Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/POx10RxZvsD9KUROdlJw4qm4Q90.roa
File: POx10RxZvsD9KUROdlJw4qm4Q90.roa (raw, json)
Hash identifier: EJjYIEmAKeZc4HqGVHVjkE7+3sr2jNZ3u4Lgxmqcvxs=
Subject key identifier: 3C:EC:75:D1:1C:59:BE:C0:FD:29:44:4E:76:52:70:E2:A9:B8:43:DD
Certificate issuer: /CN=2cab0df157fb5ca0554f27b676023140ab3d89f5
Certificate serial: 04
Authority key identifier: 2C:AB:0D:F1:57:FB:5C:A0:55:4F:27:B6:76:02:31:40:AB:3D:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsN8Vf7XKBVTye2dgIxQKs9ifU.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/POx10RxZvsD9KUROdlJw4qm4Q90.roa
Signing time: Tue 23 Feb 2021 18:36:06 +0000
ROA not before: Tue 23 Feb 2021 18:36:06 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab0df157fb5ca0554f27b676023140ab3d89f5
Validity
Not Before: Feb 23 18:36:06 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=3CEC75D11C59BEC0FD29444E765270E2A9B843DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:3f:bb:c0:2a:2e:35:66:8a:89:7d:79:7c:
8c:e1:2d:8f:16:30:6b:d0:6d:d2:7f:19:f9:4f:a7:
70:be:b4:0e:d3:9d:03:3e:9a:d3:05:31:d0:ea:a8:
e0:60:e8:71:25:d3:0f:5a:67:21:38:b8:92:3f:57:
c1:9b:5a:18:a7:0e:b0:c6:d9:8c:e7:83:ca:31:0e:
69:1e:9c:75:79:1e:1b:6b:8e:ad:30:0f:76:14:ca:
ba:ec:2b:e6:e4:dc:27:22:1a:f0:2a:88:5f:13:b9:
8b:0b:ad:cc:52:ff:de:3b:d5:d7:d4:70:73:22:16:
ac:b1:27:3a:34:50:2e:be:9f:f5:42:48:55:67:49:
ad:2a:7d:2e:6d:a7:0d:69:7f:cd:1f:06:85:3f:11:
71:c0:9b:95:3c:69:85:23:99:4c:ae:3c:7a:72:83:
11:e5:75:56:b4:85:dd:59:34:78:ee:8f:16:d9:85:
4c:a9:fd:e6:61:72:d2:25:ad:61:f1:66:46:10:b7:
2e:c4:ef:8d:30:4c:e2:dd:2a:b8:39:7b:74:c7:39:
c2:14:03:bf:a5:c3:e3:3a:2c:aa:e8:1f:be:73:3f:
e1:c2:66:d4:d6:47:f3:ac:61:88:cd:a8:61:76:41:
59:ba:c0:af:0c:5a:f5:ca:76:93:4e:2b:1a:af:d6:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EC:75:D1:1C:59:BE:C0:FD:29:44:4E:76:52:70:E2:A9:B8:43:DD
X509v3 Authority Key Identifier:
keyid:2C:AB:0D:F1:57:FB:5C:A0:55:4F:27:B6:76:02:31:40:AB:3D:89:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/LKsN8Vf7XKBVTye2dgIxQKs9ifU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsN8Vf7XKBVTye2dgIxQKs9ifU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/POx10RxZvsD9KUROdlJw4qm4Q90.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
30:5e:53:92:8d:5f:4b:83:43:c6:fe:c4:3f:93:fd:65:3c:60:
0a:45:fb:69:b3:c3:a3:9b:ea:28:a8:f2:43:de:5b:cf:73:85:
94:2b:3f:d6:b9:1c:63:bb:8f:1f:bf:72:bf:29:7e:48:c9:64:
1f:a3:47:77:cf:6f:2c:23:96:6e:59:0b:ad:42:ad:ea:66:0b:
8e:16:6f:d4:ac:04:3f:28:d2:29:9f:c4:16:74:c6:1c:b3:a6:
4f:e7:32:94:af:76:05:84:c5:02:28:59:f3:15:de:fe:49:a3:
f8:f6:90:ef:55:b4:02:e8:fb:04:72:bb:0c:08:58:4c:f5:8d:
e3:11:03:8d:4b:7a:7f:35:20:75:20:79:17:f3:c9:88:3a:5c:
dd:70:19:37:d7:5d:33:5d:60:41:06:94:e6:96:e5:db:7d:06:
4b:cb:5f:e1:fc:e7:26:99:48:30:61:a9:29:c8:df:32:7e:10:
6b:58:8f:43:c4:4c:11:22:bb:a1:b8:4a:c2:6f:52:f2:8f:90:
89:f0:14:f7:a3:1d:7e:fc:b9:ee:60:e1:b4:f7:1b:c3:23:c5:
64:ed:aa:e6:e8:03:eb:0e:20:31:8c:b3:b7:9b:df:a6:5d:1f:
f7:eb:d4:68:5c:b7:3e:d0:1a:29:5d:59:51:8d:11:57:7e:82:
01:9f:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org