Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/1m9l-LVo9u9IU3YCHXQBJWyIfdo.roa
File: 1m9l-LVo9u9IU3YCHXQBJWyIfdo.roa (raw, json)
Hash identifier: kaQlVIUVe24w3PciEVPJMQYqU0IQuQ5QISd8G2YaKyg=
Subject key identifier: D6:6F:65:F8:B5:68:F6:EF:48:53:76:02:1D:74:01:25:6C:88:7D:DA
Certificate issuer: /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial: 04
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/1m9l-LVo9u9IU3YCHXQBJWyIfdo.roa
Signing time: Tue 23 Feb 2021 18:57:16 +0000
ROA not before: Tue 23 Feb 2021 18:57:16 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Validity
Not Before: Feb 23 18:57:16 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=D66F65F8B568F6EF485376021D7401256C887DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:59:e0:f5:7f:2e:c8:a6:d7:bf:e2:45:3f:
af:c2:00:b3:f3:f7:f0:c7:10:e1:fb:f5:78:e8:25:
6b:e1:c7:d5:fb:43:46:a8:f8:f2:42:f7:de:6b:48:
0a:49:3f:88:eb:e2:61:de:10:74:d7:0a:27:c2:f5:
7b:9c:de:1d:03:18:ec:d0:33:15:fd:3f:39:8e:0d:
62:2b:2e:f0:e2:f7:e8:b7:79:66:7d:e7:d2:c5:48:
3b:93:1c:04:1d:7d:de:dc:76:ad:fe:8f:c3:83:07:
0a:38:90:e8:5e:95:82:f2:87:e3:60:5a:e0:42:ab:
eb:fc:58:84:ad:1d:6e:5f:f3:a0:36:c4:6b:a6:4e:
5f:ec:83:68:ef:28:be:0a:a1:1a:c3:1c:08:b2:31:
58:3e:15:76:5f:8c:b5:b3:38:f2:ec:17:4e:e7:f2:
51:ed:42:b3:2d:64:e5:88:94:10:6e:ef:05:73:c3:
5d:4a:d0:a1:d9:7d:cd:ff:23:d4:5d:a5:f2:d7:3a:
1b:f6:9d:86:e9:da:3c:d7:64:46:1d:6a:58:92:f0:
d0:ca:f4:df:a4:41:0f:9e:fe:58:b8:a5:b9:5e:78:
b2:46:38:e2:cf:8d:a5:ea:44:56:0f:97:a7:fe:fe:
43:d6:81:58:ae:34:e6:a7:31:95:1f:bb:85:f9:a6:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:65:F8:B5:68:F6:EF:48:53:76:02:1D:74:01:25:6C:88:7D:DA
X509v3 Authority Key Identifier:
keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/1m9l-LVo9u9IU3YCHXQBJWyIfdo.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:86:0c:02:2e:d1:37:09:d8:52:a0:30:8c:2d:01:80:3b:e6:
a9:6c:3a:57:1d:ad:09:d6:3a:b2:7b:36:52:2c:94:e6:dd:8f:
d7:e1:2c:c7:78:fe:95:a5:fd:8e:9b:04:67:9b:92:9d:fe:70:
56:b0:c3:ae:b3:82:6c:e0:b8:03:ac:85:b5:66:c2:d0:e9:73:
ba:41:cc:37:c5:ca:91:00:6d:26:4a:9f:a9:c2:a7:31:ff:be:
f0:05:e1:d3:62:48:de:a0:3f:b6:0b:c7:5d:ea:97:69:3c:54:
80:26:3b:09:3c:7b:68:29:3d:17:26:b6:b5:c9:98:61:74:8f:
5a:42:60:e4:05:60:31:2c:49:0e:1e:a4:fa:8c:47:b8:c2:93:
14:93:03:b2:8b:cd:e2:84:c5:61:3a:68:ac:b8:e6:4c:51:b7:
4f:73:58:0b:ef:76:d9:b4:8d:75:62:a5:e6:90:68:bb:a2:df:
d2:47:a6:89:a7:a2:0c:02:00:3a:50:db:7b:58:c2:01:c8:3f:
b2:f9:6a:d1:19:66:c5:df:28:bf:2f:43:96:72:c9:95:7b:cf:
4a:0c:3c:cd:4f:c1:86:b2:7d:13:63:32:2d:5c:32:94:8d:22:
2b:9d:a4:92:f0:6c:e9:37:b0:39:f7:39:42:ec:f0:ea:24:e0:
12:90:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org