Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/bOdO-od34mmHKx5c08X2_a2EYWU.roa
File: bOdO-od34mmHKx5c08X2_a2EYWU.roa (raw, json)
Hash identifier: 4VPO9BU4KG52zg73s+oe4FOpxG7ayuF+Tf/HbRAaC5U=
Subject key identifier: 6C:E7:4E:FA:87:77:E2:69:87:2B:1E:5C:D3:C5:F6:FD:AD:84:61:65
Certificate issuer: /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial: 86F7
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/bOdO-od34mmHKx5c08X2_a2EYWU.roa
Signing time: Fri 17 Jun 2022 00:24:20 +0000
ROA not before: Fri 17 Jun 2022 00:24:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:b240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34551 (0x86f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Validity
Not Before: Jun 17 00:24:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6CE74EFA8777E269872B1E5CD3C5F6FDAD846165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:c1:3e:52:34:95:e8:79:3b:fe:e9:c2:80:
b5:90:1c:f2:83:fa:a1:a4:43:33:40:a4:27:fb:05:
17:d1:42:56:8f:58:6a:5f:36:b3:60:41:6b:35:3a:
fe:98:03:d7:56:51:30:8c:f0:55:53:02:44:5c:9f:
20:ed:dd:9e:c1:3b:9e:21:a4:cd:f9:99:59:da:a3:
58:89:a7:5c:ee:3c:ef:b0:37:76:1c:78:80:b9:f4:
c5:58:7e:b3:dc:24:04:84:aa:86:b5:2f:44:dc:84:
6c:32:43:50:c2:59:2e:29:8c:76:01:c9:1d:00:80:
0a:f4:97:45:25:25:a7:2f:23:b2:2d:87:25:d0:33:
3a:83:f0:4e:67:0f:67:fa:7f:79:fb:5f:76:07:1a:
fe:ab:22:0d:7b:b2:2f:4b:2b:c7:4f:9b:1c:1f:06:
35:4d:3c:ff:83:3a:6b:88:88:e2:d0:ef:0e:6c:6a:
fb:f0:3d:d2:72:8b:bc:51:47:75:11:ea:b6:0f:d3:
e1:17:f2:8c:d5:54:2f:ea:44:e2:8a:d5:6a:7d:43:
44:73:d2:fb:35:0d:01:90:8a:c5:b0:60:cc:83:01:
98:9a:ff:e0:7c:50:a5:36:a4:68:ae:7a:d1:a4:dd:
6b:f3:96:51:14:64:4c:47:27:3d:69:a0:8f:56:8f:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E7:4E:FA:87:77:E2:69:87:2B:1E:5C:D3:C5:F6:FD:AD:84:61:65
X509v3 Authority Key Identifier:
keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/bOdO-od34mmHKx5c08X2_a2EYWU.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b240::/29
Signature Algorithm: sha256WithRSAEncryption
7d:ac:27:0e:2c:56:9e:bd:87:43:3c:42:54:76:29:58:38:46:
3c:f7:a8:e4:b7:0c:23:9d:c5:e4:96:ba:cd:a5:96:a7:1d:9a:
6a:2f:bc:de:d5:5a:82:cb:ac:60:7b:e0:63:2a:69:89:97:9c:
bc:09:8e:ba:9f:9a:b4:9f:82:e5:ee:2b:49:cd:c6:41:6d:5f:
8f:6f:e3:3a:34:76:d8:bf:cf:57:2d:47:f2:18:19:13:68:b2:
bc:bd:69:e8:e9:99:04:3b:4f:68:bb:cb:83:fb:3b:9d:fc:fa:
d9:6d:62:62:26:4e:50:c5:47:d9:b3:92:d8:06:56:be:c5:61:
63:98:2c:bb:ef:ea:39:b6:82:f9:c7:98:75:28:cc:42:2f:21:
76:41:11:ad:f3:02:c6:c2:0a:eb:d5:29:76:55:eb:2b:02:18:
ef:9e:d0:a6:ca:75:9f:41:79:9a:bf:24:a3:a8:12:e2:4a:44:
cc:e9:c3:a3:2f:a3:f8:c3:19:b4:83:8f:87:4d:58:57:d8:2b:
c6:ee:6a:1b:60:b1:b3:6e:27:02:72:47:22:74:36:73:38:6c:
77:33:35:29:ed:de:ce:8c:a4:a5:05:1e:18:41:92:43:a9:92:
a2:54:7d:af:d8:eb:41:57:da:db:5d:c8:c9:d9:fc:25:12:2e:
9a:c6:5d:86
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIDAIb3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4
ZTE0ZjkyZmRjN2NjZmJmYzE4MjM2MTUyM2FlMjdkNjk3ZTk1MmYwHhcNMjIwNjE3
MDAyNDIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2Q0U3NEVGQTg3NzdF
MjY5ODcyQjFFNUNEM0M1RjZGREFEODQ2MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt87BPlI0leh5O/7pwoC1kBzyg/qhpEMzQKQn+wUX0UJWj1hq
XzazYEFrNTr+mAPXVlEwjPBVUwJEXJ8g7d2ewTueIaTN+ZlZ2qNYiadc7jzvsDd2
HHiAufTFWH6z3CQEhKqGtS9E3IRsMkNQwlkuKYx2AckdAIAK9JdFJSWnLyOyLYcl
0DM6g/BOZw9n+n95+192Bxr+qyINe7IvSyvHT5scHwY1TTz/gzpriIji0O8ObGr7
8D3Scou8UUd1Eeq2D9PhF/KM1VQv6kTiitVqfUNEc9L7NQ0BkIrFsGDMgwGYmv/g
fFClNqRornrRpN1r85ZRFGRMRyc9aaCPVo/wXQIDAQABo4ICBzCCAgMwHQYDVR0O
BBYEFGznTvqHd+JphyseXNPF9v2thGFlMB8GA1UdIwQYMBaAFDjhT5L9x8z7/Bgj
YVI64n1pfpUvMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYDVR0fBF0wWzBZ
oFegVYZTcnN5bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpv
YnNuaWpkZXJzL09PRlBrdjNIelB2OEdDTmhVanJpZldsLWxTOC5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL09PRlBrdjNIelB2OEdDTmhVanJpZldsLWxTOC5jZXIw
DgYDVR0PAQH/BAQDAgeAMIGoBggrBgEFBQcBCwSBmzCBmDBfBggrBgEFBQcwC4ZT
cnN5bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpvYnNuaWpk
ZXJzL2JPZE8tb2QzNG1tSEt4NWMwOFgyX2EyRVlXVS5yb2EwNQYIKwYBBQUHMA2G
KWh0dHBzOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL25ld3MueG1sMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg6yQDANBgkqhkiG9w0BAQsFAAOCAQEA
fawnDixWnr2HQzxCVHYpWDhGPPeo5LcMI53F5Ja6zaWWpx2aai+83tVagsusYHvg
YyppiZecvAmOup+atJ+C5e4rSc3GQW1fj2/jOjR22L/PVy1H8hgZE2iyvL1p6OmZ
BDtPaLvLg/s7nfz62W1iYiZOUMVH2bOS2AZWvsVhY5gsu+/qObaC+ceYdSjMQi8h
dkERrfMCxsIK69UpdlXrKwIY757Qpsp1n0F5mr8ko6gS4kpEzOnDoy+j+MMZtIOP
h01YV9grxu5qG2Cxs24nAnJHInQ2czhsdzM1Ke3ezoykpQUeGEGSQ6mSolR9r9jr
QVfa213Iydn8JRIumsZdhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org