Route Origin Authorization
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930343a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930343a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: QWsgxMGYeKnxW1vMo2pI8eTpuLMXeRoV6Lt3DteusZc=
Subject key identifier: 55:DE:2F:7E:E1:F1:A6:16:7F:1B:0E:E6:F5:82:CF:22:E8:6C:AA:C7
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 734CE273E5B327B3A314D1F1BA0A42AD41D708D3
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930343a3a2f34382d3438203d3e20313939373636.roa
Signing time: Fri 29 Sep 2023 00:20:34 +0000
ROA not before: Fri 29 Sep 2023 00:15:34 +0000
ROA not after: Fri 27 Sep 2024 00:20:34 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8904::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4c:e2:73:e5:b3:27:b3:a3:14:d1:f1:ba:0a:42:ad:41:d7:08:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Sep 29 00:15:34 2023 GMT
Not After : Sep 27 00:20:34 2024 GMT
Subject: CN=55DE2F7EE1F1A6167F1B0EE6F582CF22E86CAAC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:e3:d8:1e:24:6b:8c:bb:11:4c:c5:a3:3a:
93:2f:0f:a0:76:38:95:90:c2:91:f2:c6:cb:29:fa:
90:8b:b2:0b:25:85:3b:7f:a4:39:79:4c:3d:25:45:
08:b9:ae:56:df:53:41:c9:1d:f7:ae:aa:4f:fa:e8:
b7:db:d8:6a:98:9f:e6:cc:9d:c1:d2:16:b8:18:09:
83:2b:7c:d1:12:25:af:9d:3e:ec:a7:95:f6:fb:41:
7e:84:d9:75:25:30:02:97:80:d5:db:67:66:cb:64:
d8:f4:fd:0e:bc:e0:9f:75:c9:98:85:77:7a:e4:fb:
a8:90:2a:78:77:e1:bc:49:f0:49:a9:56:83:53:38:
5c:5b:3b:68:0e:c0:7d:f4:b7:f3:84:2c:8f:c9:fb:
01:e8:c5:81:e1:ad:8f:40:96:e1:20:6d:d5:94:c0:
0d:11:5c:b8:72:bc:90:be:36:a3:d3:d8:6a:c2:94:
ac:c3:f4:89:e9:44:28:f7:c7:13:a7:8f:72:15:39:
06:dd:9b:0f:a0:2e:66:76:4f:bd:97:e3:de:ce:f0:
32:3b:16:c6:3f:39:50:d9:72:5b:ca:e2:9b:f1:f2:
9d:aa:f0:66:39:be:1b:aa:58:25:21:45:d3:f5:74:
bd:11:4b:c8:2d:d5:e3:80:61:a1:4f:95:d1:f0:d6:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:2F:7E:E1:F1:A6:16:7F:1B:0E:E6:F5:82:CF:22:E8:6C:AA:C7
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930343a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8904::/48
Signature Algorithm: sha256WithRSAEncryption
4d:2c:87:7a:ea:8f:b4:9e:dd:65:33:4f:e0:fd:7e:9b:29:11:
35:85:8f:0d:54:53:68:b0:d9:00:42:2b:38:b8:b2:d5:67:58:
b9:f2:49:2a:62:e3:db:3a:9d:86:c1:a6:db:bb:bd:31:cf:b2:
4a:00:ed:54:77:ea:ae:35:f7:97:f4:8f:56:c4:57:3a:2b:ad:
a8:b7:5d:a1:1a:4d:f4:47:3f:0d:52:a4:4b:5f:2d:ce:09:0e:
30:bc:96:39:cc:48:28:74:6b:33:d6:f2:3c:f0:ac:ce:c0:63:
1f:a8:85:95:07:7e:3c:ba:69:53:d2:36:57:0e:d6:32:2f:e9:
b4:aa:c3:73:03:05:ec:df:c2:41:b7:70:0d:5b:dc:9b:ba:36:
44:dc:39:b2:87:92:66:bb:a0:e5:ae:42:0a:b6:b4:1b:d1:ea:
37:9f:38:a5:7e:f7:47:0a:42:01:7f:11:44:8f:6f:db:1e:bf:
71:10:be:a1:ca:d1:ed:25:84:6d:d9:fd:0f:61:dc:dd:1c:19:
5a:e7:87:9d:fa:4f:d8:17:04:6c:0e:c0:14:ac:4c:05:79:2f:
a4:fa:76:5c:46:ea:a6:aa:4c:f6:26:d7:60:e8:5c:ec:64:8a:
44:c8:b3:3a:20:1f:94:e1:a4:c4:9c:23:24:88:ac:fc:04:c4:
1a:af:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:26:09 2025 by rpki-client