Route Origin Authorization
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3139312e302f32342d3234203d3e2030.roa
File: 34352e3133322e3139312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: eOQL6KtS/fp/gIl2Pd8Tq6HVnPxMLD1miARzzAEJtqE=
Subject key identifier: B3:C9:86:BE:6C:66:47:A0:35:F3:F2:11:C1:29:3A:AB:5B:43:9D:91
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 04CEC47ED6C720AE2AD2F61450E915088C90C327
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3139312e302f32342d3234203d3e2030.roa
Signing time: Thu 20 Feb 2025 02:54:03 +0000
ROA not before: Thu 20 Feb 2025 02:49:03 +0000
ROA not after: Thu 19 Feb 2026 02:54:03 +0000
asID: 0
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ce:c4:7e:d6:c7:20:ae:2a:d2:f6:14:50:e9:15:08:8c:90:c3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Feb 20 02:49:03 2025 GMT
Not After : Feb 19 02:54:03 2026 GMT
Subject: CN=B3C986BE6C6647A035F3F211C1293AAB5B439D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:ad:d7:d0:35:90:ff:39:47:9c:d6:8c:33:
1e:f9:aa:ee:ea:64:c9:7b:07:3c:9d:ac:69:52:ea:
20:de:58:fb:2a:b2:9b:ab:be:63:4f:96:60:6e:25:
91:ca:3d:23:6e:aa:e4:0b:e2:f1:3b:c3:6b:02:10:
66:ee:cd:33:0a:3c:ac:a8:65:37:a2:7a:1f:91:7f:
df:90:69:32:62:81:ce:94:48:6b:c4:ad:78:32:2c:
16:46:fe:3e:f5:77:69:eb:ed:44:13:5b:2b:8d:1d:
b9:cd:1d:fd:22:14:00:35:47:e7:5c:48:e3:f1:de:
e2:7f:03:27:09:d2:bc:85:8b:05:d9:47:a9:20:ee:
17:c0:3e:43:7c:53:71:b1:49:c9:2e:39:c3:cb:ba:
50:ca:16:37:c9:05:9a:e6:80:12:6a:74:8d:0a:24:
ab:dc:ab:bf:c6:94:d4:96:2f:41:f7:44:9c:50:a8:
8f:5e:3b:83:2f:ec:e5:7d:f8:42:f5:8e:01:76:db:
2d:0b:41:63:85:ab:5c:99:b9:8a:cb:6e:d5:09:56:
2f:5a:2e:9c:3b:fb:ac:4a:e2:3c:24:40:e4:b1:1b:
eb:70:a9:02:21:3a:7c:36:e7:61:70:a7:80:13:d3:
86:b9:4e:8f:ad:b0:e9:c3:93:ce:a4:e5:98:2f:31:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:86:BE:6C:66:47:A0:35:F3:F2:11:C1:29:3A:AB:5B:43:9D:91
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3139312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:cb:12:86:ce:37:7f:14:d9:01:c2:ca:12:90:ef:94:73:4a:
bd:4c:4d:6a:71:61:e6:0d:93:0a:16:57:fa:10:7f:bf:ed:23:
0b:3d:28:61:4d:89:01:da:59:77:25:71:98:3d:77:f6:34:f8:
e8:48:81:b0:18:83:00:9e:eb:a9:80:aa:e8:80:f9:48:13:fb:
22:e8:46:3c:b4:27:37:06:60:a7:79:2b:ac:20:ef:41:34:02:
55:a4:4e:fd:f8:34:f5:42:d8:8c:c6:26:6b:c5:8d:c8:be:55:
27:2d:72:78:64:c9:3e:bf:ad:38:4f:f7:b8:39:e8:6b:63:90:
b5:fc:49:d8:e1:05:75:b4:1e:30:9a:74:e2:ee:32:1e:2a:6c:
9c:d4:83:09:d4:80:0d:37:e2:22:c9:98:cb:d6:72:c7:c9:24:
85:65:1a:ba:ef:23:ba:e8:ea:49:b1:5d:03:f3:f4:e9:9b:39:
cf:09:1a:81:63:11:93:f9:6d:e5:1f:a4:19:fb:23:6c:b6:86:
4f:60:f6:8c:4f:a3:46:55:50:24:7c:e2:97:a9:f2:9c:82:5e:
ef:14:1f:47:ba:18:6f:14:df:71:8b:fa:2c:34:63:43:4b:2c:
e4:60:96:62:66:52:ac:40:57:66:e3:a3:da:59:96:bd:48:ff:
9d:8b:3e:28
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUBM7EftbHIK4q0vYUUOkVCIyQwycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx
MjIzNkU5MjAeFw0yNTAyMjAwMjQ5MDNaFw0yNjAyMTkwMjU0MDNaMDMxMTAvBgNV
BAMTKEIzQzk4NkJFNkM2NjQ3QTAzNUYzRjIxMUMxMjkzQUFCNUI0MzlEOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNm63X0DWQ/zlHnNaMMx75qu7q
ZMl7BzydrGlS6iDeWPsqspurvmNPlmBuJZHKPSNuquQL4vE7w2sCEGbuzTMKPKyo
ZTeieh+Rf9+QaTJigc6USGvErXgyLBZG/j71d2nr7UQTWyuNHbnNHf0iFAA1R+dc
SOPx3uJ/AycJ0ryFiwXZR6kg7hfAPkN8U3GxSckuOcPLulDKFjfJBZrmgBJqdI0K
JKvcq7/GlNSWL0H3RJxQqI9eO4Mv7OV9+EL1jgF22y0LQWOFq1yZuYrLbtUJVi9a
Lpw7+6xK4jwkQOSxG+twqQIhOnw252Fwp4AT04a5To+tsOnDk86k5ZgvMXuTAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUs8mGvmxmR6A18/IRwSk6q1tDnZEwHwYDVR0j
BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj
b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5
Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn
Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j
ZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL2tyaWxsLnJn
Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzM0MzUyZTMxMzMzMjJlMzEzOTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZI
hvcNAQELBQADggEBAMzLEobON38U2QHCyhKQ75RzSr1MTWpxYeYNkwoWV/oQf7/t
Iws9KGFNiQHaWXclcZg9d/Y0+OhIgbAYgwCe66mAquiA+UgT+yLoRjy0JzcGYKd5
K6wg70E0AlWkTv34NPVC2IzGJmvFjci+VSctcnhkyT6/rThP97g56GtjkLX8Sdjh
BXW0HjCadOLuMh4qbJzUgwnUgA034iLJmMvWcsfJJIVlGrrvI7ro6kmxXQPz9Omb
Oc8JGoFjEZP5beUfpBn7I2y2hk9g9oxPo0ZVUCR84pep8pyCXu8UH0e6GG8U33GL
+iw0Y0NLLORglmJmUqxAV2bjo9pZlr1I/52LPig=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:39:05 2025 by rpki-client