Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/-AvaN0jOW1Ujud3XbnmAKaJJrKo.roa
File: -AvaN0jOW1Ujud3XbnmAKaJJrKo.roa (raw, json)
Hash identifier: ugKfBwjzKDkuIAlH0LVqKZzmuxPRYnJr0mGHDK4USNc=
Subject key identifier: F8:0B:DA:37:48:CE:5B:55:23:B9:DD:D7:6E:79:80:29:A2:49:AC:AA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B12
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-AvaN0jOW1Ujud3XbnmAKaJJrKo.roa
Signing time: Thu 19 Dec 2024 23:55:03 +0000
ROA not before: Thu 19 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2834 (0xb12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 19 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F80BDA3748CE5B5523B9DDD76E798029A249ACAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:98:35:ec:62:67:b0:af:f8:e8:f0:d4:aa:
04:84:8c:4a:8d:ae:6d:f4:c6:a4:8c:c5:ed:ee:a4:
8c:d1:a5:eb:7f:13:d0:5d:b8:a6:e9:b2:6e:83:92:
a5:2d:40:b5:6e:64:59:d4:8a:68:bb:f9:7a:25:52:
74:5b:a4:e1:4a:c9:7e:b5:66:98:43:d1:c5:4e:3e:
1b:6f:12:08:3f:3a:67:9d:da:16:2b:9a:c0:07:82:
e7:85:a0:48:cb:dc:8b:99:c0:70:92:57:99:9b:91:
d9:1b:6e:6d:9f:06:56:fe:8e:3d:9a:5c:0f:ae:53:
84:e1:d0:68:6f:c6:ab:df:b6:df:e6:51:2d:c7:15:
ff:b3:77:ff:58:bb:83:85:d1:6d:3f:a8:6a:e5:c8:
2b:6a:01:a6:b3:10:c8:66:b3:4b:7f:ee:7b:7d:25:
db:ca:a5:b4:ae:3f:06:20:d7:8d:b2:45:f8:d5:9c:
62:50:f4:0f:ac:52:72:18:39:36:ff:59:dd:fe:01:
e9:83:25:a5:3d:b8:f8:19:c0:28:44:c4:77:b2:de:
17:aa:e0:bc:27:aa:e0:2f:71:e8:11:0e:e6:88:32:
c7:71:dc:51:cc:b8:e9:47:f9:83:34:47:0c:38:d0:
29:a5:49:10:f0:7c:f5:a1:c7:2c:99:61:58:c4:9a:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0B:DA:37:48:CE:5B:55:23:B9:DD:D7:6E:79:80:29:A2:49:AC:AA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-AvaN0jOW1Ujud3XbnmAKaJJrKo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:39:28:cb:93:87:5a:c8:e6:80:87:bf:3e:15:7e:ae:e6:ad:
b4:de:eb:4b:ca:3a:d1:1a:da:34:5f:af:3f:6b:08:93:99:92:
63:86:9f:50:1b:7a:0e:5a:60:2e:22:1b:5e:1c:79:b5:d5:8f:
c8:a8:a1:1f:26:2d:44:44:ae:b6:bd:84:f9:ac:e6:60:cf:e1:
24:44:8c:8b:d7:bb:d5:45:e5:32:b4:62:a3:d5:0a:f5:8a:2c:
2e:03:a3:7a:05:41:7b:5e:4b:01:05:5f:bd:cc:5c:61:8b:b2:
34:9b:8e:57:ee:4f:31:e7:7d:f8:9f:62:1d:45:d2:48:2d:5b:
c9:b4:76:52:f8:be:bc:ab:f3:35:5f:5c:76:ac:18:15:f0:66:
5a:a4:aa:98:52:bf:89:f7:41:4f:11:2a:03:47:4a:a2:9e:3a:
40:d8:ec:43:45:35:ad:ff:0e:99:9b:fc:bc:37:4b:8b:6e:1d:
6b:2c:2d:4f:f1:80:9f:78:ce:05:af:e2:96:c0:ed:13:8d:31:
36:ad:cb:b6:e5:0a:c4:64:5d:81:51:a7:e9:5c:c0:2b:b9:92:
3c:c2:56:58:98:2b:f0:03:dd:b2:c7:24:e9:b7:f8:b4:b4:4b:
ce:c1:66:19:97:fe:82:29:00:4c:dc:83:83:60:31:fa:1f:60:
eb:ec:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:53 2025 by rpki-client