Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/D53F-thyu-FB_Q-Qnu54dMG6kUc.roa
File: D53F-thyu-FB_Q-Qnu54dMG6kUc.roa (raw, json)
Hash identifier: F5BasJ7cpf0y1kDUV2GhJ9A7f+WVJ9Tg97K4I87sONg=
Subject key identifier: 0F:9D:C5:FA:D8:72:BB:E1:41:FD:0F:90:9E:EE:78:74:C1:BA:91:47
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 0218CD
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/D53F-thyu-FB_Q-Qnu54dMG6kUc.roa
Signing time: Tue 17 Jun 2025 00:12:28 +0000
ROA not before: Tue 17 Jun 2025 00:12:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137421 (0x218cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 17 00:12:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0F9DC5FAD872BBE141FD0F909EEE7874C1BA9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:19:7c:5e:87:a5:52:6c:7f:53:ad:65:95:49:
b9:f0:42:d3:8a:a5:71:b7:53:f6:30:08:07:16:61:
a5:7b:af:3a:9f:01:a0:a3:74:83:cd:14:f6:ab:2d:
5b:c6:53:fd:a2:92:e8:b9:cb:6e:fa:48:d9:62:ed:
07:b9:ed:e5:b3:a6:f8:4e:d2:07:ed:d6:08:86:ef:
a6:b8:e0:81:b9:4f:3b:c7:eb:56:c3:96:db:1a:f7:
18:78:a6:3b:d7:72:4f:d5:ab:07:74:bc:67:4d:58:
33:dc:da:7a:bc:b1:78:89:39:ab:14:3b:9c:7d:8f:
ed:cb:b2:cd:c1:a4:37:9c:93:97:6a:35:1f:30:2b:
0a:2d:f3:73:f1:54:6f:99:23:4a:3a:e2:fc:79:ca:
18:80:35:fd:2a:f5:71:20:16:c2:b7:6d:50:eb:da:
b7:d7:42:28:9f:21:ae:fa:c5:ba:93:a6:07:c7:ae:
30:55:64:7b:25:32:26:30:5c:a7:7e:2e:cc:2f:81:
6a:7f:9d:9f:69:42:c3:10:12:bb:9f:00:46:3b:c7:
a5:82:4a:ac:9b:ac:2a:3d:8e:d0:5a:cc:0c:1a:23:
da:a0:ba:33:4e:00:d9:b0:e8:b7:39:a2:56:f6:29:
20:61:d5:86:41:7f:dc:f4:b2:b3:e2:f3:86:c8:11:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:C5:FA:D8:72:BB:E1:41:FD:0F:90:9E:EE:78:74:C1:BA:91:47
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/D53F-thyu-FB_Q-Qnu54dMG6kUc.roa
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:d3:36:9b:f9:9b:f9:f9:3d:30:de:69:d8:38:42:9a:1d:4d:
a5:77:5e:f6:49:16:61:1f:96:43:61:0c:42:7b:5b:e5:a5:f2:
72:51:1c:7b:1f:63:50:c1:ea:15:a3:89:24:5b:b7:a4:95:b6:
48:1f:d9:bd:d9:c4:45:47:34:47:28:a4:9b:66:59:3c:fd:19:
45:fe:8d:f6:23:10:14:28:95:63:f8:00:01:4a:7b:ed:43:7d:
e7:dc:5c:8a:3e:8f:30:8f:8d:e9:61:57:7d:cc:05:dd:d4:dc:
f7:45:6d:04:0e:da:10:08:bd:e5:93:9c:a8:47:dd:98:15:72:
3f:95:66:7d:5d:89:e0:54:b0:5f:07:2a:4c:9d:b6:c7:b0:8e:
5f:59:07:ab:73:e7:ef:a6:6f:56:71:66:f1:54:7f:b7:99:ae:
2f:12:91:bf:dc:a9:45:a8:d8:11:f7:9b:3c:91:15:dd:64:6a:
06:fa:d2:1d:f1:a9:4a:bf:39:8f:0e:49:60:a6:f1:e2:ff:57:
9c:58:3f:07:95:0b:7e:ae:54:03:5b:78:f1:51:f2:38:76:79:
cc:4b:ff:3c:36:40:48:71:f6:20:f8:38:11:a6:12:05:84:25:
61:61:43:c6:68:96:b0:2f:6b:ae:d6:9b:e8:76:ca:7c:44:ac:
3f:f1:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:21:34 2025 by rpki-client