Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/-bLmuDOi92f2-QBiZMTmyyQ0DEk.roa
File: -bLmuDOi92f2-QBiZMTmyyQ0DEk.roa (raw, json)
Hash identifier: ONHpJmyWkp7RHJ+duOIL0bkSB/FNii3FExeocTTLLeQ=
Subject key identifier: F9:B2:E6:B8:33:A2:F7:67:F6:F9:00:62:64:C4:E6:CB:24:34:0C:49
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A7C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-bLmuDOi92f2-QBiZMTmyyQ0DEk.roa
Signing time: Tue 03 Dec 2024 07:55:03 +0000
ROA not before: Tue 03 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 3 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F9B2E6B833A2F767F6F9006264C4E6CB24340C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:27:e0:34:8a:29:64:ff:66:87:70:36:67:
e1:e4:a1:7b:51:4f:f3:cd:69:da:74:26:32:a4:80:
8a:3f:86:34:84:fe:77:bc:fe:5b:3b:3a:43:94:b8:
b6:4d:0d:ab:82:03:b1:39:cc:57:d9:8f:ae:04:db:
67:13:89:16:78:5a:77:47:1d:c9:2f:14:a4:2a:e1:
ef:71:88:5a:33:4d:fd:a8:08:64:9c:78:16:2a:86:
77:a2:f5:1b:bd:90:26:68:d0:70:48:f7:f3:eb:45:
e8:1f:5c:5d:65:2e:c0:e1:38:87:36:76:9d:36:cc:
9f:e0:fc:fc:dc:0b:a8:84:ec:0a:34:3f:19:4f:5c:
02:01:bc:86:8a:ed:45:bb:89:14:48:e5:04:77:d3:
d6:55:d6:41:d2:f3:70:40:47:e7:59:cb:3a:43:69:
8a:7d:4b:30:e1:3d:17:4b:fc:6d:55:78:11:48:b0:
c3:ca:c6:64:91:8d:b9:b0:f3:fc:fa:61:3d:d0:b6:
ce:2e:dd:81:a0:2e:d6:ac:63:1f:5a:2a:b7:80:d2:
91:2a:e7:80:b2:fb:ad:af:77:9a:ea:8e:91:af:f3:
b2:9d:d8:70:3a:6f:a6:dc:77:d9:26:c4:84:13:5b:
70:25:17:81:65:bd:f8:85:88:5d:7f:e8:00:85:0d:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:E6:B8:33:A2:F7:67:F6:F9:00:62:64:C4:E6:CB:24:34:0C:49
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-bLmuDOi92f2-QBiZMTmyyQ0DEk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8c:dd:a2:db:c8:e2:59:4c:c6:83:1a:6f:a2:b5:cb:6e:ae:
8e:f8:cd:24:1a:3e:ef:e6:5a:8b:66:c5:23:7c:f7:a9:c8:de:
9e:d5:47:05:31:5c:b4:40:15:b7:35:8b:d6:5f:7c:96:b0:07:
e2:ac:b0:b0:a6:29:8a:c5:f8:9b:d6:5b:0a:ef:c8:e1:31:45:
52:4d:cd:59:51:59:22:00:db:c3:59:10:e7:20:c4:d5:68:0b:
16:57:37:36:2c:af:e5:d1:46:ef:fd:2d:88:08:7c:c4:90:a2:
fc:e6:fa:e1:c1:57:31:d5:25:10:60:f5:03:4d:90:a6:a0:a5:
6d:fb:5b:3b:d9:94:12:a6:1c:4a:ee:ae:a8:b2:f7:2a:42:41:
b2:52:02:9a:40:4f:ac:38:18:50:f0:cb:18:4d:c9:dc:c2:15:
62:2d:76:91:a6:0d:f7:4b:0a:ea:92:d9:cc:f6:f6:13:db:cc:
23:5f:fb:7c:69:b1:2f:d3:d1:26:78:9d:ef:c7:82:d5:ce:56:
27:e3:70:6b:57:8a:9e:9b:53:f0:5a:f8:3f:00:b8:61:1f:aa:
0d:88:04:bd:9b:38:4d:42:76:e7:29:6b:6f:b9:ea:ee:b1:3d:
3a:9d:cf:bb:48:1c:f6:db:e1:c5:a1:ba:f2:d1:95:fc:5c:bf:
ef:5e:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:23:38 2025 by rpki-client