Route Origin Authorization
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930353a3a2f34382d3438203d3e20313939373636.roa
File: 326130353a646663313a383930353a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier: MMx0Foghpie8R/SjD33wE48REZUdbTH20v78pekydi8=
Subject key identifier: 56:F4:12:F1:32:C7:0A:D4:D2:0A:B7:4F:23:20:54:9F:86:FE:C5:4E
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 2FE9E288C81B570248D35E8A785C1C54933ADAA1
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930353a3a2f34382d3438203d3e20313939373636.roa
Signing time: Fri 29 Sep 2023 00:29:59 +0000
ROA not before: Fri 29 Sep 2023 00:24:59 +0000
ROA not after: Fri 27 Sep 2024 00:29:59 +0000
asID: 199766
IP address blocks: 2a05:dfc1:8905::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e9:e2:88:c8:1b:57:02:48:d3:5e:8a:78:5c:1c:54:93:3a:da:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Sep 29 00:24:59 2023 GMT
Not After : Sep 27 00:29:59 2024 GMT
Subject: CN=56F412F132C70AD4D20AB74F2320549F86FEC54E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:77:4b:e7:92:91:0b:75:68:90:62:c5:93:
e0:1e:25:81:89:66:1c:b3:24:97:8a:ac:9d:85:cc:
f4:89:be:12:b3:3d:b5:ae:cf:e0:f7:9a:95:ba:4c:
cd:b7:61:35:5e:66:1d:83:d5:2a:69:74:aa:21:2b:
6c:f0:22:df:5d:4d:0f:5c:06:be:90:6f:80:9c:25:
94:05:7b:b2:f6:f8:7f:1f:84:bd:e4:47:61:0f:76:
2b:f0:8e:cd:44:40:b5:cc:c2:da:38:dc:80:72:73:
dc:0b:39:9e:06:68:bf:af:94:6c:d8:49:93:7a:62:
07:6a:7a:a5:d5:9f:72:06:3d:f1:da:41:0a:7f:f5:
e6:96:cd:48:44:2c:49:9f:fc:2d:4b:97:8a:41:a2:
0f:fe:b9:b2:9e:f7:0f:86:68:84:5e:a7:a7:24:98:
73:eb:6f:a9:0a:aa:87:49:58:4a:9b:60:8e:c0:df:
cf:69:97:17:47:73:c4:22:b4:5c:fa:9a:81:0f:9e:
37:56:53:ca:39:e9:1e:93:0d:9c:4f:59:2e:a0:70:
58:55:6f:c3:6e:55:e7:64:2f:84:f7:61:83:0c:a5:
f4:cf:b1:cd:e7:d7:8e:3e:20:69:6b:31:78:9e:ed:
17:36:f2:e4:36:97:24:11:bd:e0:49:d2:53:8c:8c:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:12:F1:32:C7:0A:D4:D2:0A:B7:4F:23:20:54:9F:86:FE:C5:4E
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/326130353a646663313a383930353a3a2f34382d3438203d3e20313939373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8905::/48
Signature Algorithm: sha256WithRSAEncryption
74:c1:71:3e:a8:74:d2:a0:91:ff:93:b3:36:92:87:7b:66:00:
76:91:72:08:97:53:a1:7f:4b:0d:bd:4d:ae:4e:bf:cd:01:0e:
d1:a5:e1:47:51:4f:c0:99:23:6e:9f:26:5a:fb:2e:95:da:2f:
5f:6a:0e:c4:8e:fb:fb:b1:7b:7f:a2:0a:b2:38:e0:cd:06:a5:
