Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/rZWj66_V88W5B41mgMEm-TNr_EU.roa
File: rZWj66_V88W5B41mgMEm-TNr_EU.roa (raw, json)
Hash identifier: SYWMTnEkWN5L+qD/TgYvMakQ1rSktXsgJrR1dLu8GTA=
Subject key identifier: AD:95:A3:EB:AF:D5:F3:C5:B9:07:8D:66:80:C1:26:F9:33:6B:FC:45
Certificate issuer: /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial: 03
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/rZWj66_V88W5B41mgMEm-TNr_EU.roa
Signing time: Tue 23 Feb 2021 18:57:15 +0000
ROA not before: Tue 23 Feb 2021 18:57:15 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:b240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Validity
Not Before: Feb 23 18:57:15 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=AD95A3EBAFD5F3C5B9078D6680C126F9336BFC45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:f6:7a:c0:d7:41:97:92:eb:be:21:40:3e:
64:a6:2b:5d:c2:e9:b5:8b:d4:c8:66:25:2b:0c:00:
b0:c8:2b:0f:8d:93:d8:71:52:88:02:5b:01:6c:a9:
e4:65:11:53:7a:e7:c8:cf:86:f6:6f:71:5a:07:df:
5c:20:23:98:29:2f:1e:9e:b5:90:81:70:9a:e5:cc:
62:aa:cf:0f:80:4d:7f:dd:5a:1f:93:e4:78:5d:86:
e9:5f:e1:85:a8:8c:f2:3e:db:db:4e:67:38:fb:cb:
14:0a:88:85:81:24:75:fa:12:64:29:2d:9d:e8:01:
a6:cf:56:e4:68:44:78:cb:53:68:8b:2d:9c:55:6b:
91:4d:17:59:16:16:e8:ff:a6:c3:ff:d9:90:e9:ff:
f6:41:aa:cc:df:33:4d:85:d6:ba:11:2d:e0:33:34:
be:6e:b6:1a:fb:98:68:45:7a:df:81:89:22:20:84:
7b:27:24:63:bb:af:8e:9e:9c:12:f9:77:3b:5e:c9:
04:4a:b0:87:db:bb:ce:ef:65:b9:ba:4f:2c:20:11:
61:e8:83:71:99:bf:5d:18:e7:80:e9:6b:44:66:b2:
86:97:11:ea:bf:90:a3:25:44:07:21:fb:60:4f:5a:
62:27:e2:67:f7:43:02:ff:46:76:b5:b8:3a:1b:59:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:95:A3:EB:AF:D5:F3:C5:B9:07:8D:66:80:C1:26:F9:33:6B:FC:45
X509v3 Authority Key Identifier:
keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/rZWj66_V88W5B41mgMEm-TNr_EU.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b240::/29
Signature Algorithm: sha256WithRSAEncryption
33:f4:8f:18:d6:a0:18:bc:4a:3d:d3:9d:95:d4:11:56:09:59:
dd:af:66:d9:fc:66:6a:d4:bb:ea:c6:2c:9f:7a:b8:95:70:4a:
a4:b0:bb:f5:dd:de:76:a2:97:dd:c4:0e:af:5e:54:f2:75:5c:
b5:b3:6b:59:d9:65:9e:e6:c6:a4:96:a7:b0:8c:9e:fb:28:49:
7c:75:a5:61:f2:fd:12:66:8d:44:4e:95:ca:02:ff:f4:ec:f7:
31:20:37:18:9f:ba:04:63:18:b5:2c:79:a8:e6:85:2c:5e:22:
70:48:70:7d:9f:4b:fd:35:a0:86:c9:ba:bf:b5:23:9b:5e:1a:
9f:c1:ea:b5:59:fb:e2:74:a0:16:59:5f:5d:51:64:51:de:ea:
12:63:0d:c0:ae:e8:fc:7e:a1:0f:ef:35:3f:46:63:54:56:77:
ad:c0:83:4e:51:9d:d1:81:b1:f5:07:73:30:35:3e:59:e6:5e:
ae:af:89:d5:fe:c1:a6:c1:d8:66:a9:a7:19:c9:97:22:61:1b:
57:d1:15:28:cb:b0:f7:b3:1f:69:e1:af:1d:57:dc:52:46:59:
4f:65:59:8d:09:26:a9:a1:19:fb:85:d6:00:81:e5:da:de:20:
77:f2:44:75:05:71:df:7f:d2:63:5a:24:2e:54:64:89:ae:3a:
fe:61:06:05
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOGUx
NGY5MmZkYzdjY2ZiZmMxODIzNjE1MjNhZTI3ZDY5N2U5NTJmMB4XDTIxMDIyMzE4
NTcxNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoQUQ5NUEzRUJBRkQ1RjND
NUI5MDc4RDY2ODBDMTI2RjkzMzZCRkM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALUz9nrA10GXkuu+IUA+ZKYrXcLptYvUyGYlKwwAsMgrD42T2HFS
iAJbAWyp5GURU3rnyM+G9m9xWgffXCAjmCkvHp61kIFwmuXMYqrPD4BNf91aH5Pk
eF2G6V/hhaiM8j7b205nOPvLFAqIhYEkdfoSZCktnegBps9W5GhEeMtTaIstnFVr
kU0XWRYW6P+mw//ZkOn/9kGqzN8zTYXWuhEt4DM0vm62GvuYaEV634GJIiCEeyck
Y7uvjp6cEvl3O17JBEqwh9u7zu9lubpPLCARYeiDcZm/XRjngOlrRGayhpcR6r+Q
oyVEByH7YE9aYifiZ/dDAv9GdrW4OhtZf2ECAwEAAaOCAgcwggIDMB0GA1UdDgQW
BBStlaPrr9XzxbkHjWaAwSb5M2v8RTAfBgNVHSMEGDAWgBQ44U+S/cfM+/wYI2FS
OuJ9aX6VLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxqb2Jz
bmlqZGVycy9PT0ZQa3YzSHpQdjhHQ05oVWpyaWZXbC1sUzguY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9PT0ZQa3YzSHpQdjhHQ05oVWpyaWZXbC1sUzguY2VyMA4G
A1UdDwEB/wQEAwIHgDCBqAYIKwYBBQUHAQsEgZswgZgwXwYIKwYBBQUHMAuGU3Jz
eW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxqb2JzbmlqZGVy
cy9yWldqNjZfVjg4VzVCNDFtZ01FbS1UTnJfRVUucm9hMDUGCCsGAQUFBzANhilo
dHRwczovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9uZXdzLnhtbDAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoOskAwDQYJKoZIhvcNAQELBQADggEBADP0
jxjWoBi8Sj3TnZXUEVYJWd2vZtn8ZmrUu+rGLJ96uJVwSqSwu/Xd3nail93EDq9e
VPJ1XLWza1nZZZ7mxqSWp7CMnvsoSXx1pWHy/RJmjUROlcoC//Ts9zEgNxifugRj
GLUseajmhSxeInBIcH2fS/01oIbJur+1I5teGp/B6rVZ++J0oBZZX11RZFHe6hJj
DcCu6Px+oQ/vNT9GY1RWd63Ag05RndGBsfUHczA1PlnmXq6vidX+wabB2GappxnJ
lyJhG1fRFSjLsPezH2nhrx1X3FJGWU9lWY0JJqmhGfuF1gCB5dreIHfyRHUFcd9/
0mNaJC5UZImuOv5hBgU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org