Route Origin Authorization
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930363a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930363a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: gwjvNqW1cBA2oZpQMibZ93ZCxFE20fNMxWlKpjUdCds=
Subject key identifier: DD:09:7C:A8:34:4B:6C:8A:E3:56:F8:89:70:7C:35:5E:27:24:00:8F
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 5353191CA50E505865A3578C65CC4708810E102C
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930363a3a2f34382d3438203d3e20313939373636.roa
Signing time: Fri 29 Sep 2023 00:36:22 +0000
ROA not before: Fri 29 Sep 2023 00:31:22 +0000
ROA not after: Fri 27 Sep 2024 00:36:22 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8906::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:53:19:1c:a5:0e:50:58:65:a3:57:8c:65:cc:47:08:81:0e:10:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Sep 29 00:31:22 2023 GMT
Not After : Sep 27 00:36:22 2024 GMT
Subject: CN=DD097CA8344B6C8AE356F889707C355E2724008F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:9d:1f:2b:6b:7b:74:1b:39:2b:4d:bd:fb:
b3:bf:3b:cc:a2:06:55:f4:ff:18:b5:58:9e:6a:b9:
24:ed:1f:e9:51:32:c1:69:4e:26:be:8a:cc:22:d1:
80:e7:c6:92:1f:33:dc:77:a4:e4:28:70:8f:8a:c1:
81:91:6a:b9:1c:c9:65:4d:e3:32:fe:9a:f7:1c:e7:
71:ca:87:bb:e2:33:6e:c3:b3:5f:d9:9d:38:9c:57:
af:3c:97:7b:d0:9c:e6:09:3e:eb:51:7f:d7:12:8c:
b2:36:29:9f:cd:3d:1d:86:9a:ee:9a:b7:b4:91:cf:
06:59:a9:bf:1e:48:fa:dc:98:23:ae:2c:a1:c0:4e:
a7:c7:2e:f8:a4:9a:ba:67:31:0f:a2:62:bf:db:b7:
dd:58:2b:63:1a:64:8d:34:be:f6:66:18:5f:a7:2e:
c1:6e:95:56:ed:63:17:43:e1:93:57:11:5a:fc:a2:
60:97:5b:09:21:37:b4:4f:7c:f4:bc:90:b9:93:65:
2e:d8:96:0b:b5:60:7d:0b:9d:48:8b:da:0a:96:a6:
c9:82:2e:c5:00:52:df:9d:32:a5:5a:e0:bd:ea:d4:
9e:8b:5d:d9:62:ac:04:e3:88:25:9f:a3:fb:2d:d9:
8e:ea:74:7c:b3:49:06:4a:3d:8d:c1:6e:cc:bd:36:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:09:7C:A8:34:4B:6C:8A:E3:56:F8:89:70:7C:35:5E:27:24:00:8F
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930363a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8906::/48
Signature Algorithm: sha256WithRSAEncryption
6a:e5:be:e2:8f:6e:2c:84:4a:43:8e:4d:97:31:1a:f3:4e:ba:
53:52:23:25:8c:a5:e5:bb:3d:1f:84:f8:d3:74:9c:12:41:2a:
5f:11:18:50:e7:ba:3d:d3:bd:55:ae:ca:78:53:42:76:51:7e:
24:d5:76:4c:35:c8:30:e4:cd:b7:3e:95:43:f9:d7:47:8f:26:
39:8a:78:b6:75:04:b2:f5:ec:5a:a8:8a:3f:79:02:6f:83:99:
92:e8:0d:3b:91:15:e3:33:95:ad:94:87:61:09:b6:a8:93:da:
1b:f2:6b:6a:a5:83:cb:14:1f:ea:7b:2a:74:87:81:8b:c3:bc:
34:ed:0f:a3:15:0d:77:46:17:dd:29:f1:58:50:f8:82:cb:2a:
bc:2f:15:c9:b5:29:f5:f9:76:44:1a:ce:43:8f:bc:26:03:7d:
d0:5f:47:71:69:ec:c9:59:aa:bd:d3:02:a8:e3:ea:ff:39:47:
47:d5:6b:71:11:71:c3:34:dc:11:43:e5:31:2f:6b:48:ab:34:
db:6d:64:5a:9b:7a:24:52:f7:92:0c:ac:ff:86:2c:42:05:b7:
b4:55:5f:9d:28:40:f3:c4:11:dc:cd:49:0f:62:c1:99:0e:56:
9a:c3:f8:83:a3:9a:b2:b6:7f:0d:9f:0b:92:51:af:8e:0d:f9:
fa:77:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:37 2025 by rpki-client