Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/0_XPRNhQJnoKoHuWEgy3J1mBoZ8.roa
File: 0_XPRNhQJnoKoHuWEgy3J1mBoZ8.roa (raw, json)
Hash identifier: 0oNRMOa8nKc1+WuuHPL5EVP6QgQjXWj5T9RERHpM9lI=
Subject key identifier: D3:F5:CF:44:D8:50:26:7A:0A:A0:7B:96:12:0C:B7:27:59:81:A1:9F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B54
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0_XPRNhQJnoKoHuWEgy3J1mBoZ8.roa
Signing time: Fri 27 Dec 2024 07:55:02 +0000
ROA not before: Fri 27 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 27 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D3F5CF44D850267A0AA07B96120CB7275981A19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:8c:f6:da:50:b8:19:db:c2:d9:2a:48:98:
be:d0:82:ac:bf:2e:ff:c6:d8:11:e5:ab:07:bc:a8:
87:6d:bb:ba:3b:f0:b9:e9:43:3f:c2:db:fa:c5:f1:
0a:f2:f5:83:e2:7e:bd:8b:72:4b:c8:12:ed:5d:79:
8e:d5:8b:ca:df:c4:65:fa:90:1b:e6:f6:b8:c8:d7:
ea:cf:f5:83:ec:b6:cc:39:ea:19:fe:61:95:75:25:
89:19:c5:16:82:00:c1:15:a7:fb:74:b8:9d:c2:3b:
8d:92:6f:dd:ac:62:31:cf:30:82:bf:0d:b7:32:3f:
3a:bc:30:79:97:3e:28:d5:c7:ec:46:74:a3:6e:c5:
64:2b:ae:0e:61:d1:35:02:46:c4:74:37:73:bb:d8:
2b:05:d7:4d:31:6d:9b:35:01:af:76:0c:0c:dd:50:
d8:0e:6c:74:4a:f5:9f:76:b2:bb:d1:d3:bd:f2:f7:
85:19:48:3f:ad:f4:93:e1:ea:a3:2d:33:c9:00:c8:
43:a5:a2:a7:a6:37:51:ca:15:35:09:97:c3:6d:a6:
09:d7:18:02:56:1e:49:d5:6c:cb:5d:5d:58:47:07:
7c:ab:a5:09:85:05:d6:f9:e0:0c:c2:09:ae:72:60:
28:f9:5d:a8:6d:41:78:8d:26:c0:64:aa:16:23:4f:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F5:CF:44:D8:50:26:7A:0A:A0:7B:96:12:0C:B7:27:59:81:A1:9F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/0_XPRNhQJnoKoHuWEgy3J1mBoZ8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b3:79:c1:ec:69:08:3d:93:0d:f5:62:7c:3d:b6:6f:9b:a8:
57:d0:e6:08:e3:49:1c:9e:62:39:75:32:ac:12:65:49:0f:42:
b5:d3:5c:f6:db:cb:c1:5b:67:b9:1e:93:3f:d8:30:71:c0:39:
5b:67:54:97:9c:f2:f0:26:66:ac:57:ec:82:53:a5:60:26:e0:
04:7c:52:a0:6d:de:0c:a8:16:b8:81:a3:62:2a:b8:ba:08:8e:
1b:4d:f0:54:82:b9:54:46:57:a8:16:7b:cf:c5:63:8c:4a:7a:
ba:f9:e2:7c:a6:c4:41:38:84:d0:fb:e7:2e:6a:c9:f3:f1:c4:
9e:1a:d2:81:93:f4:11:40:89:96:be:dc:80:6f:51:ac:15:41:
a2:e1:13:b1:4d:8d:77:30:5b:a6:fd:1e:d9:f4:71:ce:e0:4e:
6d:3f:2b:39:75:58:43:f1:2f:db:ec:fd:b4:f8:73:fb:98:c6:
a1:72:74:22:e3:80:6a:fc:fa:b7:5c:77:12:4b:a9:70:60:7e:
90:7c:00:3a:a1:ee:5e:e5:46:4f:af:06:46:6b:9d:82:63:64:
b4:85:16:cb:7e:d6:e3:5a:37:0b:3e:23:9d:98:8c:74:65:80:
c7:b7:f7:d9:d0:30:29:c5:ba:58:ac:d1:0a:d1:dc:dc:38:55:
53:f6:ef:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:01:49 2025 by rpki-client