Route Origin Authorization
$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e20323131333231.roa
File: 326130343a623930363a3a2f34382d3438203d3e20323131333231.roa (raw, json)
Hash identifier: 7HUvlwOtNTb0YVCwcHcYuNPl4+SaR+OmSiAn2csZw6w=
Subject key identifier: 29:C8:F8:1D:23:82:E7:08:C9:94:43:2D:DC:5A:A3:9B:1E:FE:EC:A6
Certificate issuer: /CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
Certificate serial: 7CB520C98017181FFBAA4E718917A7FEBEE095CC
Authority key identifier: F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer
Subject info access: rsync://rsync.krill.cloud/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e20323131333231.roa
Signing time: Mon 14 Mar 2022 13:59:20 +0000
ROA not before: Mon 14 Mar 2022 13:54:20 +0000
ROA not after: Mon 13 Mar 2023 13:59:20 +0000
asID: 211321
IP address blocks: 2a04:b906::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b5:20:c9:80:17:18:1f:fb:aa:4e:71:89:17:a7:fe:be:e0:95:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
Validity
Not Before: Mar 14 13:54:20 2022 GMT
Not After : Mar 13 13:59:20 2023 GMT
Subject: CN=29C8F81D2382E708C994432DDC5AA39B1EFEECA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:b8:5a:23:80:e3:40:21:7e:30:6a:17:d3:
dc:54:1f:48:10:6e:4d:7a:54:25:4c:3c:f2:b4:14:
43:86:3a:62:d1:bf:8f:f2:66:57:49:aa:4f:e2:80:
19:71:88:0b:16:43:11:e9:6c:c3:be:9e:b7:a7:c9:
cd:51:e5:5c:4e:38:f2:70:4f:ff:dc:15:a9:4f:54:
fb:81:53:84:b9:ad:dd:e2:f3:8a:18:96:f5:7c:84:
09:9a:b7:68:a9:8b:d6:77:aa:cf:6e:6e:58:f4:f2:
b8:bd:27:2e:a6:9e:30:f8:73:66:e4:11:19:bc:41:
ea:b5:ee:56:55:08:24:02:ab:46:42:69:95:b4:54:
a4:e2:f3:92:6e:69:0c:be:3d:25:66:0c:a0:e4:64:
be:0d:2a:79:e2:cd:e6:54:45:af:88:2f:46:f2:56:
39:20:0b:d0:e1:3a:0b:59:e2:bd:d2:a4:64:c3:20:
d8:57:da:98:3d:7e:b1:9c:e5:38:ad:65:f8:e4:cc:
30:c2:13:03:16:97:91:bd:de:19:af:89:3b:99:54:
14:0a:cc:d0:ac:cd:6c:aa:21:b7:5a:bc:bd:61:bc:
e9:37:10:9f:17:b3:da:cb:6a:ee:73:ff:5b:8a:b5:
f5:bc:22:0e:7a:30:38:93:9d:25:9d:93:93:c0:4a:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C8:F8:1D:23:82:E7:08:C9:94:43:2D:DC:5A:A3:9B:1E:FE:EC:A6
X509v3 Authority Key Identifier:
keyid:F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b906::/48
Signature Algorithm: sha256WithRSAEncryption
b3:b9:91:1e:68:2b:ae:e6:0b:91:e8:c0:d4:41:35:17:73:80:
3c:dd:cd:d6:17:4d:10:93:9b:d9:fe:a7:3b:25:a0:e7:69:bc:
bd:a3:26:a9:41:55:d9:9f:4b:5a:eb:cc:b1:e4:a7:b2:fe:78:
c0:ea:ee:59:b8:70:b0:b1:ed:24:5d:47:f6:ae:b7:12:c9:6a:
31:ce:ea:ab:f2:50:27:d5:c7:a4:9e:1c:15:ad:a0:93:87:e9:
35:51:9e:44:67:f4:1c:cb:e3:2d:29:56:90:f6:d7:ff:54:c6:
4b:78:d1:4a:2b:49:66:14:75:65:09:33:17:92:fd:4d:c4:6c:
7e:a3:da:23:fa:79:6c:30:cf:30:8c:b8:c3:8a:ba:75:0e:44:
83:5b:21:f9:45:ab:fd:75:b6:83:2a:d1:f1:dc:94:e1:f9:83:
bd:dd:64:89:a6:d2:7a:cd:9b:c2:0b:c1:de:55:4e:e6:bc:85:
9d:64:5d:0b:be:cc:59:1e:5d:36:44:b9:f3:68:c8:78:69:9c:
80:2b:0b:48:bd:b4:3f:25:6c:e1:6e:d3:d1:f8:56:11:d1:13:
08:35:dd:21:73:1f:e5:f9:6f:82:a9:67:52:7b:2c:98:b2:2f:
8d:db:e5:24:fd:a5:8e:92:fa:61:8c:18:92:9c:e5:7f:1a:a8:
cb:be:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org