Route Origin Authorization
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: d+50sP1mT8ynaDIZu5gJbLkUjgOBQpy9iyrVpa/LXTw=
Subject key identifier: 17:32:4C:47:DD:9C:8B:AB:DB:88:A4:92:DB:2C:D2:2C:FB:A0:FA:DE
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 1A1283D7ECA550E7347C5094830D1238C0D21859
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
Signing time: Thu 05 Oct 2023 16:07:10 +0000
ROA not before: Thu 05 Oct 2023 16:02:10 +0000
ROA not after: Thu 03 Oct 2024 16:07:10 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8902::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:12:83:d7:ec:a5:50:e7:34:7c:50:94:83:0d:12:38:c0:d2:18:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Oct 5 16:02:10 2023 GMT
Not After : Oct 3 16:07:10 2024 GMT
Subject: CN=17324C47DD9C8BABDB88A492DB2CD22CFBA0FADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:92:49:81:74:25:e5:1a:cc:53:d9:fe:8e:
56:71:5c:31:69:85:fd:e2:20:46:9c:f8:b8:bb:ab:
e3:9f:38:30:11:8e:5c:21:9e:1d:a7:9c:92:dc:8d:
c9:78:46:28:22:7a:3c:8d:f9:a1:86:d7:7c:a3:88:
01:ca:cc:76:e5:44:f3:3e:6d:0f:d3:b0:9e:64:3d:
4d:29:d3:24:ee:8f:fe:bf:eb:c3:15:7e:15:a3:4f:
19:06:e8:73:0b:96:00:de:49:7a:12:72:54:22:8a:
06:91:42:79:de:d8:b1:07:3a:b0:30:fd:4f:91:42:
2f:5e:29:97:3b:1e:29:58:26:74:e4:ab:8c:da:a0:
c9:89:6c:51:92:ed:21:eb:e7:28:01:ab:e1:40:3d:
a0:f4:2e:57:26:e1:ca:01:4f:28:a8:58:ee:99:f0:
aa:43:29:db:24:44:15:c2:e9:ae:e0:5c:0f:91:f2:
89:a1:a4:4c:bf:f1:87:bd:d8:6e:e6:a8:3d:d0:a9:
bd:f0:f0:ae:4f:d9:79:33:a4:59:6b:73:55:45:ad:
fc:fe:d0:09:59:9f:6e:1d:b5:07:5c:5d:ee:e4:02:
70:ec:4e:6b:99:e8:56:d8:b6:7a:b9:95:33:a6:3c:
06:1a:60:ed:f0:2b:f6:93:55:0b:ff:23:58:a2:de:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:4C:47:DD:9C:8B:AB:DB:88:A4:92:DB:2C:D2:2C:FB:A0:FA:DE
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8902::/48
Signature Algorithm: sha256WithRSAEncryption
60:eb:da:41:be:5b:6e:08:f1:c3:e3:44:5b:d9:8a:c6:ae:1f:
60:f7:23:f3:21:f2:71:31:28:88:94:f8:33:4d:57:ff:98:98:
b4:d3:5c:32:4e:cb:84:f8:d1:4e:d3:bd:ce:bc:82:0b:bf:87:
03:24:5e:da:3e:82:0a:47:0a:16:d6:60:be:d4:81:fb:c5:de:
53:3c:a3:5f:00:4d:00:46:cd:e3:92:99:27:9d:c2:0a:bf:5b:
94:2d:c1:68:63:81:d6:3d:54:10:04:3f:11:59:a4:b7:a5:26:
7a:0d:c5:17:23:89:ff:17:bb:d9:aa:1d:03:9c:7b:68:a7:f2:
47:c2:b1:5a:3b:b8:00:c3:0e:72:87:33:98:08:5d:76:c2:2f:
e7:07:5d:92:e3:fc:96:2b:eb:34:c5:7a:ec:08:0e:04:f4:dd:
5c:9e:b3:0f:66:69:91:c5:41:03:93:75:f8:59:9e:6f:ed:cc:
74:dd:1f:9f:8e:e4:08:27:90:09:07:ff:4e:1a:ec:ef:7a:de:
8e:9e:ab:9b:62:65:49:25:53:e8:a3:3c:22:d0:11:ff:b3:b5:
52:87:db:04:5a:d2:a6:c1:3a:f3:cf:b1:b0:1a:18:98:dd:53:
12:42:d6:3c:f5:4f:21:06:27:06:10:e3:31:1b:ee:a9:df:98:
23:e5:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:05 2025 by rpki-client