Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
File: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (raw, json)
Hash identifier: AlwPBd2C9Yu5vG0rOjPT7xDEEtT3Ii+2VZQH9UIkNA8=
Subject key identifier: 68:08:95:9A:6A:CB:5F:7C:40:5E:58:CD:84:FD:3B:8A:84:40:2C:34
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 32ACB52C6FB659CDCDB1AF04BA4F0B18577258BF
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
Signing time: Mon 10 Jun 2024 10:24:20 +0000
ROA not before: Mon 10 Jun 2024 10:19:20 +0000
ROA not after: Mon 09 Jun 2025 10:24:20 +0000
asID: 211321
IP address blocks: 2a04:b907::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ac:b5:2c:6f:b6:59:cd:cd:b1:af:04:ba:4f:0b:18:57:72:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:19:20 2024 GMT
Not After : Jun 9 10:24:20 2025 GMT
Subject: CN=6808959A6ACB5F7C405E58CD84FD3B8A84402C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:37:68:e2:98:90:f1:c6:fe:e5:cc:37:97:
d5:7a:57:e5:d7:21:74:24:6c:33:0d:98:5b:32:12:
9d:b9:28:7f:90:c8:a4:4b:e5:c1:b4:c6:1a:2a:e6:
cb:83:f4:68:f0:71:84:48:26:1c:5c:10:df:ed:c1:
52:8c:3d:2f:6b:2f:3b:7d:fc:07:92:ee:43:36:1d:
d9:a3:a0:88:a3:23:62:43:0c:f1:c1:44:2a:00:5b:
fe:d7:c6:8a:45:f6:b4:c3:e1:4e:55:33:60:4c:36:
8e:8f:b7:02:06:99:0c:10:52:0b:fa:d8:11:0b:a2:
9f:61:30:94:87:43:a0:6f:d4:1c:17:9c:3b:55:1e:
55:b6:7b:46:3f:7f:12:05:6c:82:17:a5:c6:b0:0c:
55:e6:3f:2b:e9:50:ac:22:1d:c3:90:51:fb:95:cc:
0f:cb:e8:d2:55:4d:d4:1f:f4:35:a0:d5:9e:0e:91:
d5:b8:1e:94:8f:40:63:6f:51:61:1f:13:8f:ac:0d:
ab:2b:f1:64:40:5c:8f:9c:bc:1c:0b:a0:9e:86:8c:
8b:6e:a4:d0:07:02:38:b3:50:52:20:57:6a:66:fe:
a1:e3:64:21:0b:0d:22:f2:ff:d0:97:a9:f0:29:62:
42:9c:fb:d1:72:d9:8c:74:bd:e8:c9:bf:26:f2:fd:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:95:9A:6A:CB:5F:7C:40:5E:58:CD:84:FD:3B:8A:84:40:2C:34
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b907::/47
Signature Algorithm: sha256WithRSAEncryption
43:87:f1:a3:da:f4:39:d1:b8:0a:32:4d:3c:77:25:66:39:14:
ef:16:c9:a3:cb:2d:19:53:04:e1:53:7f:49:30:b2:91:38:d3:
ea:74:8d:7b:9c:03:89:72:b8:0d:5a:a9:02:b6:a4:32:cb:37:
52:52:1b:3a:49:7e:e7:d4:85:a2:f3:98:de:06:13:9d:90:56:
ed:e0:92:de:16:f1:49:75:f8:17:46:d2:c3:61:1a:7b:a5:7a:
7f:77:80:04:3e:e6:92:49:69:b3:c7:75:30:06:07:7b:b8:e9:
40:71:5a:41:77:54:7f:3d:60:04:e5:03:23:8e:45:07:55:03:
c6:05:5c:27:f8:c0:e2:15:2b:31:1e:46:06:52:4f:73:67:e3:
99:4a:f6:c1:8d:c9:c3:b5:1a:40:67:78:f7:1a:db:0a:aa:41:
ca:1e:0a:39:5b:ca:d6:71:24:93:fd:80:96:3f:38:bb:13:09:
79:c8:06:38:47:92:fa:6e:44:06:9b:a1:80:77:70:07:70:f4:
5f:93:9f:0f:4f:32:42:42:c3:82:05:74:b3:a7:16:3e:79:91:
d6:6d:a8:9f:d8:da:86:fc:2c:14:7f:03:15:71:62:5e:82:b2:
14:9d:a1:c7:32:23:e9:86:2d:70:f9:50:e9:e3:43:01:4b:fb:
15:94:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:53:10 2025 by rpki-client