Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/3138352e34392e3134322e302f32342d3234203d3e2030.roa
File: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: DeisEUsahtJQlYV8kMyKAgce4buKaBDFvpBTI3M7aX4=
Subject key identifier: 9B:E4:7D:92:3C:4C:7B:75:9D:55:07:3D:73:C4:EE:3C:93:BC:3E:EC
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 5DE945A1DE3AC5CFF300BDB3DC4AF12DFC177909
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/3138352e34392e3134322e302f32342d3234203d3e2030.roa
Signing time: Mon 10 Jun 2024 10:20:39 +0000
ROA not before: Mon 10 Jun 2024 10:15:39 +0000
ROA not after: Mon 09 Jun 2025 10:20:39 +0000
asID: 0
IP address blocks: 185.49.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e9:45:a1:de:3a:c5:cf:f3:00:bd:b3:dc:4a:f1:2d:fc:17:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:15:39 2024 GMT
Not After : Jun 9 10:20:39 2025 GMT
Subject: CN=9BE47D923C4C7B759D55073D73C4EE3C93BC3EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:f9:43:fa:d1:a1:59:13:f0:3f:b7:26:01:
8d:84:51:12:99:5d:b4:cb:13:37:bd:04:e4:9b:d3:
80:35:1a:30:a5:2e:66:57:da:93:a2:be:31:c7:e6:
63:32:51:ec:17:7f:f1:ae:9d:dd:9c:f5:a2:13:fc:
5b:99:c3:74:9f:1b:55:58:c6:ff:aa:bc:b4:e4:a2:
d3:e4:47:f7:45:61:c0:fa:48:10:7f:90:fa:b1:bb:
ff:73:12:66:8d:a6:af:9f:4b:38:64:b0:fb:f6:93:
2a:e6:fa:3c:12:59:1e:ab:26:27:56:13:90:94:ef:
a2:d6:28:77:16:c4:bc:e2:fe:55:d1:35:ae:8f:f6:
10:3f:1b:a0:ea:47:f3:1f:9c:a6:5c:5c:82:b6:6f:
0e:a6:b6:88:b2:7b:08:2e:37:2d:88:ce:4e:a5:ad:
25:0e:bb:f9:8d:9f:91:b1:0d:16:21:86:57:e2:24:
2b:d6:3f:39:59:6e:f9:57:6c:7c:59:c5:eb:50:f0:
ac:64:9c:bc:32:cd:8a:c0:7b:3b:30:01:98:3a:f5:
b9:1b:ee:4f:41:b8:66:ef:11:95:0e:a7:ae:81:97:
1c:c8:d7:30:c0:50:5d:2c:75:04:1e:f6:bb:08:d9:
32:f5:31:cd:78:04:58:b9:56:6f:a1:26:72:5f:b3:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:7D:92:3C:4C:7B:75:9D:55:07:3D:73:C4:EE:3C:93:BC:3E:EC
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/3138352e34392e3134322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.142.0/24
Signature Algorithm: sha256WithRSAEncryption
25:49:84:4f:13:67:41:eb:4a:fc:4d:5a:ea:88:4a:59:cc:ca:
a6:81:78:d7:b2:c0:97:d1:93:4e:66:08:01:fd:e2:b4:cb:14:
18:a4:93:81:a4:f9:e1:16:6d:db:4f:27:71:d3:b3:e3:c8:41:
14:37:b7:41:7f:2d:a2:88:57:b5:8b:7f:0d:3a:01:0e:ff:1a:
71:b0:85:0e:f3:8e:a4:09:ba:2c:d5:a2:51:8c:e4:6f:dc:b1:
40:5d:c3:4d:01:d7:a3:9e:e1:ec:64:2f:ee:8c:c0:fa:62:c0:
9c:9e:d6:26:4e:ba:77:81:79:21:6a:e5:03:d3:60:8e:84:f6:
90:64:bc:11:d5:77:47:9c:b5:42:5f:c1:98:30:be:b6:58:0a:
33:cb:5a:06:89:1e:5a:81:eb:e9:d8:08:29:b1:e5:21:87:c8:
16:a6:00:b6:df:11:3c:0a:dd:d9:6b:b2:83:20:48:6e:5b:7d:
10:6f:4d:f8:68:63:0b:31:a0:79:65:77:30:11:ad:ce:d6:3b:
82:14:9b:08:9b:a7:9d:94:5a:fb:8b:a3:01:dc:70:20:69:b7:
d1:0f:6e:c7:b6:43:61:86:89:49:b4:1c:d3:bc:e3:93:b1:aa:
04:0f:35:b4:98:30:c0:b3:f8:3c:f8:53:0f:4a:3a:41:67:31:
21:3a:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:54:16 2025 by rpki-client