Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/2fZCv-IR0maS16v8sLdOjvsqDys.roa
File: 2fZCv-IR0maS16v8sLdOjvsqDys.roa (raw, json)
Hash identifier: NSD/iTxHoOwvHY90DuPx9cjIHNUTTcR/uszxyp+uT3A=
Subject key identifier: D9:F6:42:BF:E2:11:D2:66:92:D7:AB:FC:B0:B7:4E:8E:FB:2A:0F:2B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AB2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2fZCv-IR0maS16v8sLdOjvsqDys.roa
Signing time: Mon 09 Dec 2024 07:55:04 +0000
ROA not before: Mon 09 Dec 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2738 (0xab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 9 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=D9F642BFE211D26692D7ABFCB0B74E8EFB2A0F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:04:04:ef:0f:5b:17:e5:d8:ee:8c:29:b5:
f7:6a:0d:ba:5f:9b:d7:d6:23:77:f7:7d:f1:9a:f7:
70:e4:e2:e4:7f:12:8c:67:76:40:d4:ff:ce:10:df:
58:59:31:6b:69:30:97:83:a6:e8:ae:3f:c8:9f:d9:
11:57:06:a4:30:fe:13:70:3b:39:48:cd:39:f3:a6:
88:a6:b3:dd:ae:fc:2d:5d:e8:e8:fe:b3:ff:68:35:
fa:17:62:22:a9:1a:b4:77:30:8d:a8:c4:a7:f4:fa:
d2:28:df:2f:69:d9:aa:f0:e5:0e:f1:ca:b6:8d:91:
1f:d9:8b:6d:c0:e1:fa:96:26:3a:6a:86:e6:7f:af:
05:a0:f1:23:1c:c8:5f:93:3c:9b:6b:8a:3e:0e:44:
b6:e3:cf:f2:5f:95:99:a6:eb:da:e7:18:b8:53:c5:
24:1c:5d:87:44:02:c1:63:41:ef:22:76:a3:2c:57:
83:ee:d9:4e:2d:10:1b:b6:aa:cc:21:ac:64:c2:c5:
1d:9d:25:eb:26:21:a8:17:60:4b:52:25:37:76:22:
66:16:b3:1a:f1:6a:de:1f:d2:c6:fe:72:09:77:51:
8c:f9:ac:e8:10:a1:c2:93:10:7b:d7:fd:8b:a7:89:
f2:08:70:61:23:06:ca:92:ad:7d:13:31:f1:3e:01:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:42:BF:E2:11:D2:66:92:D7:AB:FC:B0:B7:4E:8E:FB:2A:0F:2B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2fZCv-IR0maS16v8sLdOjvsqDys.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ae:d7:5c:cf:49:fd:33:61:e9:2f:37:96:e0:89:7e:fa:39:
8f:70:de:12:c6:da:4b:8e:d4:0e:f7:2c:08:fa:34:ff:d4:fd:
b1:b5:50:e5:9b:29:e8:ac:30:8e:bd:42:f1:db:6f:ba:ae:c7:
0b:63:e7:e2:24:66:28:eb:df:9c:e4:cd:1b:cb:fc:08:68:92:
af:d7:3d:88:be:06:37:44:fe:79:ae:a0:5e:31:82:c7:59:98:
aa:e5:e9:f0:59:7c:d6:5e:c0:87:4b:94:79:06:80:0c:14:99:
a2:ae:87:4f:55:37:0f:69:a0:60:a1:58:39:28:6e:99:8e:f0:
60:da:9a:14:38:c2:d1:7c:bb:5b:07:49:eb:91:62:49:4c:d0:
71:ba:ba:20:ea:59:a0:8b:d4:66:ce:95:e5:31:8c:f0:e4:ff:
13:ef:bc:59:46:91:8a:7a:49:bf:d6:b1:40:85:2c:1d:9a:b5:
42:0e:95:5e:b3:41:22:eb:f7:3b:c6:8e:7c:12:96:43:c9:36:
32:77:3e:f7:10:05:45:85:ef:4b:f6:d9:d0:dd:72:ed:d2:6d:
c7:2c:9e:bf:e4:b3:d3:07:88:0b:7b:99:6b:85:40:b7:0a:c7:
6b:a5:ba:80:05:23:70:6d:04:8a:13:0f:1a:1f:f9:6c:cb:19:
99:69:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:21 2025 by rpki-client