Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/17LhUL6FV2VWPoXaqZ3d68oFb88.roa
File: 17LhUL6FV2VWPoXaqZ3d68oFb88.roa (raw, json)
Hash identifier: X64wuahrM7O4oGnOHkbRuLk1gn5g2vTf12E7B41XMds=
Subject key identifier: D7:B2:E1:50:BE:85:57:65:56:3E:85:DA:A9:9D:DD:EB:CA:05:6F:CF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AD9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/17LhUL6FV2VWPoXaqZ3d68oFb88.roa
Signing time: Fri 13 Dec 2024 15:55:02 +0000
ROA not before: Fri 13 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2777 (0xad9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 13 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D7B2E150BE855765563E85DAA99DDDEBCA056FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:99:57:96:f9:6b:bf:ba:ab:b8:00:5f:81:
80:6d:56:b3:af:5d:f9:9c:82:c9:86:1e:1e:30:ed:
be:ca:dd:56:72:59:b2:89:2d:8c:d3:73:2e:5a:11:
10:c6:29:dc:2f:8a:28:44:26:42:1c:d5:16:c4:f0:
e1:0f:16:d8:c5:91:9a:e5:36:ee:15:36:31:53:f5:
ed:cd:55:23:dd:cf:fb:d2:c4:a7:cf:f4:b3:22:48:
fe:21:7c:75:9f:36:f7:d2:51:73:1d:d8:b6:14:85:
60:36:17:59:12:e1:b0:5f:fe:55:7b:08:60:87:48:
09:80:c5:ee:06:d5:f5:b0:86:19:57:b4:8f:d4:14:
53:8c:58:29:eb:e1:d3:0c:9a:10:3d:d7:1b:e3:90:
bf:0e:b8:55:c4:d9:b0:96:ca:5d:f8:43:12:a8:66:
d7:96:4f:3f:4f:75:4d:d4:3d:5c:0f:dd:45:d1:68:
29:99:18:b9:72:e6:db:f0:99:94:8c:48:92:ff:bc:
14:52:a1:03:74:4f:be:4c:e4:b5:c3:ca:47:fe:3a:
82:e5:27:14:bb:a7:f0:3c:cf:65:8a:e2:55:e1:ab:
a3:27:96:20:e3:e6:74:a8:a2:eb:09:a2:c5:65:0e:
1d:fd:de:33:71:bb:1c:ad:90:33:4f:d0:f2:93:11:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B2:E1:50:BE:85:57:65:56:3E:85:DA:A9:9D:DD:EB:CA:05:6F:CF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/17LhUL6FV2VWPoXaqZ3d68oFb88.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:40:e0:c8:59:8b:85:c1:ac:43:80:5c:c6:10:86:ad:77:85:
03:a0:ed:77:dd:91:4b:da:9f:21:d4:82:4b:66:6c:27:a9:5b:
8d:7b:db:1d:29:7c:d5:ad:4e:a9:86:64:2d:95:cf:fb:83:17:
a9:4e:e4:87:fa:ad:7e:08:9b:f2:64:82:bc:8f:76:b4:12:14:
2c:03:f8:ea:66:44:dc:ea:2d:5c:9a:a8:9a:32:5b:e1:7a:98:
6f:bf:57:75:f8:01:3b:4f:78:6d:21:e0:8c:86:6c:38:ed:70:
ca:4e:b7:f5:03:13:fb:8b:b8:66:84:cb:a2:4f:a4:8c:3a:d6:
dd:75:81:4b:8d:20:07:ea:df:4d:db:b5:f2:e5:74:3c:45:67:
d1:ae:82:e3:76:a7:67:9b:11:00:c7:29:ed:30:fe:8a:b2:ea:
dd:7b:ea:df:a1:a1:11:5d:41:e4:90:fd:b0:0e:b5:22:a0:d6:
91:e9:1f:82:a5:5f:0f:4a:7a:47:4c:35:42:fb:a9:f3:40:20:
24:e2:8e:39:9c:9c:ac:c2:eb:32:c1:67:79:2c:96:87:e1:27:
46:cc:34:c1:14:43:bd:f3:37:57:70:61:e2:f7:f1:bb:4c:61:
32:b1:5c:e4:a8:9e:e0:bb:85:c6:09:2e:1a:7b:a9:53:38:f3:
78:64:80:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:00:07 2025 by rpki-client