Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nla2bip6/IaE_i9a5mxG1nDmwcvBw8l7hHD4.roa
File: IaE_i9a5mxG1nDmwcvBw8l7hHD4.roa (raw, json)
Hash identifier: 1sJ+qPkIPqHSxg2D/NTu0sZ2YSfv22dpemHPknoaAgU=
Subject key identifier: 21:A1:3F:8B:D6:B9:9B:11:B5:9C:39:B0:72:F0:70:F2:5E:E1:1C:3E
Certificate issuer: /CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
Certificate serial: 039D
Authority key identifier: 17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/IaE_i9a5mxG1nDmwcvBw8l7hHD4.roa
Signing time: Sat 17 Jun 2023 00:00:33 +0000
ROA not before: Sat 17 Jun 2023 00:00:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 62.3.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925 (0x39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
Validity
Not Before: Jun 17 00:00:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21A13F8BD6B99B11B59C39B072F070F25EE11C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:d5:dd:ce:7d:28:92:f6:2d:91:34:d4:ef:
e1:1b:67:9a:03:29:86:28:7d:c0:44:f7:78:f5:5c:
83:6a:b9:54:8b:0f:23:b8:9a:5c:d7:39:6e:7b:54:
cc:ad:a7:b7:21:11:65:91:bd:50:38:27:b5:fc:8f:
2a:98:38:2f:2a:6c:71:f7:e0:70:35:74:14:62:42:
1a:75:36:bc:ee:ca:0e:49:71:82:cf:be:fb:57:04:
8a:2a:d1:75:4f:86:6c:8a:f4:c7:56:d0:9d:08:e7:
5b:11:10:3e:ab:a9:b4:3b:68:82:21:97:8b:49:a0:
4c:63:92:da:c6:36:99:b6:2f:29:07:5b:9c:2e:3a:
01:16:9f:91:6a:b8:39:e1:10:2d:88:42:b5:96:01:
ff:8f:7c:61:a1:1d:d1:48:50:b0:a7:fc:14:40:e7:
cf:66:9d:27:25:5d:1d:91:64:09:20:0a:d3:ba:49:
87:38:41:1a:85:d6:e0:4d:10:1c:ae:d4:57:82:98:
2e:05:e1:5b:d8:41:71:ce:09:b8:5b:6f:3d:8e:18:
97:ab:c2:b1:58:f5:d8:82:b0:22:e9:6c:23:36:4d:
54:ce:19:70:dd:40:34:9b:53:3e:b9:ab:d8:13:07:
77:a8:06:1d:3c:92:07:23:8a:79:6f:ed:98:da:eb:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:3F:8B:D6:B9:9B:11:B5:9C:39:B0:72:F0:70:F2:5E:E1:1C:3E
X509v3 Authority Key Identifier:
keyid:17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/IaE_i9a5mxG1nDmwcvBw8l7hHD4.roa
sbgp-ipAddrBlock: critical
IPv4:
62.3.55.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0d:68:eb:d1:e5:5b:d2:12:c5:7c:ba:41:a8:d8:f9:02:87:
de:da:1f:2a:0e:71:c2:44:c8:10:f3:1b:8f:7a:27:24:05:f8:
f3:63:d0:5e:4b:9b:20:59:c2:23:c3:77:1f:d3:5b:5a:c9:be:
6d:68:35:85:fc:cd:97:f4:33:53:bb:9d:74:58:85:c0:65:66:
af:83:45:d4:ff:25:98:41:35:ea:50:b0:ad:af:49:8b:b8:94:
5c:0e:33:2c:c8:41:e4:e0:20:e8:29:35:dd:52:5c:59:ec:fa:
f1:fc:2c:33:92:1a:f9:b6:cc:5e:a5:eb:41:83:71:ff:d5:40:
8b:be:ff:9e:41:51:65:c8:7f:cb:32:5f:67:a7:78:49:04:18:
ce:8a:46:e0:90:e2:6b:ed:5b:e5:82:95:54:98:57:ab:ee:51:
a5:82:63:89:c7:25:0d:93:ec:2e:79:72:a6:4f:39:8c:df:b7:
90:c7:3b:79:41:ad:78:e9:08:41:ef:ee:19:55:52:31:f2:fa:
95:8f:b0:c3:f6:49:7d:22:8f:0f:0c:04:2a:02:1b:84:02:fa:
4e:02:5d:30:73:10:54:0d:37:c8:6b:3a:4c:f0:8b:0b:ad:f3:
c7:c0:c1:09:3a:da:49:ce:07:04:63:1f:80:0d:b3:04:99:6a:
66:28:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org