84:15:36:fc:90:de:b7:1b:de:cc:6d:29:40:0c:34:f1:98:a1:
e3:3b:fc:7f:18:a6:15:ca:02:1a:27:35:0a:de:bf:24:a6:63:
3f:4d:6c:31:79:5c:0a:5f:7c:69:b9:53:af:0c:2e:74:69:67:
b7:3d:64:86:2c:1b:b2:9e:a0:e0:74:e4:3b:c4:bd:33:b2:f3:
24:97:e9:c3:d4:ad:3b:0c:bb:31:72:e9:a7:58:11:a1:67:ec:
6f:67:bc:39:55:e3:4e:13:f9:a3:e1:90:eb:f3:ef:a2:08:fd:
1e:cc:ea:9e:42:05:ed:8e:0f:00:50:be:6c:d5:21:cd:b6:ef:
02:08:99:df:7e:f4:9f:df:29:fc:06:5a:e1:44:cb:2f:c8:03:
1a:5a:25:d6:0f:1d:5c:fb:de:fa:22:4f:21:2b:9b:f0:bc:00:
b2:70:10:38:f4:95:49:6b:63:84:5c:b2:52:c0:02:3d:ef:0b:
b5:9d:3a:c1
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUL+niiMgbVwJI016KeFwcVJM62qEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwOTI2OUUyN0E5MzE3ODU2NEYzMjE3MEU2RUU5QzU0
RjZERkRGRTAeFw0yMzA5MjkwMDI0NTlaFw0yNDA5MjcwMDI5NTlaMDMxMTAvBgNV
BAMTKDU2RjQxMkYxMzJDNzBBRDREMjBBQjc0RjIzMjA1NDlGODZGRUM1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRndL55KRC3VokGLFk+AeJYGJ
ZhyzJJeKrJ2FzPSJvhKzPbWuz+D3mpW6TM23YTVeZh2D1SppdKohK2zwIt9dTQ9c
Br6Qb4CcJZQFe7L2+H8fhL3kR2EPdivwjs1EQLXMwto43IByc9wLOZ4GaL+vlGzY
SZN6YgdqeqXVn3IGPfHaQQp/9eaWzUhELEmf/C1Ll4pBog/+ubKe9w+GaIRep6ck
mHPrb6kKqodJWEqbYI7A389plxdHc8QitFz6moEPnjdWU8o56R6TDZxPWS6gcFhV
b8NuVedkL4T3YYMMpfTPsc3n144+IGlrMXie7Rc28uQ2lyQRveBJ0lOMjBffAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUVvQS8TLHCtTSCrdPIyBUn4b+xU4wHwYDVR0j
BBgwFoAUVgkmniepMXhWTzIXDm7pxU9t/f4wDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vdGVzdGJlZC5rcmlsbC5jbG91ZC9yZXBvL1N0
b25oYW0vMS81NjA5MjY5RTI3QTkzMTc4NTY0RjMyMTcwRTZFRTlDNTRGNkRGREZF
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvNTYwOTI2OUUyN0E5
MzE3ODU2NEYzMjE3MEU2RUU5QzU0RjZERkRGRS5jZXIwgYsGCCsGAQUFBwELBH8w
fTB7BggrBgEFBQcwC4ZvcnN5bmM6Ly90ZXN0YmVkLmtyaWxsLmNsb3VkL3JlcG8v
U3RvbmhhbS8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzOTMwMzUzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMTM5MzkzNzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BiQUwDQYJ
KoZIhvcNAQELBQADggEBAHTBcT6odNKgkf+TszaSh3tmAHaRcgiXU6F/Sw29Ta5O
v80BDtGl4UdRT8CZI26fJlr7LpXaL19qDsSO+/uxe3+iCrI44M0GpYQVNvyQ3rcb
3sxtKUAMNPGYoeM7/H8YphXKAhonNQrevySmYz9NbDF5XApffGm5U68MLnRpZ7c9
ZIYsG7KeoOB05DvEvTOy8ySX6cPUrTsMuzFy6adYEaFn7G9nvDlV404T+aPhkOvz
76II/R7M6p5CBe2ODwBQvmzVIc227wIImd9+9J/fKfwGWuFEyy/IAxpaJdYPHVz7
3voiTyErm/C8ALJwEDj0lUlrY4RcslLAAj3vC7WdOsE=
-----END CERTIFICATE-----
Generated at Sat May 10 08:26:21 2025 by rpki-client