Route Origin Authorization
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: 1DZPoJddge7PMQKOexyZvpuOL3XKapTo/TAC0r7K69k=
Subject key identifier: A1:44:C3:10:12:64:29:CF:A2:38:6F:56:D0:D9:71:B8:10:AD:A4:29
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 62C50F22178711DA215ED72BD556081ECE3D7E43
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
Signing time: Fri 29 Sep 2023 00:05:31 +0000
ROA not before: Fri 29 Sep 2023 00:00:31 +0000
ROA not after: Fri 27 Sep 2024 00:05:31 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8903::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c5:0f:22:17:87:11:da:21:5e:d7:2b:d5:56:08:1e:ce:3d:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Sep 29 00:00:31 2023 GMT
Not After : Sep 27 00:05:31 2024 GMT
Subject: CN=A144C310126429CFA2386F56D0D971B810ADA429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:82:81:e6:11:0a:28:09:e3:b8:08:44:ef:
2b:27:fa:15:8c:69:7e:79:15:12:eb:c5:49:0e:c3:
f8:cb:ab:0d:4b:49:11:f5:fc:f6:6e:49:d6:bc:dd:
11:e3:1c:b9:73:cc:d9:d1:61:2b:2f:50:42:53:04:
7a:3b:cc:7c:48:69:3e:f5:7a:ad:c3:06:54:96:2d:
84:51:1c:57:d1:4f:b7:da:05:25:69:eb:99:cd:c1:
6c:85:c0:74:59:7f:fb:71:87:43:08:5c:fb:55:52:
8d:85:d1:3e:17:75:ca:0a:cd:ef:d3:e6:6f:c1:df:
8d:7b:08:a7:c8:93:90:df:09:bb:e9:a9:9c:ee:12:
95:45:91:05:6f:36:65:95:b5:b8:11:07:01:70:10:
98:cc:d3:86:cb:ff:7f:4b:9b:b0:f8:3a:4b:b2:0d:
b3:49:a1:2a:5f:37:1c:00:51:d1:c4:44:d4:7f:7d:
2c:d0:fb:79:70:31:5c:a5:e6:e3:f0:52:5f:da:29:
2c:0c:3f:26:64:b5:b3:c5:b3:81:d0:ff:13:6e:04:
d6:b5:89:00:85:4f:5c:01:2e:52:d4:b8:a2:09:eb:
62:79:ef:b6:d1:a2:6d:11:35:c0:fb:99:0a:43:44:
d7:c6:0e:a9:7a:7a:5c:e9:07:48:22:ca:d3:4e:d4:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:C3:10:12:64:29:CF:A2:38:6F:56:D0:D9:71:B8:10:AD:A4:29
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8903::/48
Signature Algorithm: sha256WithRSAEncryption
99:6f:99:9a:2a:d1:27:80:28:6b:bf:26:e9:e7:14:63:12:d9:
c7:b8:90:ed:1d:22:2a:b1:bc:c6:bd:0d:58:9c:6e:8c:f2:42:
41:e8:01:8d:60:36:cf:6e:e7:e2:a2:a3:25:8b:c6:fa:0d:f1:
87:ce:af:2c:4f:4f:d2:69:7b:41:dc:da:b7:93:5a:e0:4a:4a:
bf:b9:55:8a:17:4b:92:ae:0c:7e:55:6b:7f:70:78:23:77:0c:
f9:9b:6b:10:5d:07:84:7c:3a:d2:d6:28:7b:c7:ac:60:df:3d:
55:09:9b:19:9e:85:0a:74:f4:08:f3:63:d8:79:d5:dd:37:40:
b0:29:5b:16:73:b2:81:17:c1:db:9e:ca:bb:53:c1:3b:95:75:
7e:69:f9:88:57:23:1a:34:ff:19:80:2a:86:a9:37:f3:a1:33:
b8:ea:34:f6:46:ae:8f:a6:59:6e:9e:e2:15:82:2f:a6:a1:37:
c0:70:90:73:f4:93:01:f6:a9:d1:6d:45:4d:da:2f:6d:b3:1a:
80:4c:b5:47:3d:4f:cc:90:66:51:6b:cc:4b:93:12:dc:29:50:
56:60:9a:b1:d8:63:00:c4:49:ca:79:8c:5c:3f:be:58:ee:77:
ff:06:b3:7d:0d:0d:e4:9f:d0:fd:f1:07:f6:33:bd:bf:9c:8a:
3a:7b:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:34 2025 by rpki-client