Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/9zVkUlgdLaTe6jr4TC2mTISnDu8.roa
File: 9zVkUlgdLaTe6jr4TC2mTISnDu8.roa (raw, json)
Hash identifier: mgDITA47N1bY6MfZsx6/S5t6YILqEkOqWc+T6qJ261U=
Subject key identifier: F7:35:64:52:58:1D:2D:A4:DE:EA:3A:F8:4C:2D:A6:4C:84:A7:0E:EF
Certificate issuer: /CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Certificate serial: 1484
Authority key identifier: 20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
Subject info access: rsync://chloe.sobornost.net/rpki/uplift/9zVkUlgdLaTe6jr4TC2mTISnDu8.roa
Signing time: Wed 06 Dec 2023 16:33:07 +0000
ROA not before: Wed 06 Dec 2023 16:33:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:2938::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5252 (0x1484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Validity
Not Before: Dec 6 16:33:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=F7356452581D2DA4DEEA3AF84C2DA64C84A70EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:71:0b:21:a8:37:db:26:e7:50:66:89:a6:
a8:8d:91:5e:4b:7c:34:32:e7:33:10:01:ba:d7:c5:
23:21:5c:32:fb:9a:a1:00:bb:90:d1:fe:4e:b5:64:
75:a3:6a:87:a3:62:a2:9c:c0:8e:ff:27:ed:27:92:
7b:5c:54:39:a8:b1:6d:c0:ed:79:0f:ec:83:83:eb:
e9:a8:0f:4e:4d:8e:29:60:9f:c2:8d:8b:f1:76:f8:
3a:54:07:28:fd:3a:9c:8c:66:52:72:43:23:68:ae:
86:4a:76:0d:84:26:40:24:f5:11:7f:04:1d:3b:bb:
0c:36:4a:75:33:7a:f6:0b:d8:29:f4:5c:56:b4:75:
28:ca:5a:0a:35:61:f1:69:f4:bc:55:ba:b1:c7:f8:
8d:d7:d2:91:05:e9:f5:3e:73:1f:0f:5c:78:12:98:
f7:40:96:8f:a5:8f:d2:cf:c7:23:e5:ab:8e:65:40:
bf:a8:68:7c:0e:76:af:a0:6e:15:55:34:f4:51:07:
7b:aa:ba:4a:b3:a9:91:1d:a8:1d:fc:ed:e9:63:b8:
34:db:d1:2c:4a:a9:6d:27:d8:b0:7b:1a:30:37:76:
6f:5a:51:c6:18:d2:2d:86:77:92:96:6d:91:24:83:
66:cf:f3:98:3a:9e:da:6d:4a:89:2b:43:da:2f:dd:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:64:52:58:1D:2D:A4:DE:EA:3A:F8:4C:2D:A6:4C:84:A7:0E:EF
X509v3 Authority Key Identifier:
keyid:20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/9zVkUlgdLaTe6jr4TC2mTISnDu8.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2938::/48
Signature Algorithm: sha256WithRSAEncryption
07:3d:be:95:b8:8b:ac:8e:87:db:ce:6c:92:1f:2e:31:17:2e:
83:a1:c6:05:e4:8f:fd:77:83:07:bc:6e:6a:6b:83:16:e7:5f:
91:9d:b9:c0:b4:60:6f:e8:50:af:92:19:f8:59:68:27:a3:ef:
38:f1:5f:84:1f:13:16:f4:1b:00:7a:77:ad:ed:7f:b2:7b:e3:
25:1d:bb:e7:b3:b2:32:ec:c1:f7:c0:42:4d:8a:c4:f3:c7:94:
97:8e:44:d5:8e:1c:4c:eb:fa:30:79:eb:8e:ca:69:a7:95:fb:
35:c3:5e:c5:1a:4e:47:b2:82:40:01:52:25:9d:a9:9f:cd:4f:
39:3b:d4:90:86:44:3d:fb:8b:26:c4:41:22:70:82:b7:a2:73:
6b:7d:90:f4:8b:8b:ab:d4:e6:02:5a:4d:8f:83:3c:91:1a:04:
2f:6a:8d:1f:1b:90:54:5e:6f:ce:4a:57:11:cd:5c:72:f3:07:
d7:01:0a:30:75:55:b1:a0:15:f1:f4:8b:6d:cd:20:bf:b1:67:
cb:fb:52:5f:81:5b:26:2e:bc:ce:04:eb:b8:71:2c:71:2a:fb:
2c:a2:9e:a9:60:77:47:3d:bb:79:e6:6c:6c:5f:97:30:66:20:
0e:83:fe:90:ba:4b:27:8e:3e:31:0f:bd:52:ba:3d:b2:6c:5d:
e0:9a:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org