Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930353a3a2f34382d3438203d3e203134363138.roa
File: 326130343a623930353a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: QVouV/Y6E4B6LpG60NAIOswIMVu3jQoivlzC4oL37bc=
Subject key identifier: 68:7E:8A:67:8B:C6:AC:0F:38:A9:C6:32:18:4A:45:E6:E8:30:86:68
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 72C9314C75B631CE948016C28F56C8FE3A4115E5
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930353a3a2f34382d3438203d3e203134363138.roa
Signing time: Mon 10 Jun 2024 10:22:27 +0000
ROA not before: Mon 10 Jun 2024 10:17:27 +0000
ROA not after: Mon 09 Jun 2025 10:22:27 +0000
asID: 14618
IP address blocks: 2a04:b905::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c9:31:4c:75:b6:31:ce:94:80:16:c2:8f:56:c8:fe:3a:41:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:17:27 2024 GMT
Not After : Jun 9 10:22:27 2025 GMT
Subject: CN=687E8A678BC6AC0F38A9C632184A45E6E8308668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:c6:99:77:76:c9:ee:d3:39:5c:5b:d6:3f:
26:3b:d9:4a:db:60:8b:03:35:f3:22:07:0e:4e:43:
4f:10:44:99:f8:bb:88:a4:3b:55:b1:7b:23:d6:6f:
f2:d2:67:f1:45:d9:c1:9f:ce:50:83:54:5a:6c:5b:
6d:fe:9d:bd:d7:20:39:b7:37:db:30:5c:69:5e:f1:
16:f7:a8:45:14:8d:af:d0:a7:a6:a8:e7:58:34:16:
d4:ff:16:1f:f3:9f:1e:0e:87:50:fa:48:3c:80:e2:
c2:95:24:7c:bb:b6:b1:ba:62:58:26:39:8b:20:09:
a5:17:ba:38:07:2d:20:0c:27:a3:57:9b:49:e9:46:
25:ed:ee:e3:a2:32:06:a2:f1:d5:80:f3:ae:ab:04:
86:00:5a:b2:c7:98:b6:31:54:05:36:06:04:ec:ba:
64:3e:b9:26:2e:c1:1e:7e:a2:f3:d1:9a:63:ab:18:
8b:bb:fa:e4:2c:08:d9:82:78:ab:c5:e7:28:3e:21:
b1:e6:af:96:51:ed:46:00:6d:8a:b6:ca:84:06:7d:
76:3c:02:b8:51:c6:2c:9c:c2:7a:4f:b6:92:da:6f:
f5:71:3b:42:b1:5a:6a:79:b3:61:17:48:49:4f:c8:
81:e4:be:59:8b:eb:3b:6a:6a:76:c1:e3:f9:be:3e:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7E:8A:67:8B:C6:AC:0F:38:A9:C6:32:18:4A:45:E6:E8:30:86:68
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930353a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/48
Signature Algorithm: sha256WithRSAEncryption
77:b1:12:37:d2:d1:5b:66:bc:ee:72:01:5b:87:75:61:d1:09:
fa:7f:e2:11:8b:00:04:2a:b3:a5:54:d3:13:a0:eb:11:d7:b2:
2b:73:80:a9:96:46:17:9c:09:26:6e:18:4d:d1:bb:a8:63:14:
2a:e3:01:2b:be:20:96:10:15:1c:57:70:00:bd:8b:92:95:6b:
5b:04:92:42:b7:86:b4:90:cd:63:ec:da:af:9e:b9:95:b8:c3:
8f:6e:90:90:4c:45:e9:ec:b1:c6:4c:11:0a:ee:64:10:fa:8e:
de:31:70:bc:cd:ea:27:66:3c:57:95:a1:c9:5f:75:85:68:23:
1f:d7:29:ca:a1:9f:76:bc:3c:3e:53:bd:c7:5b:c5:77:97:dc:
01:bf:2f:ed:80:ec:04:f6:3a:96:4f:21:f8:81:4a:1e:8a:ab:
48:5e:33:15:3b:bb:1b:8f:ce:96:d4:38:8e:63:73:32:1d:99:
54:e5:60:58:1d:b7:9a:0d:05:01:79:4c:f8:11:6a:cf:95:5e:
e3:fb:f3:2c:fa:6b:19:c8:7b:1b:cc:d3:ac:3a:97:a3:ba:82:
9d:07:0f:38:50:50:d5:9d:ca:84:fd:24:e3:82:0c:37:9a:31:
14:5a:da:d6:28:07:a5:97:e7:c5:df:92:82:3c:e3:3d:93:f3:
50:10:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:09:52 2025 by rpki-client