Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/zSKNuj37TkGQfPQ_nBDQwkfAF5A.roa
File: zSKNuj37TkGQfPQ_nBDQwkfAF5A.roa (raw, json)
Hash identifier: m5SIZ9ehyU5cjXh0WDSNLxPyZOAztGvMckKM0uR2Kho=
Subject key identifier: CD:22:8D:BA:3D:FB:4E:41:90:7C:F4:3F:9C:10:D0:C2:47:C0:17:90
Certificate issuer: /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial: 86F8
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/zSKNuj37TkGQfPQ_nBDQwkfAF5A.roa
Signing time: Fri 17 Jun 2022 00:24:21 +0000
ROA not before: Fri 17 Jun 2022 00:24:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34552 (0x86f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Validity
Not Before: Jun 17 00:24:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=CD228DBA3DFB4E41907CF43F9C10D0C247C01790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:b7:00:28:56:f3:13:79:f5:b0:c5:c8:ed:
6d:49:72:27:fd:e4:0b:cf:ae:47:76:29:c5:76:fd:
f7:e1:d6:75:49:51:16:15:0a:7b:d5:9a:06:57:c5:
75:de:8f:17:81:a5:b2:74:99:8d:7a:0b:0e:87:5e:
bd:99:4d:ee:f6:2d:ef:c2:f6:d7:9c:b3:91:51:03:
49:ff:af:8c:22:4e:7b:fa:51:5d:b3:c3:a3:30:cf:
0d:0f:4e:b8:9a:57:47:15:81:11:dd:3e:33:44:e0:
db:91:3f:c5:2c:ac:7e:b4:77:7e:58:d7:2e:0b:86:
96:52:dd:10:57:dc:99:21:45:27:1d:d9:67:38:f5:
6c:33:ac:af:4d:5a:2a:a9:d0:04:65:95:b2:2a:a2:
b8:13:33:85:30:7b:9f:60:42:c2:5a:88:35:db:07:
6e:19:f4:db:a3:b5:04:1d:d9:48:1c:04:33:6c:b9:
0b:02:e5:30:4c:a4:ca:1f:0a:70:91:62:3b:13:fc:
92:32:52:d8:e8:ac:b8:f5:1b:97:10:c6:bf:ef:a0:
59:84:eb:ca:39:6b:fa:cd:26:2b:8d:76:19:b6:65:
08:0f:04:28:35:d7:53:3d:fe:76:44:08:9f:5a:67:
36:a1:33:af:d1:c1:d8:bc:e9:1a:c7:f9:14:48:ab:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:8D:BA:3D:FB:4E:41:90:7C:F4:3F:9C:10:D0:C2:47:C0:17:90
X509v3 Authority Key Identifier:
keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/zSKNuj37TkGQfPQ_nBDQwkfAF5A.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
54:50:df:ec:5f:24:a5:1b:e0:dd:76:9a:86:e5:67:d0:43:a4:
8e:3c:d4:9d:68:7f:b1:f9:ec:6b:bf:9c:ad:8d:fc:84:69:ae:
91:36:ca:6a:c9:a1:02:de:d5:05:a2:b0:7c:a2:0d:ab:2f:b8:
e7:50:0d:d2:e4:29:62:28:8d:96:f8:70:9b:3b:29:62:7c:b8:
65:70:e7:a5:07:63:17:55:0c:4a:9e:e9:10:10:4a:29:a4:91:
68:25:4b:70:37:cb:b7:1a:b2:22:1f:a5:48:10:db:72:e5:8b:
88:44:d3:8f:15:d1:5c:08:ff:ee:6a:5a:bc:ff:dc:ba:60:51:
bc:f7:5a:cb:d0:d3:9f:e7:fa:a6:3a:dd:2f:27:15:60:1b:a7:
19:e7:3d:f5:16:7d:a3:ea:ad:d3:d7:f9:e1:bc:6d:ca:4b:6c:
c0:14:a8:59:5d:0a:99:8c:9d:50:21:ae:0b:37:7e:07:b0:53:
24:0d:f4:d2:61:5d:4f:06:68:92:ba:ed:b0:0d:9c:b4:0f:32:
36:c0:ae:46:81:f7:ea:98:8d:ac:0b:50:ba:4a:81:77:a1:4f:
0f:3b:56:1d:27:ac:c4:da:c1:18:e8:d1:61:d5:cb:bb:41:65:
13:47:a2:eb:32:90:87:67:ca:64:47:a6:5d:3a:33:01:5d:2d:
cf:04:b1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org