Route Origin Authorization
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: ljrjl3TOL/ds7qzKudg9hk6UuDsk3/rfkthas4Aof4g=
Subject key identifier: 71:7F:3F:E1:A4:43:6A:9C:D6:66:E5:63:7B:21:E9:5C:1C:CE:7B:17
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 2CE54CB638E95316FAFF034426C079F59D7CBCF0
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa
Signing time: Thu 28 Sep 2023 14:00:34 +0000
ROA not before: Thu 28 Sep 2023 13:55:34 +0000
ROA not after: Thu 26 Sep 2024 14:00:34 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8901::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e5:4c:b6:38:e9:53:16:fa:ff:03:44:26:c0:79:f5:9d:7c:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Sep 28 13:55:34 2023 GMT
Not After : Sep 26 14:00:34 2024 GMT
Subject: CN=717F3FE1A4436A9CD666E5637B21E95C1CCE7B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:1e:3f:84:8c:8b:07:4c:b5:c3:e5:24:a9:
85:ba:09:ac:a4:a4:ef:80:95:c3:08:49:c7:61:c1:
c5:8f:e9:1d:86:c9:17:e6:24:d4:33:78:0d:03:8a:
62:3b:32:22:ba:f2:51:70:9b:b5:d8:09:79:fc:fa:
b6:5e:d1:48:a0:64:76:a2:fb:01:52:a8:3c:ab:01:
9f:9f:ca:12:d2:a5:ef:1e:f2:51:1b:55:e1:51:46:
6c:25:b9:9d:8c:a2:ca:95:58:a0:91:9c:a4:0a:7c:
19:e8:9c:99:e5:55:06:71:4f:5b:1a:54:0d:da:85:
85:94:f8:4b:7a:a2:76:37:5b:a0:47:ae:49:c2:ba:
2b:63:ff:e5:6e:c5:6a:b8:44:4d:16:a2:52:27:79:
90:23:a5:bd:7b:9d:f4:d1:d3:0a:33:93:85:01:7c:
43:14:2f:d4:54:ce:f9:a6:62:2a:f5:4f:21:6a:27:
0a:8a:91:ce:b1:cb:94:23:06:5a:60:c8:a2:7e:d3:
e0:7b:3f:ba:10:0e:2f:6b:d5:70:60:88:58:4a:da:
cf:db:33:6a:e1:5e:98:e2:bf:d7:08:4d:78:37:2a:
5b:57:e8:d2:8f:66:2e:3f:ff:bf:20:ab:6e:f7:2d:
b7:cf:c4:38:20:56:9e:dc:d6:dc:1f:dd:0e:82:7f:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7F:3F:E1:A4:43:6A:9C:D6:66:E5:63:7B:21:E9:5C:1C:CE:7B:17
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8901::/48
Signature Algorithm: sha256WithRSAEncryption
91:6d:54:dd:c0:78:d2:9e:95:48:d6:d6:f4:0c:49:7a:c7:97:
91:6f:5f:b1:79:db:0c:08:1b:99:59:44:79:aa:70:a4:9e:f8:
fb:5e:84:6e:c4:07:b7:30:56:de:86:e2:53:29:a1:0e:0f:0b:
af:1b:46:2b:9d:ed:93:69:ea:72:78:1c:55:71:1a:fa:fe:18:
42:d7:d0:ef:06:21:eb:96:94:2e:32:43:53:62:77:4b:0d:4c:
a2:3c:13:08:54:b7:74:98:6f:74:8b:bf:19:17:18:bb:c7:3f:
33:8f:d5:5c:29:eb:3a:a0:44:7b:1b:c4:dc:6a:f4:5c:fa:23:
31:aa:c6:7d:51:20:f5:85:b3:6c:0b:4f:9b:40:19:9d:a6:5a:
bb:89:be:ac:b9:1f:57:43:0a:18:b4:a5:ce:cd:3c:13:e5:6e:
32:fa:41:9a:cb:f1:b6:e2:94:a2:24:c3:bd:21:74:b8:0d:48:
73:2e:df:f8:57:17:fa:54:d0:13:53:0b:a3:ae:ed:29:7f:53:
b5:88:75:a4:2b:30:e0:9e:3e:e6:4f:1b:62:6f:c8:d0:23:13:
de:c7:85:a0:bc:73:bf:a2:12:84:9c:1f:cd:6a:da:5b:82:81:
30:cd:a0:62:4f:58:21:96:8f:bc:10:e7:2e:24:8e:9b:1f:8e:
d6:40:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:42 2025 by rpki-client