Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930353a3a2f34382d3438203d3e203136353039.roa
File: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: /pb0PYp6O1CVxS6SLgEQq8RB/bx/07fB/VMiQwxZHK0=
Subject key identifier: AB:CA:83:74:C1:21:C6:1C:3C:E9:75:F2:11:E1:66:B0:19:A8:D9:73
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 5D62FBC691DB03345C2C488C3CFA61EF7A31A983
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930353a3a2f34382d3438203d3e203136353039.roa
Signing time: Mon 10 Jun 2024 10:22:53 +0000
ROA not before: Mon 10 Jun 2024 10:17:53 +0000
ROA not after: Mon 09 Jun 2025 10:22:53 +0000
asID: 16509
IP address blocks: 2a04:b905::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:62:fb:c6:91:db:03:34:5c:2c:48:8c:3c:fa:61:ef:7a:31:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:17:53 2024 GMT
Not After : Jun 9 10:22:53 2025 GMT
Subject: CN=ABCA8374C121C61C3CE975F211E166B019A8D973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:c6:25:07:d9:c9:47:1f:d1:79:f8:87:2a:
86:8a:bb:0b:9a:97:0b:d7:95:17:ec:5e:26:43:eb:
0d:17:50:66:dc:e5:21:0a:8b:8f:b9:f5:f3:dd:76:
9f:3c:bf:10:54:65:33:9e:b4:7e:31:6b:3c:84:c6:
9e:fd:06:12:8d:d1:5e:1c:87:9b:e5:0e:87:f9:a1:
04:9f:d8:d0:e3:cf:c5:f3:5d:2a:47:03:aa:7d:b7:
93:31:6a:f4:b5:e9:b6:94:36:84:bd:4b:88:ca:01:
79:bf:62:04:5a:3c:c6:2e:6b:d6:fb:3d:6d:58:df:
e5:64:5a:59:7a:8a:1b:fb:fd:0a:1d:fb:a1:04:8b:
80:bd:b4:9e:1b:0e:aa:53:31:a5:ae:98:b8:e9:5d:
bc:31:e7:56:78:6a:46:40:0b:56:b3:90:99:52:54:
96:28:07:d9:79:ab:23:70:67:ed:7d:69:67:86:ad:
68:43:52:a7:63:26:7c:e4:a4:5f:3e:79:91:58:4c:
15:a4:0e:6b:a4:a4:98:45:bc:c8:06:bb:f1:6d:ae:
06:ad:86:45:45:7b:82:a3:26:a8:10:1e:d5:8f:b4:
6c:33:e7:a7:b8:72:cb:33:32:c2:b2:33:e8:94:00:
9b:ab:38:42:40:a3:33:2d:cd:17:5b:7d:bd:ad:da:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:83:74:C1:21:C6:1C:3C:E9:75:F2:11:E1:66:B0:19:A8:D9:73
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930353a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/48
Signature Algorithm: sha256WithRSAEncryption
93:8f:a4:59:c1:8f:a6:7e:c0:e1:2b:49:17:bb:63:fc:4c:84:
9d:90:7b:60:92:d8:51:5f:83:77:16:ac:a4:33:88:90:20:f4:
38:24:07:ad:8e:8a:e9:d7:a3:4e:3c:93:cf:15:ba:c2:b8:47:
69:b6:28:1c:e5:5c:70:f5:27:ae:64:5a:80:6d:17:9f:c4:83:
a8:f7:1f:03:75:c0:75:a0:d5:b6:ce:ca:b8:19:0f:07:fd:7c:
16:24:97:8d:e3:e1:07:bc:3c:57:69:cf:b1:e2:92:9a:27:56:
e0:6c:28:af:1e:7e:e1:4c:63:51:f4:14:68:1a:72:26:e3:62:
0f:ba:20:0d:db:90:d6:6b:64:bf:f5:08:e4:30:5e:ae:44:b0:
ce:b4:cf:7b:f8:a2:a1:14:c4:a5:97:ef:9e:6e:16:f9:4d:36:
a0:76:fe:27:46:92:c8:43:b6:53:47:94:77:8c:e9:95:52:6e:
c0:72:fe:9b:3f:76:7b:90:e2:01:6e:2f:2b:b8:4a:96:61:de:
d9:5d:c3:57:13:b0:08:3d:4f:7c:64:37:51:51:b3:f4:60:b9:
e8:8e:2d:8e:dd:2b:f5:74:45:ed:58:09:d1:e6:d8:cf:cf:06:
2b:1e:a8:61:9a:ad:9d:88:9c:92:6e:74:c5:b8:0c:c4:03:3d:
5c:d3:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:53:13 2025 by rpki-client