Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa
File: ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa (raw, json)
Hash identifier: XFBSKvO3AXqul7/rMdzRAoOUwpL7ZySozQjAeofn4JY=
Subject key identifier: 64:F1:51:15:0F:83:0A:C8:19:9C:BB:A5:1A:8D:E5:5A:41:3C:3E:5F
Certificate issuer: /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial: 05
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa
Signing time: Tue 23 Feb 2021 18:57:17 +0000
ROA not before: Tue 23 Feb 2021 18:57:17 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
2a0e:b240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Validity
Not Before: Feb 23 18:57:17 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=64F151150F830AC8199CBBA51A8DE55A413C3E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:ba:3c:a0:d2:a0:8e:86:c6:94:cb:1c:3a:
02:7b:78:f1:9d:49:57:ac:2f:2c:af:23:80:7a:80:
19:f9:97:2f:9f:20:8d:c7:18:8c:3d:6b:f0:e2:5e:
f1:6b:3d:d3:9c:14:a6:eb:fd:42:18:ba:70:d5:af:
23:66:c9:99:1e:98:03:72:30:55:6f:85:26:d4:8e:
31:3c:6d:12:29:b6:6f:ee:12:a4:8e:ef:eb:b3:58:
1a:3a:b5:b7:ea:5c:16:30:d4:af:77:95:52:e1:8d:
c9:48:00:7f:0e:4b:d0:38:81:00:85:2a:8f:c8:1a:
28:b4:05:41:1a:3a:f3:5c:85:53:71:7d:f2:24:69:
93:e9:0e:b5:04:65:43:58:75:bb:91:c4:75:8f:d3:
7f:02:75:19:83:73:b1:9c:41:d5:f8:50:11:48:5e:
08:5d:63:56:20:9d:4a:04:40:79:bc:6b:54:96:a4:
86:b1:8f:22:b4:ce:b2:f1:d4:3f:6b:e8:1a:49:2b:
26:bd:ac:8f:40:8d:4c:0b:d0:99:27:2a:98:d9:8d:
b5:1e:4b:3b:f1:e8:f7:f4:62:20:bb:e4:67:f5:87:
5a:e1:0f:fd:98:07:91:a8:85:bd:02:2c:b0:9b:26:
17:2e:0d:d2:61:55:9a:fe:c9:7b:a7:df:6d:d5:5a:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:51:15:0F:83:0A:C8:19:9C:BB:A5:1A:8D:E5:5A:41:3C:3E:5F
X509v3 Authority Key Identifier:
keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
2a0e:b240::/48
Signature Algorithm: sha256WithRSAEncryption
34:2a:37:36:6f:a4:cb:bc:8e:8a:58:40:46:7c:4b:20:fb:94:
8e:e3:2f:f9:a8:4c:c9:28:d3:b7:31:d0:f9:95:9e:00:4f:16:
2a:53:76:ea:2b:15:fd:b5:4b:4f:48:d4:e2:11:f6:e3:0f:79:
fd:e7:6b:57:54:c8:72:01:39:60:ed:93:cb:b4:e8:a6:9d:98:
6b:ac:d5:87:c7:63:ed:1c:dd:f2:5a:60:9d:09:61:d2:b8:7f:
27:75:12:2d:43:02:19:a5:a7:a1:d7:64:df:be:2b:39:bd:43:
b4:b3:37:bf:ba:c0:44:cc:34:db:ff:06:f5:8c:9d:b7:71:5c:
6a:ba:b2:38:26:7f:a0:77:ba:32:33:e8:1d:f2:63:db:bf:aa:
fa:2d:06:6d:e4:9e:38:53:5f:06:16:d7:c4:aa:e3:94:bb:75:
59:31:bb:59:3c:89:56:29:bc:38:f0:f6:e8:f5:1a:80:73:d0:
52:33:2d:d4:0f:34:23:ad:f5:9f:65:7f:1e:d3:ad:0a:c8:ae:
88:56:21:99:45:1a:45:f1:73:e7:e7:a8:2f:59:56:b6:94:19:
e8:f5:7f:92:a1:e0:ef:a8:02:d4:36:41:7b:3d:25:7f:6c:8c:
a0:94:c7:c5:0d:ee:7c:cc:b3:f8:7f:5b:a1:d5:d8:d0:da:6f:
dd:c1:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org