Route Origin Authorization
$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/326130343a623930373a343a3a2f34372d3437203d3e203230343733.roa
File: 326130343a623930373a343a3a2f34372d3437203d3e203230343733.roa (raw, json)
Hash identifier: TPCHBmB5IvaBIKwZ5IkwKGZiXA842o/4+aahfpWZOs4=
Subject key identifier: FA:6C:5B:F4:15:D4:01:69:41:5E:05:EE:7A:D1:A9:EC:59:CB:72:26
Certificate issuer: /CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
Certificate serial: 114802868D82609AAD94BA7ED6BC79AE264C6C15
Authority key identifier: F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer
Subject info access: rsync://rsync.krill.cloud/repo/nlnetlabs/1/326130343a623930373a343a3a2f34372d3437203d3e203230343733.roa
Signing time: Mon 30 May 2022 12:12:37 +0000
ROA not before: Mon 30 May 2022 12:07:37 +0000
ROA not after: Mon 29 May 2023 12:12:37 +0000
asID: 20473
IP address blocks: 2a04:b907:4::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:48:02:86:8d:82:60:9a:ad:94:ba:7e:d6:bc:79:ae:26:4c:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
Validity
Not Before: May 30 12:07:37 2022 GMT
Not After : May 29 12:12:37 2023 GMT
Subject: CN=FA6C5BF415D40169415E05EE7AD1A9EC59CB7226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:09:b4:04:98:33:8f:eb:c3:ea:81:88:49:71:
33:f9:06:9c:3f:7d:cb:a9:31:c0:79:d9:6f:03:58:
80:69:f8:4a:13:ea:36:94:4b:69:c3:13:22:25:5d:
85:3e:9b:24:9b:66:0a:e8:e3:c3:60:7a:d5:a2:82:
4f:4e:89:e1:14:c0:20:15:ce:0e:0f:90:65:db:10:
d3:dc:9f:62:01:45:c0:e9:e2:6e:c4:3a:f1:cd:e7:
ff:66:88:0b:9c:7d:b3:2e:cb:4c:4c:7f:5b:2b:68:
86:f2:42:6d:7e:b0:f0:a8:2e:e9:0a:e7:6f:a7:23:
20:ef:22:11:81:99:f2:71:cb:9c:7f:cd:18:0d:a0:
f9:a5:7b:2c:eb:f6:20:9c:d6:be:61:84:e1:8d:7d:
db:8c:21:08:44:7b:72:0a:5f:3c:4a:ef:4a:e3:cb:
33:9b:6a:2b:81:49:80:65:ab:ee:57:c5:08:ce:ef:
cf:24:2e:f7:44:96:60:22:75:fd:a3:1d:68:53:3a:
c2:19:1a:b4:fe:7a:f2:c0:53:d1:47:f4:46:da:e8:
4b:c0:6d:2b:cc:14:35:d8:af:4a:f9:96:1d:6f:a4:
03:33:19:69:1c:c6:92:31:09:b4:69:0c:1a:1a:c2:
56:d7:e1:48:24:2e:4a:fa:7a:c0:75:e8:cf:b2:3c:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:5B:F4:15:D4:01:69:41:5E:05:EE:7A:D1:A9:EC:59:CB:72:26
X509v3 Authority Key Identifier:
keyid:F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/326130343a623930373a343a3a2f34372d3437203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b907:4::/47
Signature Algorithm: sha256WithRSAEncryption
18:7c:61:02:76:a5:6c:91:05:04:02:ad:c8:01:ba:21:cd:4b:
a1:8e:a5:d7:22:31:78:77:61:9a:5b:b9:09:19:a2:eb:1f:1f:
dd:96:a8:06:58:5a:3f:46:54:3b:80:93:ac:2c:c6:f5:c8:c8:
81:37:5a:63:8f:10:e3:47:31:67:02:9f:99:8f:40:47:95:05:
47:60:4c:01:dc:d2:8c:bb:e2:6b:1d:77:3b:cc:f7:6d:5a:6f:
d8:6c:78:4b:93:84:20:9b:2a:24:b3:c5:b9:84:34:c6:5d:1f:
e2:ea:69:30:77:e9:3a:a1:21:b4:8c:b0:e9:ca:68:db:13:a2:
d7:b4:b8:76:df:c1:5b:8b:f1:72:64:c5:75:0c:eb:5b:93:ee:
f3:5c:83:1d:38:b4:9f:28:ed:90:32:eb:ec:7f:ad:24:55:3e:
b4:8b:6c:fc:74:b8:cd:50:21:fd:c1:eb:17:48:ab:b7:c2:a8:
db:dd:40:9d:ba:26:e5:d7:db:7b:6f:38:09:2f:40:1f:21:c9:
74:5e:dd:46:0b:ab:7a:8c:69:39:2b:e5:37:0f:b3:f4:cb:c2:
0a:89:7d:37:9e:4f:79:3d:ed:c0:be:08:93:4e:37:83:ab:0d:
4a:89:e2:70:a9:1d:01:86:9c:de:76:37:99:a6:5b:2c:c2:c7:
69:f5:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org