Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/-tW0oWDpvd6cmSEjQbLOhcu6VAc.roa
File: -tW0oWDpvd6cmSEjQbLOhcu6VAc.roa (raw, json)
Hash identifier: SeUlz/8ZoQpHigeMABo6L0AkcqqzSp1KYTf9d9iQW8w=
Subject key identifier: FA:D5:B4:A1:60:E9:BD:DE:9C:99:21:23:41:B2:CE:85:CB:BA:54:07
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B51
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-tW0oWDpvd6cmSEjQbLOhcu6VAc.roa
Signing time: Thu 26 Dec 2024 23:55:05 +0000
ROA not before: Thu 26 Dec 2024 23:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2897 (0xb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 26 23:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FAD5B4A160E9BDDE9C99212341B2CE85CBBA5407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ee:56:21:36:d2:2c:17:86:13:fc:ee:d4:42:
6c:50:cc:ce:b2:64:4c:fb:97:4a:2e:b4:3a:19:41:
3f:14:48:19:2c:59:3f:b6:7b:75:f4:c2:25:f8:19:
50:72:6c:bb:6f:7f:4a:4f:15:02:f5:5c:93:6e:8e:
89:9f:91:c9:e8:ef:fd:e1:cf:d3:d0:a9:22:c7:1c:
21:7f:fc:c0:0b:dc:b2:f8:4c:06:08:fd:77:4d:14:
2e:ed:af:6f:fe:5f:a5:40:64:13:a9:ea:1c:49:36:
8e:ce:85:6b:6e:28:7c:d0:e7:48:3e:54:f2:74:03:
59:f5:99:0a:44:84:0c:52:22:71:25:64:93:c1:a6:
ef:a8:77:e7:90:45:78:0d:fe:04:cb:f5:92:30:05:
77:54:05:ca:87:2d:38:67:9c:a7:1b:f0:d3:66:b4:
08:e9:7c:80:de:e4:d8:8d:96:ff:c5:a1:5d:bd:54:
df:36:41:43:48:21:85:ad:3e:00:f4:9b:d2:e2:a8:
d9:7e:b8:a2:73:3e:f3:15:5c:fd:66:cd:29:06:8a:
c0:61:34:8e:fe:64:48:f7:bb:66:da:a5:c1:51:6c:
c2:52:8f:2f:f2:ea:d6:04:b4:4f:5e:40:63:1f:bb:
09:e6:56:65:a2:89:cf:e5:5a:cd:08:9d:27:ec:aa:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:B4:A1:60:E9:BD:DE:9C:99:21:23:41:B2:CE:85:CB:BA:54:07
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/-tW0oWDpvd6cmSEjQbLOhcu6VAc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a5:73:42:d8:4a:94:01:59:45:c8:ff:d5:aa:9a:69:4d:67:
bb:4b:8a:30:41:cb:59:77:2c:bb:2a:77:64:53:fa:79:72:f6:
35:4d:21:3b:d7:2c:f5:4e:b3:7f:0f:8f:ab:3d:2e:3e:88:8c:
5f:de:40:14:79:73:7c:f4:cf:27:27:5c:01:17:31:02:0b:e0:
4c:b6:88:c0:4d:e7:fb:aa:9c:5a:99:0b:0f:fe:e7:54:f0:a9:
52:e0:1c:44:56:86:24:59:a3:a2:db:c9:8c:7b:44:bc:41:de:
61:26:42:31:ad:f7:91:a1:2b:81:76:6c:26:01:f9:ef:70:e2:
19:27:9d:f4:e9:ba:f8:8f:81:d4:be:da:90:79:fd:46:5b:8d:
5c:82:10:e0:f5:bb:a2:de:09:35:01:00:9a:ed:10:5b:0f:29:
82:60:55:ac:ca:9b:54:58:2d:11:60:7f:15:c3:de:ba:82:fb:
22:5e:30:5e:f3:59:58:28:c0:7b:96:ce:f7:59:82:97:c7:d7:
01:bf:1a:27:47:85:3c:72:17:4d:65:b1:9f:91:39:21:a2:6e:
03:0b:ed:d3:61:bd:ee:63:96:90:62:4a:2c:66:1a:7a:a7:72:
18:0e:8d:b3:60:5f:fc:43:66:df:0b:b0:57:b3:64:bb:b8:85:
eb:9f:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:08:50 2025 by rpki-client