Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4rh81I_9h1u0BWNHmIM20blEUtM.roa
File: 4rh81I_9h1u0BWNHmIM20blEUtM.roa (raw, json)
Hash identifier: 3AmWoEFZHXKM6cfS2ElWT1DmYMf5+RFCUtvStkSBlHU=
Subject key identifier: E2:B8:7C:D4:8F:FD:87:5B:B4:05:63:47:98:83:36:D1:B9:44:52:D3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C21
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4rh81I_9h1u0BWNHmIM20blEUtM.roa
Signing time: Sat 18 Jan 2025 23:55:03 +0000
ROA not before: Sat 18 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 18 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=E2B87CD48FFD875BB4056347988336D1B94452D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:d1:37:3f:bc:da:89:fa:dc:6d:f9:aa:7d:
bd:fb:5f:df:fa:6c:dd:7f:b9:bb:ad:fe:7d:8b:c2:
b3:91:cb:f2:ae:94:ab:de:ce:a7:46:b4:33:b8:d5:
2a:6d:6a:b4:41:44:1a:83:54:ac:c3:b1:bc:80:f7:
8c:4b:09:f5:96:d9:80:4b:16:15:1c:aa:32:f6:21:
e9:3f:25:dc:bd:90:a6:bd:c0:7b:44:1c:23:76:08:
27:0f:5a:02:84:5e:12:5a:3f:69:29:2a:50:f1:83:
6c:e4:93:cf:dd:02:90:ae:f8:c4:8f:7b:0c:f0:e4:
44:91:b9:69:13:90:af:46:11:f7:1b:91:c6:ff:82:
00:d4:9a:9a:42:ff:3c:e8:c1:88:06:00:c1:3b:6d:
b6:87:56:dd:55:ca:05:a5:2b:8c:d5:f7:d5:a5:6d:
9d:23:93:c4:f5:2b:09:fa:70:cd:19:5d:24:00:19:
00:cf:6c:bb:8c:39:57:da:95:2f:9b:23:8d:30:c0:
aa:7f:01:93:46:d3:61:5e:43:37:72:cf:c9:52:12:
52:90:07:fb:38:96:5c:13:37:2d:8b:2c:8a:76:04:
50:f9:95:58:ea:25:3e:d9:3d:1f:f7:46:64:8a:1e:
00:ba:b4:b3:33:56:96:4b:2d:85:ce:47:b7:fd:a3:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:7C:D4:8F:FD:87:5B:B4:05:63:47:98:83:36:D1:B9:44:52:D3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4rh81I_9h1u0BWNHmIM20blEUtM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:1e:4a:51:72:66:56:6f:e0:d5:51:e3:a7:f5:27:72:fb:9b:
7b:f9:49:9a:a3:46:f4:c7:b4:fd:d9:52:0c:b6:40:15:f7:88:
ab:fd:f6:d0:00:f9:98:a4:d0:1b:6e:d0:89:e9:fc:cf:35:1e:
e5:a6:14:ac:b2:b3:02:6a:66:23:d9:a7:b9:1f:e8:20:fb:45:
a8:8b:aa:8e:18:d4:d7:e8:1f:ea:cd:4d:aa:3d:bb:0f:83:09:
23:68:90:e9:7d:a6:97:44:4d:df:aa:38:78:60:07:86:db:81:
52:f5:57:9a:43:84:aa:c2:4e:f3:c9:67:93:85:b3:d9:bb:70:
95:79:7a:12:ae:a1:19:ce:0d:42:21:03:03:c4:a1:45:e2:15:
76:b2:e0:dd:38:35:e7:fe:b9:18:dd:f0:3d:93:54:1b:53:82:
01:ba:6f:ac:15:d6:ff:58:75:38:ff:72:a5:74:17:b2:50:3e:
27:fa:46:6d:2a:8f:ac:d6:69:af:20:27:56:ff:c5:94:76:d1:
75:46:b7:03:84:98:24:36:18:47:32:bc:94:0f:b8:0a:2a:0b:
77:f3:1b:56:2f:e7:8d:12:15:ec:ae:e8:87:e1:8c:37:0a:0c:
7b:03:36:b6:44:f9:d0:74:7f:89:56:c9:ab:87:3e:9a:97:26:
06:9b:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:42:00 2025 by rpki-client