Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930363a3a2f34382d3438203d3e2030.roa
File: 326130343a623930363a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: y/QRFgvgQfHgkmzfM5jlDGeU+sMShq9Ep/iXYCi4F7U=
Subject key identifier: 17:33:80:E5:32:DC:A2:AA:48:9A:52:FF:90:BE:32:1E:24:85:F6:88
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 27AFDC77CADDE76126F2CDF154086223AF118B04
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930363a3a2f34382d3438203d3e2030.roa
Signing time: Mon 10 Jun 2024 10:19:39 +0000
ROA not before: Mon 10 Jun 2024 10:14:39 +0000
ROA not after: Mon 09 Jun 2025 10:19:39 +0000
asID: 0
IP address blocks: 2a04:b906::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:af:dc:77:ca:dd:e7:61:26:f2:cd:f1:54:08:62:23:af:11:8b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:14:39 2024 GMT
Not After : Jun 9 10:19:39 2025 GMT
Subject: CN=173380E532DCA2AA489A52FF90BE321E2485F688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:32:1f:7a:11:0f:f7:85:2f:03:64:ff:59:
91:5f:b1:ac:51:aa:82:34:1b:fa:e3:69:95:31:b5:
18:da:2f:f6:bb:45:f2:6c:ad:89:c8:5c:59:5d:0d:
a3:63:19:f3:a3:d7:64:fc:26:b3:25:30:0d:fe:e0:
fe:b7:23:6c:01:3b:48:2f:51:50:bf:0d:06:28:7a:
10:cc:21:21:ab:7b:de:7a:95:f4:23:bc:68:0e:9f:
36:80:53:4c:53:45:d2:74:46:e6:a7:7b:f9:c3:21:
59:c7:9c:71:63:95:24:f2:06:6d:ec:54:3b:4c:5a:
e5:20:8f:b5:f0:59:cf:7d:f8:2d:61:ff:86:2c:84:
d4:14:e5:4b:5c:a7:6a:d5:ce:66:5e:15:f3:ee:e0:
92:d7:14:f4:c0:d0:79:b7:a8:ab:8d:67:11:a3:0e:
3f:bd:42:25:8a:f6:a2:9e:7b:d6:d7:28:32:f5:9f:
c6:30:78:bb:69:32:55:60:38:28:5b:4b:2d:32:75:
fc:25:d7:c0:8d:d7:cf:df:9d:9c:f4:b2:57:2e:85:
25:ad:ac:98:09:d4:18:4a:fa:60:e6:26:71:7b:9e:
45:60:76:98:36:9a:52:47:7c:13:f5:b4:0e:68:76:
d7:58:2d:4e:f2:0a:8a:82:4e:1e:45:72:4e:ea:98:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:80:E5:32:DC:A2:AA:48:9A:52:FF:90:BE:32:1E:24:85:F6:88
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930363a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b906::/48
Signature Algorithm: sha256WithRSAEncryption
a8:b7:b3:50:53:e1:7f:e3:8d:86:ab:4d:25:10:06:a5:6b:3f:
88:2c:d3:fb:48:45:d1:c7:75:fe:ba:26:38:6c:1f:d7:41:96:
42:57:96:55:68:c3:2c:7f:66:11:3e:1e:6b:fe:f5:41:4e:cb:
95:b6:e8:68:2a:57:04:7c:dc:0f:b9:e4:50:8a:7c:be:66:9d:
30:a3:85:70:cf:07:ef:ca:c7:94:92:f9:24:00:9e:0a:cd:3b:
e2:e3:ae:c7:7f:d3:fa:d9:bf:e6:98:11:45:d9:7b:01:a6:8f:
f3:f4:4a:7d:bd:6a:2c:f9:d7:c7:ad:14:13:9c:89:e2:df:be:
1f:06:a6:61:3e:06:04:9b:e1:7a:09:02:71:de:fb:ed:52:f1:
38:31:5c:9f:33:48:4d:99:4c:0c:63:64:cd:11:90:55:2b:43:
60:45:e9:36:98:20:db:22:fd:04:c2:1b:79:f6:e7:3c:c9:c7:
57:32:e3:32:9a:0f:25:e6:bb:59:ac:fa:03:32:61:b3:7e:4b:
72:a5:02:45:e2:57:0c:74:ce:f2:09:de:06:65:dc:5a:ca:09:
d8:5b:a1:04:b5:f5:d0:bc:7e:0c:af:36:d8:2c:2f:a7:4e:c2:
62:f3:63:79:0a:17:01:72:5e:63:4f:ee:51:4a:13:be:f1:65:
db:c8:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:53:23 2025 by rpki-client