f:94:6f:25:d7:e7:7b:
3d:bc:91:95:68:e3:bd:df:9a:ba:d6:fe:76:85:f0:f3:e9:77:
47:8e:bb:8c:37:9f:7c:08:37:3f:8d:fc:20:e1:3e:01:b3:ea:
b0:5f:eb:6a:e2:1b:2b:62:48:4a:f0:ad:61:49:08:9a:9a:7f:
09:13:45:f5:c5:80:50:7f:cd:57:4d:6d:f6:d3:bb:16:78:11:
3c:8f:f0:f5:15:e8:2c:0b:8c:cd:84:47:92:b7:9d:7e:15:c3:
07:c3:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:55:52 2025 by rpki-client