Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930343a3a2f34382d3438203d3e20323131333231.roa
File: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (raw, json)
Hash identifier: TSd9HO9dq+dko6+xrgx3dRMjvv8mgD0SQRJo3c3FGKU=
Subject key identifier: 4B:FD:BD:2F:F2:66:68:44:45:EF:31:9A:BA:6C:77:71:D2:E5:03:A7
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 794A3F8C27FAC96D09895F3497EA7A58C1360564
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930343a3a2f34382d3438203d3e20323131333231.roa
Signing time: Mon 10 Jun 2024 10:23:38 +0000
ROA not before: Mon 10 Jun 2024 10:18:38 +0000
ROA not after: Mon 09 Jun 2025 10:23:38 +0000
asID: 211321
IP address blocks: 2a04:b904::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4a:3f:8c:27:fa:c9:6d:09:89:5f:34:97:ea:7a:58:c1:36:05:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:18:38 2024 GMT
Not After : Jun 9 10:23:38 2025 GMT
Subject: CN=4BFDBD2FF266684445EF319ABA6C7771D2E503A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:de:cb:1f:ed:49:d4:ba:24:5e:42:89:f6:
be:9f:0b:ab:de:82:87:b4:7f:13:86:5a:cf:06:d8:
1b:12:77:9b:f6:4c:96:fb:62:8b:e3:7b:7f:f0:19:
8d:64:1f:d6:84:bd:db:10:21:0d:fc:f8:de:5a:c0:
3f:76:e3:d3:e6:06:01:89:9b:57:1f:61:0a:07:3f:
10:09:a8:f1:7b:c9:45:be:8b:54:1a:30:08:c8:ce:
fc:3a:d2:9f:96:1c:b1:8b:dc:49:e7:6c:76:fe:d8:
6b:8b:30:63:c0:48:70:b6:c7:dc:9b:aa:f1:57:bb:
d6:b5:30:51:80:da:91:37:c3:da:1a:f3:c6:d8:d6:
a5:6f:78:e7:17:ed:f7:be:11:b1:7d:45:dc:ba:9f:
05:5c:4d:ae:b9:23:69:10:96:cf:11:66:7c:b7:da:
79:7a:dc:17:61:73:b0:f9:e2:4b:d0:af:8a:1c:00:
d0:63:91:5b:bd:81:78:e8:88:55:ba:39:2e:91:77:
b4:b6:7d:cc:2a:43:6a:e0:2f:cd:0f:14:ad:85:cf:
a5:ed:06:fa:ec:e9:d4:fa:80:91:d8:67:bc:49:13:
ef:4b:c1:23:cc:17:8d:90:6c:62:61:9e:f4:28:66:
03:47:bd:08:c7:84:8d:ed:17:fd:14:30:b7:dc:0d:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:BD:2F:F2:66:68:44:45:EF:31:9A:BA:6C:77:71:D2:E5:03:A7
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930343a3a2f34382d3438203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b904::/48
Signature Algorithm: sha256WithRSAEncryption
18:b4:55:c6:19:5a:f3:42:f6:64:3c:3d:67:b0:46:84:2c:08:
20:37:d4:4d:48:95:e8:41:c5:03:5a:9c:5f:0f:1c:c5:dd:de:
73:f9:ff:39:02:7a:f7:bd:66:ca:1b:4e:58:bd:09:0c:04:86:
06:f0:95:09:9e:68:f9:5e:2e:e0:93:86:1c:a6:83:85:61:41:
ba:fd:74:d4:60:8e:b2:82:8a:79:68:c9:34:69:62:47:f8:df:
80:8b:d2:4e:fb:42:5c:4d:98:c6:35:8f:78:ae:70:2a:06:46:
06:08:0a:a4:19:b3:c9:05:8b:b0:5b:18:0e:02:62:50:2e:85:
4a:bf:3b:6c:34:f3:47:f3:d9:37:74:94:d3:9e:5e:67:0e:a4:
85:3d:44:e4:22:7b:a0:6c:a9:ce:1d:03:94:f4:a8:c3:a0:0e:
3b:bd:f0:69:90:64:2e:bc:eb:d7:bf:6f:04:94:00:a2:a6:d9:
9e:f8:b7:cd:7a:c3:92:28:90:79:18:c4:e7:6c:c5:5a:5d:67:
94:d7:72:e6:4a:58:1e:39:ed:68:46:77:54:21:18:71:86:cc:
81:d6:a5:16:cf:d9:51:25:bd:1f:0f:81:26:18:a6:96:0a:7d:
73:bb:0d:2e:9d:2e:1a:c2:32:fd:3f:68:d2:30:f7:1f:3b:b6:
c5:1d:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:53:09 2025 by rpki-client