Route Origin Authorization
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa
File: 326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: yktFopa7s6TjLExsFEINww+jcj2nxDx6XKYmqLd8Uow=
Subject key identifier: 1A:58:39:4E:62:79:B2:66:B9:55:0E:C2:45:3D:38:AE:2D:41:E2:A9
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 6A6529693C0A03CBCD65B582CAA195F3D79DD6DE
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa
Signing time: Sun 24 Sep 2023 15:07:20 +0000
ROA not before: Sun 24 Sep 2023 15:02:20 +0000
ROA not after: Sun 22 Sep 2024 15:07:20 +0000
asID: 16509
IP address blocks: 2a05:dfc1:8900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:65:29:69:3c:0a:03:cb:cd:65:b5:82:ca:a1:95:f3:d7:9d:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Sep 24 15:02:20 2023 GMT
Not After : Sep 22 15:07:20 2024 GMT
Subject: CN=1A58394E6279B266B9550EC2453D38AE2D41E2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:a9:c5:6e:e9:25:5b:93:9d:a2:70:a6:34:
f1:a6:6b:0b:9c:a8:1c:71:70:8e:fe:1a:12:fd:93:
1e:45:70:ff:f0:00:95:23:0c:41:de:62:d5:d4:a6:
14:32:c9:03:fe:cc:b1:1a:8f:69:3f:29:9d:a5:60:
7f:de:7e:8b:b3:14:b8:30:27:01:7e:1f:c3:79:92:
80:0c:f4:7d:3b:2a:96:ff:14:71:d2:3d:51:a0:58:
f8:b6:d7:e0:aa:05:07:5a:66:8a:f8:e9:26:54:b1:
2a:86:29:54:40:f1:57:64:ca:7d:3f:af:5f:4a:80:
0b:b5:3d:c3:c6:22:c4:37:f9:aa:71:c6:53:b5:54:
b1:07:eb:3d:69:10:e4:37:98:6f:e9:ae:3d:1d:bd:
94:29:e8:86:a4:1d:ca:e5:0d:fa:9b:94:f3:f8:31:
7a:be:66:aa:e6:e2:43:44:b3:4c:8c:a3:3b:6f:4f:
1d:74:b4:dc:73:ed:74:97:ce:93:6f:29:98:7b:18:
44:f9:6d:d3:53:93:49:65:15:2e:5c:7d:2e:7b:32:
53:c1:9e:9c:d9:e9:aa:6a:c3:fd:4f:23:5f:69:d3:
d6:a7:57:91:0e:c9:61:2b:86:f7:85:c8:70:84:12:
bc:67:29:07:1a:af:b8:29:59:83:fc:72:6b:b7:2e:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:58:39:4E:62:79:B2:66:B9:55:0E:C2:45:3D:38:AE:2D:41:E2:A9
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8900::/48
Signature Algorithm: sha256WithRSAEncryption
ae:08:fd:db:27:8a:e3:ec:26:d6:bd:03:fe:58:d7:31:69:a5:
67:c2:30:db:04:d1:61:9f:05:44:91:7b:2f:6a:a4:4e:6f:bd:
d2:86:94:40:32:d7:72:a5:87:ed:9b:06:97:b1:bb:c5:c2:7a:
22:e9:b6:22:c7:87:59:5e:c9:1c:9a:bd:f9:ab:f8:1a:7c:bd:
eb:c8:0e:30:7c:22:50:94:67:9a:67:33:bc:70:3e:b5:9f:f7:
b0:f5:af:49:38:8b:90:93:7b:14:ac:3e:41:e5:5b:59:cb:39:
f0:49:ca:3c:98:45:68:e9:13:cd:af:4a:d0:60:08:69:79:d5:
c3:52:88:ef:6c:a4:d0:b9:2f:dd:e0:8a:7b:4d:e1:62:83:0b:
78:20:b8:f1:8d:12:52:76:2c:8d:83:43:bd:23:cd:68:e1:31:
88:94:30:36:57:3e:2d:45:14:f4:02:7e:70:a7:99:d0:63:d6:
1b:17:83:58:8c:84:db:ad:9d:d3:31:0a:73:ed:64:4a:f6:fe:
2c:49:17:a7:78:8a:a2:e0:5e:d4:99:38:81:61:d5:d5:35:bd:
bd:71:58:a5:52:76:49:53:0c:32:0a:49:5e:5e:85:73:11:d8:
bd:c1:f6:08:a9:bd:79:09:3b:3e:a8:84:e9:9c:fb:0f:8f:96:
6f:9f:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:13:12 2025 by rpki-client