Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/DjYXbYsGxe9DaZ9fX3OFp5D5Szw.roa
File: DjYXbYsGxe9DaZ9fX3OFp5D5Szw.roa (raw, json)
Hash identifier: NwSoH601dx3yyzMGUd8nKPtz3llRk+dbGap14JBhy+E=
Subject key identifier: 0E:36:17:6D:8B:06:C5:EF:43:69:9F:5F:5F:73:85:A7:90:F9:4B:3C
Certificate issuer: /CN=2ccabc2a5dcb9161aab6271a68b97a200192b09e
Certificate serial: 03CA
Authority key identifier: 2C:CA:BC:2A:5D:CB:91:61:AA:B6:27:1A:68:B9:7A:20:01:92:B0:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMq8Kl3LkWGqticaaLl6IAGSsJ4.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/DjYXbYsGxe9DaZ9fX3OFp5D5Szw.roa
Signing time: Fri 19 Feb 2021 19:33:04 +0000
ROA not before: Fri 19 Feb 2021 19:33:04 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccabc2a5dcb9161aab6271a68b97a200192b09e
Validity
Not Before: Feb 19 19:33:04 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=0E36176D8B06C5EF43699F5F5F7385A790F94B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:16:56:c0:52:46:c1:6c:bd:02:3b:eb:52:
3f:ff:e6:3d:b4:1b:df:c9:7c:9a:fa:a1:da:5c:5a:
25:fc:8f:ed:72:f7:6e:3e:50:fe:3f:a8:90:11:86:
f2:ac:9a:fa:98:3c:94:e3:32:39:9a:55:c7:70:2f:
28:22:08:4d:cf:01:7d:78:ed:32:15:9b:db:70:35:
05:82:71:34:fe:61:be:47:37:ed:66:0a:ec:88:c5:
28:24:c9:4e:f0:b9:4b:0a:14:e8:f4:33:fe:89:0a:
1c:b9:3a:e5:22:f6:86:b4:8c:da:fd:40:c0:1a:30:
7b:50:52:7e:4a:55:5c:f0:b8:82:03:85:64:a0:f7:
ee:2e:70:2e:af:96:ca:9a:d9:58:ca:f8:1c:65:18:
a6:3a:f1:18:b1:0f:39:4d:24:69:a8:5e:26:a1:df:
bc:b1:ba:8a:d0:2f:59:c7:ac:c2:3f:6c:0b:5c:3a:
f9:99:72:61:96:44:a3:f6:ca:0c:97:9b:4a:80:a0:
2d:1a:fc:8d:11:27:a3:fe:3f:2c:a1:54:6a:dc:bf:
f1:1b:d1:06:65:04:6c:8e:6e:5a:9d:55:25:93:10:
5a:8d:45:56:2f:2a:24:8f:d2:13:2a:fa:36:fe:32:
a6:d2:29:3a:28:22:3b:1b:da:71:83:8d:1b:07:30:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:36:17:6D:8B:06:C5:EF:43:69:9F:5F:5F:73:85:A7:90:F9:4B:3C
X509v3 Authority Key Identifier:
keyid:2C:CA:BC:2A:5D:CB:91:61:AA:B6:27:1A:68:B9:7A:20:01:92:B0:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/LMq8Kl3LkWGqticaaLl6IAGSsJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMq8Kl3LkWGqticaaLl6IAGSsJ4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/DjYXbYsGxe9DaZ9fX3OFp5D5Szw.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
38:5b:a7:4c:e8:31:1e:4b:3d:8f:b1:dc:20:88:2d:b7:60:7b:
40:4b:de:07:43:df:c6:d8:b2:52:f4:01:16:6b:4f:87:a4:e9:
