Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/DyWZUPnQe8WhShqst8ELY4hCABE.roa
File: DyWZUPnQe8WhShqst8ELY4hCABE.roa (raw, json)
Hash identifier: egAvrin2NanTttrTLyijjrBAYT8BymV3HoCO670vYEQ=
Subject key identifier: 0F:25:99:50:F9:D0:7B:C5:A1:4A:1A:AC:B7:C1:0B:63:88:42:00:11
Certificate issuer: /CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Certificate serial: 1111
Authority key identifier: 20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
Subject info access: rsync://chloe.sobornost.net/rpki/uplift/DyWZUPnQe8WhShqst8ELY4hCABE.roa
Signing time: Sat 17 Jun 2023 00:00:36 +0000
ROA not before: Sat 17 Jun 2023 00:00:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1883
IP address blocks: 2001:67c:2938::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4369 (0x1111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Validity
Not Before: Jun 17 00:00:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0F259950F9D07BC5A14A1AACB7C10B6388420011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:44:86:18:ec:95:37:3d:d5:1e:1b:41:0b:
21:69:93:36:14:2f:3a:94:a5:64:0e:31:a4:90:1e:
71:c2:b2:94:8e:2e:d6:f4:be:ab:69:31:0d:1a:27:
61:95:a0:62:39:b5:1c:7e:f3:95:3d:6a:21:40:71:
42:2e:54:f7:44:52:a8:38:c3:79:2a:1f:de:e5:cd:
3f:c2:28:19:22:17:ca:af:e2:fe:e3:8d:a0:0f:d0:
5d:7d:46:89:24:7c:12:8e:8c:1d:d8:b1:43:a1:06:
e5:a4:63:bb:1b:cf:d9:7c:91:bf:30:1f:fb:9c:f2:
12:b8:c8:34:99:7d:a3:3f:c0:ec:9c:a9:0f:84:3f:
27:37:e1:f7:97:18:ac:65:0c:24:14:dc:a0:c0:c1:
62:ce:f1:94:83:aa:31:2f:22:d8:d2:86:09:7c:1e:
13:60:cb:31:26:69:93:67:2d:92:56:66:a4:8d:ae:
4c:a4:86:ce:32:a5:52:8f:e7:02:46:d5:f9:c5:9a:
7b:d4:d8:32:8a:f0:e0:c0:32:ab:7e:f7:44:5d:1b:
5d:92:98:07:d0:d0:c1:2f:b2:68:a7:4e:f7:a2:64:
ee:82:de:63:15:df:f9:67:53:83:87:cd:c4:cb:b7:
23:78:f0:89:8c:43:0a:49:61:37:2e:06:27:67:5c:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:99:50:F9:D0:7B:C5:A1:4A:1A:AC:B7:C1:0B:63:88:42:00:11
X509v3 Authority Key Identifier:
keyid:20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/DyWZUPnQe8WhShqst8ELY4hCABE.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2938::/48
Signature Algorithm: sha256WithRSAEncryption
23:7d:9c:5a:2a:03:72:61:a9:67:b2:42:21:cb:77:be:12:f8:
27:0d:52:4e:f0:a5:40:57:7d:94:37:ef:c8:ab:21:3f:d3:69:
82:4d:18:45:5c:79:13:62:9f:1f:11:8a:d6:68:ff:e5:2c:b3:
74:af:7e:7f:e8:06:f5:f4:d3:30:82:a9:c4:c1:f8:ed:2b:49:
c8:f0:ae:ed:b9:3d:8b:2d:da:07:1d:dc:47:dc:59:25:99:d4:
df:8c:d7:29:9a:09:e4:5c:c5:91:58:38:71:42:8f:dd:ba:9f:
25:24:7c:9e:1e:b1:a4:05:9a:76:04:ee:4b:d6:44:74:2f:2f:
20:49:af:90:2d:7f:1f:ae:e1:b9:88:fe:a0:2a:e5:aa:4b:58:
bf:09:7b:9c:85:76:e7:e3:07:b3:91:b0:1a:db:d7:4e:c4:b8:
f9:c2:f0:50:ff:d4:c5:1f:56:3b:c8:be:e1:89:04:f1:e3:25:
53:71:8f:bf:af:3b:ee:46:87:9c:6b:5a:93:0a:1a:50:a1:84:
d7:83:86:5c:0c:8a:34:55:49:b6:70:a6:04:50:fd:23:a3:43:
53:61:de:a0:47:28:7d:d3:04:63:08:30:d3:1c:ff:ad:bb:32:
9a:e9:78:23:2a:4f:32:d6:55:e3:ca:e8:78:14:9e:f2:b6:7a:
1d:33:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 17:40:00 2024 by rpki-client on console-ams.rpki-client.org