Route Origin Authorization
$ rpki-client -vvf rpki.caramelfox.net/repo/caramelfox/1/323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa
File: 323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa (raw, json)
Hash identifier: TQyOQ3bww3F6xPmLK+xU25fYWmk97Vm9zKuspaGfSTQ=
Subject key identifier: C0:78:C4:4B:16:26:A3:3B:9D:AD:C6:8D:DE:8A:31:F9:CD:45:76:F3
Certificate issuer: /CN=815a0ac37f00104fd75cb8c1bd1189a0599dcb33
Certificate serial: 60F2BCC27A5B6084DECDAA661E908B9376D8E117
Authority key identifier: 81:5A:0A:C3:7F:00:10:4F:D7:5C:B8:C1:BD:11:89:A0:59:9D:CB:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVoKw38AEE_XXLjBvRGJoFmdyzM.cer
Subject info access: rsync://rpki.caramelfox.net/repo/caramelfox/1/323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa
Signing time: Thu 18 Aug 2022 13:11:00 +0000
ROA not before: Thu 18 Aug 2022 13:06:00 +0000
ROA not after: Thu 17 Aug 2023 13:11:00 +0000
asID: 211169
IP address blocks: 2001:678:f68::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f2:bc:c2:7a:5b:60:84:de:cd:aa:66:1e:90:8b:93:76:d8:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815a0ac37f00104fd75cb8c1bd1189a0599dcb33
Validity
Not Before: Aug 18 13:06:00 2022 GMT
Not After : Aug 17 13:11:00 2023 GMT
Subject: CN=C078C44B1626A33B9DADC68DDE8A31F9CD4576F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:85:9e:7c:4a:d3:03:61:c5:e1:13:82:e8:
84:e0:01:c9:cd:73:87:57:d8:23:68:a2:c9:f8:72:
44:a9:a8:8c:a7:0e:4b:be:6b:48:7b:06:68:ea:1d:
82:1d:73:e2:79:43:64:0d:2b:10:84:53:43:88:0e:
6e:29:64:fb:d0:5d:bd:bc:24:95:9b:40:a8:98:25:
99:46:67:56:1d:53:0f:cc:c3:67:5c:52:a4:cc:ec:
0d:b7:b8:bd:95:60:14:0d:78:62:a5:ee:9f:a9:d3:
12:b4:97:7d:d5:0f:dc:00:c8:ee:09:ed:16:b2:b8:
c0:46:2d:f1:45:42:77:46:b3:53:f5:9d:81:8b:7d:
17:48:95:44:5f:04:f4:a3:8a:95:a1:0c:46:f9:cb:
2b:42:74:14:b1:2b:58:8e:87:b5:43:25:7f:d5:3e:
84:f1:4c:c2:4e:5d:b6:f4:cf:4f:41:cd:e9:1c:10:
41:49:6b:c6:fe:77:97:46:5d:0e:1d:96:c8:eb:b2:
00:42:83:93:d0:ab:7e:f3:24:66:41:3b:a7:03:45:
2f:3c:6f:59:dc:f8:a2:47:60:45:cb:4b:d8:f8:3a:
7e:36:cb:e3:aa:81:e8:d1:10:04:99:53:98:7f:80:
49:e0:66:6f:b5:0b:32:8a:14:7f:3c:34:b1:db:77:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:C4:4B:16:26:A3:3B:9D:AD:C6:8D:DE:8A:31:F9:CD:45:76:F3
X509v3 Authority Key Identifier:
keyid:81:5A:0A:C3:7F:00:10:4F:D7:5C:B8:C1:BD:11:89:A0:59:9D:CB:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.caramelfox.net/repo/caramelfox/1/815A0AC37F00104FD75CB8C1BD1189A0599DCB33.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVoKw38AEE_XXLjBvRGJoFmdyzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.caramelfox.net/repo/caramelfox/1/323030313a3637383a6636383a3a2f34382d3438203d3e20323131313639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f68::/48
Signature Algorithm: sha256WithRSAEncryption
58:66:4e:c2:2f:6b:e7:6e:66:16:b6:6f:c4:81:c9:4d:f6:9a:
9d:36:45:ff:74:4a:f0:79:1e:f3:02:3c:2e:49:9c:2d:2e:1b:
a9:e0:bb:f1:e1:58:ee:b7:2c:c0:86:eb:9d:6a:d8:49:10:38:
82:62:0c:28:3c:e7:2c:df:65:cc:8d:90:03:fb:c8:4e:3b:17:
26:60:d7:74:c5:e0:2d:2a:92:47:3d:7a:2e:7b:8e:fc:d0:83:
cc:99:82:96:57:45:34:dd:83:73:f9:03:f6:c4:c8:4b:8a:08:
8f:ea:a9:88:ae:de:70:2a:db:aa:39:81:79:44:d3:fb:06:73:
7c:8c:e8:af:6b:60:a8:aa:6c:ef:21:5f:a8:f0:c5:0c:bb:c3:
6c:ed:1d:ab:4e:b5:51:d2:be:7c:df:04:da:cf:98:90:87:56:
cd:81:57:74:a4:bd:25:db:7c:d6:6d:d8:b4:f1:34:cc:3a:18:
4e:4e:04:e9:55:16:79:fa:8e:f5:89:50:7e:68:9b:00:c6:49:
7f:63:c1:d4:ca:79:c6:30:72:4a:83:b1:fe:46:c0:fc:51:a3:
4f:d3:3a:7a:f5:05:15:d2:08:aa:31:74:28:fa:22:29:5a:e7:
30:a0:99:b3:67:4e:f7:17:b6:1b:d6:47:46:43:7c:f6:fd:de:
55:ad:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:44:07 2025 by rpki-client