Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/-t7DL42sp85xScXX1U9Hl55RdQ0.roa
File: -t7DL42sp85xScXX1U9Hl55RdQ0.roa (raw, json)
Hash identifier: W21P6RH8ihCXFMoBv/R3RuZkazXidk/k+oF02NktjRA=
Subject key identifier: FA:DE:C3:2F:8D:AC:A7:CE:71:49:C5:D7:D5:4F:47:97:9E:51:75:0D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BF4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-t7DL42sp85xScXX1U9Hl55RdQ0.roa
Signing time: Mon 13 Jan 2025 23:55:03 +0000
ROA not before: Mon 13 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 13 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=FADEC32F8DACA7CE7149C5D7D54F47979E51750D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:be:ab:26:dc:53:05:8e:19:a5:6c:b8:f9:
39:57:5d:26:72:a0:ce:38:68:ff:a1:62:e7:91:c6:
2e:42:44:44:96:de:1c:f3:9b:0f:9d:17:4f:c6:cc:
5e:f6:04:bd:c6:9c:73:68:02:57:72:6e:bd:ac:0f:
75:48:c5:d7:c8:5c:7a:e9:99:eb:b9:cc:1d:e8:cf:
4f:a4:09:37:3c:0f:36:92:28:02:d8:dd:07:3e:75:
fb:e6:9f:49:9e:a9:3c:e4:5a:ce:26:5a:cb:44:5d:
29:f8:03:69:c0:11:93:63:1a:b3:08:c7:57:d9:34:
06:95:80:34:f3:26:79:c9:ad:56:dc:48:2e:b3:20:
76:ee:f7:3c:3c:f3:4b:7f:40:b6:82:d8:56:ff:91:
23:49:b7:49:63:04:0f:6e:5b:8b:2a:b1:45:90:27:
54:82:77:80:c5:e0:e9:90:44:bb:13:23:e3:fb:07:
90:f2:bf:d2:2e:70:b7:e4:a6:48:8f:92:55:0a:47:
26:8b:49:7b:25:08:df:14:97:93:a9:6e:74:e1:95:
a3:ff:26:dd:f7:6e:ba:b4:55:d0:9e:5d:ef:1f:62:
b3:60:1a:74:a8:ac:ec:f9:ca:73:93:b8:4c:be:21:
94:9a:b7:58:95:f7:c6:01:ac:59:e3:7c:44:d9:89:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:C3:2F:8D:AC:A7:CE:71:49:C5:D7:D5:4F:47:97:9E:51:75:0D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-t7DL42sp85xScXX1U9Hl55RdQ0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bb:cc:c8:eb:3d:20:26:3f:9a:5b:d0:bd:3f:13:0d:e2:0e:
fb:55:a6:21:b7:17:b9:6c:75:6d:92:fd:5a:f3:22:d5:50:62:
7f:19:24:de:fd:82:76:b4:c9:14:9c:55:7e:cd:ba:d4:4b:98:
bc:43:36:0d:da:3d:a9:17:e3:f2:b1:68:5e:3d:eb:b4:2f:38:
64:80:28:14:1e:86:3d:d0:72:7d:b9:69:5d:7c:f6:30:c0:45:
91:14:41:a0:02:89:57:df:32:25:fa:8c:b7:13:5c:b4:00:fa:
90:e3:8a:61:17:68:61:57:2f:eb:37:19:14:fc:92:9e:67:a1:
3e:de:7b:e1:18:ae:45:93:31:77:4d:6d:f1:b1:de:fc:4a:f4:
1d:81:6a:f1:60:ca:13:9e:cc:3c:c8:8a:43:7b:5c:06:d7:21:
85:0b:d9:3d:57:f4:da:7d:92:63:f7:11:18:d8:16:2c:34:a2:
93:b2:04:8b:a3:1d:ad:49:02:e4:9f:4c:df:f4:59:84:84:56:
19:ef:ce:a6:89:bc:ed:ba:9c:62:ea:ea:f3:18:1b:9c:15:53:
e8:ac:d0:02:2e:04:40:00:85:73:a6:f8:48:16:83:f8:57:a4:
eb:43:26:ed:30:27:e1:a4:17:99:00:11:61:fa:a0:71:7b:7f:
82:b4:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:08:22 2025 by rpki-client