Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930303a3a2f33302d3330203d3e2038353837.roa
File: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (raw, json)
Hash identifier: sGm1Uy5Kg7UjwIwoGM6aQ6I36A7RyK74tNzmyFMDAHI=
Subject key identifier: CF:62:14:69:1A:C9:C5:5A:1C:B1:45:A8:AC:D7:F1:0B:AF:5D:9B:72
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 4ADCF1251C2881A72E604687154F4A78337075C3
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930303a3a2f33302d3330203d3e2038353837.roa
Signing time: Mon 10 Jun 2024 10:21:45 +0000
ROA not before: Mon 10 Jun 2024 10:16:45 +0000
ROA not after: Mon 09 Jun 2025 10:21:45 +0000
asID: 8587
IP address blocks: 2a04:b900::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:dc:f1:25:1c:28:81:a7:2e:60:46:87:15:4f:4a:78:33:70:75:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:16:45 2024 GMT
Not After : Jun 9 10:21:45 2025 GMT
Subject: CN=CF6214691AC9C55A1CB145A8ACD7F10BAF5D9B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:06:9c:b9:0a:e4:0e:6f:61:e5:3a:1c:da:
6d:80:2e:c5:dd:25:37:ea:16:b1:bd:c2:7c:c4:db:
d8:cd:b3:35:e2:81:4e:05:88:dc:e2:fa:eb:f1:f7:
ce:36:70:35:c8:ce:1b:0e:65:69:18:ae:e9:44:89:
6b:f7:92:00:a0:28:c5:aa:46:87:87:02:01:3f:6f:
b8:f9:d4:0b:c4:5b:83:a9:75:b2:e4:d6:dd:71:1d:
c9:13:27:68:87:4b:89:58:35:25:fc:47:65:66:71:
8f:2a:b3:bb:c9:be:ab:19:6e:1c:f2:b9:44:7d:3d:
a6:8e:3b:b5:f6:32:ea:88:77:54:e9:3f:a2:f7:08:
d1:0b:9e:d9:a1:20:53:40:5e:12:5f:9e:4d:dd:fa:
ca:4b:6d:26:4e:64:0a:01:47:91:01:4e:4a:04:66:
68:d0:2d:13:a5:d6:7f:b8:7c:28:21:5f:ab:70:40:
b5:b5:ef:89:3f:b4:e0:ce:d2:64:c0:58:3b:68:e0:
2e:bd:79:2e:35:14:a4:02:e1:7e:eb:5a:c0:7a:25:
1c:55:01:19:4c:5c:55:5d:ea:3a:aa:3c:34:61:8b:
66:24:ba:45:1f:6b:8b:46:5c:3d:81:a8:23:96:86:
e2:66:4e:3b:d3:e8:07:cb:e8:88:de:e9:ff:cb:1b:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:14:69:1A:C9:C5:5A:1C:B1:45:A8:AC:D7:F1:0B:AF:5D:9B:72
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930303a3a2f33302d3330203d3e2038353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b900::/30
Signature Algorithm: sha256WithRSAEncryption
23:8b:d8:e6:fc:5a:54:ca:1d:62:d3:9d:d9:80:87:c0:5d:ef:
84:ef:fc:d6:8e:e3:12:24:0c:c0:73:9d:37:33:a2:57:0e:c9:
32:6a:6b:92:92:69:c4:ff:2c:ba:44:c2:8c:5f:cc:00:b6:ad:
1e:04:ff:14:3c:13:9f:88:64:90:54:0d:b1:03:f6:7e:36:58:
03:43:36:ff:e2:90:10:98:ee:5a:64:ba:b8:b0:a7:cc:ec:b5:
5d:65:34:3a:90:6e:0a:39:cd:d8:60:d7:7d:f8:f4:38:f6:ff:
c9:49:c2:99:45:30:03:71:bf:00:21:32:02:7d:12:b4:a8:e1:
7e:b0:46:f5:64:fe:16:66:60:3f:59:fd:8f:d7:ec:a0:5d:74:
0d:b4:08:d8:5e:23:ad:bc:49:ba:a3:4c:e6:60:14:69:c8:ae:
5f:77:75:ec:b6:2e:d9:51:41:3a:e4:65:d5:31:89:07:52:e2:
12:6e:f3:b2:74:d6:f0:92:0f:1e:9d:5c:e6:f7:82:5c:60:b0:
0d:83:89:5b:fc:3e:3d:02:66:c1:7e:1a:3e:be:49:20:a7:49:
9f:63:a2:5e:4c:cd:55:97:09:71:1c:89:5e:ee:0a:71:b9:35:
f4:7d:1d:5b:e8:a7:5d:2d:69:ba:61:7b:67:b7:0f:27:d0:15:
c6:07:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:54:21 2025 by rpki-client