15:e8:8e:13:e8:91:59:27:83:fe:03:16:b6:fe:2c:0d:dc:63:
6c:db:36:1e:c8:27:02:fa:ad:26:69:86:d1:38:b4:75:fb:94:
55:c3:43:cb:58:9b:0d:da:f9:c1:02:7d:98:72:01:7e:62:1d:
38:9e:d0:ea:58:03:41:be:35:0c:4c:dc:80:6d:77:3d:20:0c:
93:16:b1:2c:8f:fd:76:49:c7:96:62:2e:62:e7:ca:f9:e3:be:
70:fc:18:17:01:18:58:d8:52:85:9d:ec:55:2c:3a:bb:df:1a:
d8:d3:5c:e0:b6:a7:9e:63:d9:c3:99:99:43:90:24:08:8d:7b:
ff:11:b2:c0:c3:81:a4:2c:7b:7f:90:f2:e5:bc:03:ee:6c:a2:
38:7a:ad:da:3a:d1:b2:b9:48:80:e9:ba:d2:c3:b2:f3:32:9c:
24:f9:39:9d:8e:2f:8a:5b:4d:74:b6:cb:f1:ef:7a:6d:fd:1d:
79:0f:e7:0f:c6:b1:5e:e1:b1:82:5b:91:44:fd:4c:2a:a9:bb:
36:f9:21:e3:25:49:57:8b:5f:d2:c6:c6:f1:2a:bf:d4:6b:11:
74:64:3f:a0
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMmNj
YWJjMmE1ZGNiOTE2MWFhYjYyNzFhNjhiOTdhMjAwMTkyYjA5ZTAeFw0yMTAyMTkx
OTMzMDRaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDBFMzYxNzZEOEIwNkM1
RUY0MzY5OUY1RjVGNzM4NUE3OTBGOTRCM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZjRZWwFJGwWy9AjvrUj//5j20G9/JfJr6odpcWiX8j+1y924+
UP4/qJARhvKsmvqYPJTjMjmaVcdwLygiCE3PAX147TIVm9twNQWCcTT+Yb5HN+1m
CuyIxSgkyU7wuUsKFOj0M/6JChy5OuUi9oa0jNr9QMAaMHtQUn5KVVzwuIIDhWSg
9+4ucC6vlsqa2VjK+BxlGKY68RixDzlNJGmoXiah37yxuorQL1nHrMI/bAtcOvmZ
cmGWRKP2ygyXm0qAoC0a/I0RJ6P+PyyhVGrcv/Eb0QZlBGyOblqdVSWTEFqNRVYv
KiSP0hMq+jb+MqbSKTooIjsb2nGDjRsHMA8jAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUDjYXbYsGxe9DaZ9fX3OFp5D5SzwwHwYDVR0jBBgwFoAULMq8Kl3LkWGqtica
aLl6IAGSsJ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5sam9i
c25pamRlcnMvTE1xOEtsM0xrV0dxdGljYWFMbDZJQUdTc0o0LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE1xOEtsM0xrV0dxdGljYWFMbDZJQUdTc0o0LmNlcjAO
BgNVHQ8BAf8EBAMCB4Awga8GCCsGAQUFBwELBIGiMIGfMF8GCCsGAQUFBzALhlNy
c3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5sam9ic25pamRl
cnMvRGpZWGJZc0d4ZTlEYVo5ZlgzT0ZwNUQ1U3p3LnJvYTA8BggrBgEFBQcwDYYw
aHR0cHM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvbmV3cy1wdWJsaWMueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYrkMA0GCSqGSIb3DQEBCwUA
A4IBAQA4W6dM6DEeSz2PsdwgiC23YHtAS94HQ9/G2LJS9AEWa0+HpOkV6I4T6JFZ
J4P+Axa2/iwN3GNs2zYeyCcC+q0maYbROLR1+5RVw0PLWJsN2vnBAn2YcgF+Yh04
ntDqWANBvjUMTNyAbXc9IAyTFrEsj/12SceWYi5i58r5475w/BgXARhY2FKFnexV
LDq73xrY01zgtqeeY9nDmZlDkCQIjXv/EbLAw4GkLHt/kPLlvAPubKI4eq3aOtGy
uUiA6brSw7LzMpwk+Tmdji+KW010tsvx73pt/R15D+cPxrFe4bGCW5FE/Uwqqbs2
+SHjJUlXi1/SxsbxKr/UaxF0ZD+g
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org