Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/5H2GYcELI9hzg658-OWDMIFttL0.roa
File: 5H2GYcELI9hzg658-OWDMIFttL0.roa (raw, json)
Hash identifier: vlKxVCQ6QC7ELd9sOm3tzg9Bb33pU3vctMD6NOHdcZk=
Subject key identifier: E4:7D:86:61:C1:0B:23:D8:73:83:AE:7C:F8:E5:83:30:81:6D:B4:BD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B5A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5H2GYcELI9hzg658-OWDMIFttL0.roa
Signing time: Fri 27 Dec 2024 23:55:04 +0000
ROA not before: Fri 27 Dec 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2906 (0xb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 27 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E47D8661C10B23D87383AE7CF8E58330816DB4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:6a:df:fd:9e:47:9c:af:63:39:64:13:d1:
8c:41:31:4d:8b:36:77:06:11:69:84:dc:a1:4d:91:
c7:cc:8a:59:6b:e9:73:f4:ed:58:e2:bc:8d:b4:18:
3d:7b:81:3b:68:a1:4d:f3:f4:c9:99:b7:aa:f0:62:
26:18:dd:38:f3:99:fd:f5:de:01:0b:53:ee:64:1b:
a7:f9:04:d9:52:d9:42:44:63:8e:b9:ba:b3:fd:15:
bc:64:16:73:ec:9c:eb:d2:bd:32:5c:03:73:1e:57:
59:6d:f5:80:02:a3:45:90:2d:6d:65:fa:b6:43:bc:
17:19:9e:7a:c4:6b:3e:9b:75:5f:4c:28:10:0f:a1:
1c:df:dc:b3:ff:b8:7a:79:0a:f6:c1:0c:e3:51:76:
7c:63:39:41:63:bb:82:5d:80:6a:9a:68:d4:e9:7e:
36:7a:42:33:66:63:5a:7f:f5:db:a4:25:32:89:67:
30:65:62:2e:12:f0:6d:51:b3:a3:e2:51:7c:bb:7e:
4d:1f:15:fd:e3:d0:5e:22:43:ad:ce:6a:ce:0d:00:
ab:74:cb:d5:9b:c7:b7:bc:39:69:4d:17:a6:fd:90:
dd:bc:f4:7a:88:8c:15:01:93:0e:de:76:a6:2d:ce:
8e:03:71:58:8a:a2:29:11:17:c6:f6:cc:90:e4:fb:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:86:61:C1:0B:23:D8:73:83:AE:7C:F8:E5:83:30:81:6D:B4:BD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5H2GYcELI9hzg658-OWDMIFttL0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a1:26:00:e4:c0:03:40:26:5d:27:b7:1f:d2:00:a4:71:59:
30:a4:d8:94:08:3f:86:52:e7:db:e2:cf:9f:9f:7d:f7:e0:13:
13:d0:f1:1c:00:10:b1:82:5c:80:a3:23:79:54:97:bb:5e:ac:
4e:3a:7d:32:38:60:2a:58:a5:6e:e3:07:03:2e:4e:04:47:41:
70:a0:07:c3:81:ca:d8:b5:16:e2:16:21:ca:b5:15:c5:03:3f:
28:5e:ca:55:93:5c:0a:87:99:52:ed:cb:19:af:7c:ca:cb:20:
01:32:24:80:da:7e:45:be:f8:4a:f6:2f:7e:8a:5c:9a:8e:e3:
58:e7:17:49:f2:76:6c:46:52:8f:8a:80:3a:b7:e0:99:61:dc:
c0:47:07:a2:a3:fc:76:6a:0c:b1:06:af:04:d6:7a:05:5e:9f:
91:e7:68:3c:a2:4c:60:ae:a1:47:07:83:1e:08:17:b5:82:78:
2a:f7:e5:e8:75:eb:aa:89:36:98:68:52:5b:60:ff:99:d4:97:
91:d4:40:2a:a5:8f:ca:82:f1:db:8c:c3:46:36:ce:e0:cb:ec:
da:2e:33:a2:8e:1d:17:78:8c:73:bc:44:6f:7e:46:62:fb:e7:
6a:0a:c9:46:af:b7:86:fb:20:02:15:e8:0b:fe:df:46:01:bf:
ab:e7:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:00:09 2025 by rpki-client