Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/eWe3zYkEIw20MVZi0aS_oaOatUA.roa
File: eWe3zYkEIw20MVZi0aS_oaOatUA.roa (raw, json)
Hash identifier: AncgYu/pjuBt+9wCeCIr/mbCmWQA6duUzydLqKDLfGc=
Subject key identifier: 79:67:B7:CD:89:04:23:0D:B4:31:56:62:D1:A4:BF:A1:A3:9A:B5:40
Certificate issuer: /CN=ce8a019fb3ab4b1018d36a34f87a567a4478a506
Certificate serial: 03
Authority key identifier: CE:8A:01:9F:B3:AB:4B:10:18:D3:6A:34:F8:7A:56:7A:44:78:A5:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zooBn7OrSxAY02o0-HpWekR4pQY.cer
Subject info access: rsync://chloe.sobornost.net/rpki/uplift/eWe3zYkEIw20MVZi0aS_oaOatUA.roa
Signing time: Sun 11 Feb 2024 11:49:04 +0000
ROA not before: Sun 11 Feb 2024 11:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1883
IP address blocks: 2001:67c:2938::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a019fb3ab4b1018d36a34f87a567a4478a506
Validity
Not Before: Feb 11 11:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7967B7CD8904230DB4315662D1A4BFA1A39AB540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:f5:4e:a3:10:f1:ff:69:b2:ac:af:af:96:
08:80:ff:82:ea:7f:1c:44:63:2b:2e:03:9a:c0:34:
0d:6f:99:dc:6f:52:16:f2:fc:ef:9e:9e:61:c2:98:
18:1d:c7:dd:66:ba:80:4a:1b:86:9a:49:88:72:87:
90:55:25:a7:31:45:8a:a2:ee:57:51:5c:35:2e:5e:
a4:6c:3d:12:10:81:f8:e3:20:75:ba:27:07:ca:ea:
28:80:96:98:6b:1d:9c:dc:00:9a:37:c3:d4:86:64:
bf:59:68:8e:61:95:00:04:86:60:6f:9e:46:83:a2:
31:4c:60:8f:d9:49:1f:13:46:b3:24:01:f0:21:51:
e5:28:34:8f:1d:f9:b5:0c:19:d7:47:22:4f:a7:af:
95:47:1d:79:bb:e5:34:98:5c:27:2b:a9:7a:1b:91:
82:fc:1f:98:03:58:2f:ff:1d:28:6d:54:e4:97:c9:
5b:f3:3b:0d:7f:95:c6:c1:4a:0d:66:46:4b:6d:76:
9a:4c:b9:e0:77:2e:7a:73:34:44:e4:04:bc:d1:e5:
08:d8:f5:6f:23:90:3e:2a:b5:42:0a:6a:e4:8a:20:
20:41:d5:13:d9:e1:62:af:9b:a5:c2:81:d0:53:b2:
8f:44:b1:e0:d1:58:01:cd:a3:ce:8f:bc:55:1b:31:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:B7:CD:89:04:23:0D:B4:31:56:62:D1:A4:BF:A1:A3:9A:B5:40
X509v3 Authority Key Identifier:
keyid:CE:8A:01:9F:B3:AB:4B:10:18:D3:6A:34:F8:7A:56:7A:44:78:A5:06
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/uplift/zooBn7OrSxAY02o0-HpWekR4pQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zooBn7OrSxAY02o0-HpWekR4pQY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/eWe3zYkEIw20MVZi0aS_oaOatUA.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2938::/48
Signature Algorithm: sha256WithRSAEncryption
03:02:1a:c8:49:0b:8e:75:d3:11:b5:9b:6f:21:6d:18:55:f2:
b7:2f:3c:45:cc:94:9b:22:73:de:e1:d3:44:62:92:b1:63:ba:
9a:31:60:c1:08:22:e1:a0:92:17:cc:30:b5:3e:b7:75:c0:1a:
5b:02:f8:01:3f:ca:9c:11:18:36:fd:9e:3f:1c:9a:98:e5:f9:
bb:4d:4c:e6:3d:4f:a1:94:3d:a2:2c:eb:63:25:f8:69:d1:71:
a3:3b:f6:b3:a4:9f:38:27:fa:f4:e7:b6:fa:5c:96:b3:b6:d5:
05:01:c1:c8:f7:8c:26:0c:69:b1:8a:68:52:75:44:bd:4f:d1:
72:31:d8:e7:ce:0e:9e:08:b6:42:d1:3c:cf:86:0c:96:a3:07:
b9:1c:92:b2:0a:82:fe:fc:cd:18:b6:7f:2f:51:ab:0a:12:e3:
7b:89:7b:05:7e:e7:ee:e5:21:ff:b7:52:fb:75:01:2f:a0:cb:
f3:82:41:63:11:5a:4d:14:9b:da:ea:70:9b:d5:ac:53:58:87:
08:2f:e3:b6:68:82:26:c5:c5:04:69:1b:f7:a1:af:96:af:5c:
3c:70:46:41:5a:77:b2:95:aa:23:b6:d4:ab:82:e5:26:83:2c:
cf:8c:6c:4d:d5:77:6b:bd:ec:3e:e6:56:f2:50:c7:dc:c5:c5:
71:76:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 17:11:23 2024 by rpki-client on console-fra.rpki-client.org