Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930373a3a2f34382d3438203d3e2030.roa
File: 326130343a623930373a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: Z70CPEektgfmX8eIKoMccTZ21BHVIK93uxwBxGRQ0XA=
Subject key identifier: A9:72:33:02:DF:96:80:DB:87:AD:9B:4A:8F:CA:94:49:5B:6C:44:73
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 37D8EF53017F3D72FBB28B9E518A07B7D41F329A
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930373a3a2f34382d3438203d3e2030.roa
Signing time: Mon 10 Jun 2024 10:20:09 +0000
ROA not before: Mon 10 Jun 2024 10:15:09 +0000
ROA not after: Mon 09 Jun 2025 10:20:09 +0000
asID: 0
IP address blocks: 2a04:b907::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d8:ef:53:01:7f:3d:72:fb:b2:8b:9e:51:8a:07:b7:d4:1f:32:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:15:09 2024 GMT
Not After : Jun 9 10:20:09 2025 GMT
Subject: CN=A9723302DF9680DB87AD9B4A8FCA94495B6C4473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:df:67:24:68:cc:46:f8:b3:e5:61:98:30:
82:73:5e:82:87:85:23:a2:24:60:99:ac:6a:dd:f4:
62:55:2e:11:63:6e:6e:48:65:23:4c:f1:03:b5:9a:
97:98:ed:13:d9:b4:2e:6d:26:18:b5:ce:13:09:c9:
38:ab:27:88:e5:6b:86:44:5e:b6:48:f4:83:0e:73:
54:a5:69:01:fa:9b:ab:6d:ea:d0:68:98:f8:1b:f4:
51:d4:88:14:8e:02:89:d6:2d:e2:fb:29:50:6a:d8:
13:68:d7:7c:0e:9c:d2:f0:85:a1:07:e7:82:fe:98:
0b:b1:6f:e3:14:e2:11:7c:02:8e:cb:40:99:92:81:
fb:b1:3f:d0:1c:37:00:9b:39:97:7c:1c:de:ba:76:
cb:0a:92:a6:c3:b3:83:25:03:50:04:cc:06:19:71:
48:90:d8:13:3c:73:0c:28:dd:53:3b:af:72:33:d6:
2f:4e:32:e1:85:cb:c4:9b:e1:9d:9d:f3:8b:b3:0a:
e5:06:40:61:45:ab:5d:01:a4:4d:ff:06:ed:17:42:
85:81:6e:b4:52:38:1f:2c:f9:1b:65:04:30:c7:fd:
64:36:0e:5a:c4:93:b7:bb:bd:f5:df:62:67:2c:d4:
65:aa:83:06:c4:df:85:3b:73:00:e0:1f:fc:50:66:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:33:02:DF:96:80:DB:87:AD:9B:4A:8F:CA:94:49:5B:6C:44:73
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930373a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b907::/48
Signature Algorithm: sha256WithRSAEncryption
0b:fb:29:4e:f4:ab:98:18:f4:23:e0:cb:59:17:72:01:50:19:
e6:d8:7a:54:46:02:1c:3a:48:e2:5f:fe:df:5a:72:b5:c6:d6:
a9:21:c7:59:71:31:f2:a8:f1:cf:5f:2e:3c:f1:fc:91:bf:7d:
19:ad:c3:f6:2d:75:1c:02:5b:86:30:23:bf:56:07:32:a9:e4:
98:43:55:f7:84:96:99:99:29:29:60:71:b0:a9:5d:2c:f2:a5:
e8:2b:fa:16:72:a9:a6:01:2d:4c:f3:ad:13:63:59:35:de:c8:
6e:6e:36:62:9c:7b:26:a2:f8:eb:e3:ee:65:72:5c:61:c2:05:
0d:75:38:72:0b:4c:09:6c:cc:f4:31:98:24:f3:ed:34:ec:d5:
75:50:a0:e1:a3:1b:d9:c6:78:12:f6:e6:ac:7f:48:47:0d:67:
bd:1d:19:e6:82:4e:df:16:73:5a:d4:1d:cd:a3:a2:69:c4:6e:
a9:8f:a0:db:37:18:e6:16:dc:40:87:bf:f2:3d:4c:4d:cc:57:
13:5a:ab:10:da:f3:0d:c1:53:ad:e7:ce:30:17:e2:15:b6:86:
d5:f1:b4:1a:0d:0c:d0:8a:9e:6b:71:67:16:9a:d5:ee:ae:f5:
03:f3:c6:b4:64:c8:d0:a7:79:39:61:0d:f9:19:63:75:7e:48:
00:2e:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:53:24 2025 by rpki-client