Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/5IRx7ISwy2g2uHanNdFZ9vJYRNE.roa
File: 5IRx7ISwy2g2uHanNdFZ9vJYRNE.roa (raw, json)
Hash identifier: XrKjaHHWcN6mTMDVkbOco6yqsBauqIsxlKYi06RwZSk=
Subject key identifier: E4:84:71:EC:84:B0:CB:68:36:B8:76:A7:35:D1:59:F6:F2:58:44:D1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B63
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5IRx7ISwy2g2uHanNdFZ9vJYRNE.roa
Signing time: Sat 28 Dec 2024 23:55:03 +0000
ROA not before: Sat 28 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2915 (0xb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 28 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E48471EC84B0CB6836B876A735D159F6F25844D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:fe:14:7d:36:ab:5c:66:9a:05:7e:b2:ad:
1f:21:ec:1c:a8:a7:db:dc:09:4b:52:0f:15:75:f6:
76:e9:c8:16:b9:dc:b7:3c:7c:6a:a0:c0:eb:c1:24:
c3:70:b4:d3:e4:c3:9a:71:12:9e:a6:2b:8a:43:be:
b9:70:aa:c9:46:16:28:92:96:d2:06:0d:db:81:e8:
92:cb:b2:a9:17:52:15:13:92:28:c8:99:e2:8a:f4:
5f:5f:83:ce:8d:7a:6c:72:21:88:15:47:e7:7b:a5:
ab:8d:ad:4f:31:61:c7:b1:92:cd:f9:08:d5:5b:d6:
c7:b4:41:e1:a0:36:e9:99:09:32:16:c9:96:2b:17:
ac:f5:9e:4a:52:09:52:d5:3b:7e:1e:73:c0:55:93:
3c:c3:9b:ad:36:1c:15:60:7c:85:48:9a:d1:f3:09:
33:3c:8a:31:c4:ba:ea:12:b8:bb:de:85:c3:8c:57:
44:c4:f9:7e:61:19:09:63:25:71:53:91:3b:2d:a9:
50:f2:ae:ce:c4:6b:04:a4:c7:14:2b:6e:7d:86:79:
5a:df:8d:08:c1:51:e9:78:44:56:71:0a:73:3d:61:
16:39:d4:11:7f:bf:76:b5:a9:1b:01:7c:7c:c1:69:
7e:a4:52:87:a3:19:38:19:43:b7:56:7b:ef:83:83:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:71:EC:84:B0:CB:68:36:B8:76:A7:35:D1:59:F6:F2:58:44:D1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5IRx7ISwy2g2uHanNdFZ9vJYRNE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c7:e5:6b:50:53:55:33:6d:5a:47:0f:1d:0e:b4:43:b8:b3:
b3:1d:76:9f:bf:17:7f:6f:5b:a6:c0:9f:fa:dc:b4:21:ce:69:
36:a0:2a:96:d9:c9:f8:ba:27:bd:af:86:3d:18:57:42:5a:cc:
e2:59:4e:25:00:f6:41:cc:5a:a0:31:08:d1:c7:e8:5f:7d:db:
20:c8:89:b3:1c:16:1f:56:2c:db:b7:f8:2f:bb:92:0c:6e:9a:
88:f0:1d:7c:3e:51:e3:d4:23:31:6f:15:4c:af:ab:bb:2a:9f:
75:10:df:af:ce:3d:72:a3:2e:6e:52:e6:bc:17:39:6b:a5:0a:
09:02:02:a3:ca:0a:00:2a:ad:13:8c:a1:6f:0d:58:76:7d:10:
94:61:41:e5:68:21:a8:f5:e4:ba:6a:7f:57:b7:ef:43:28:f3:
44:81:4b:04:48:89:bb:34:74:dd:b4:b6:ce:df:b3:20:bd:1c:
81:ea:be:b7:01:99:fb:57:34:b1:46:b9:67:96:13:94:0f:d4:
8b:8f:19:84:2d:05:56:dd:c5:9a:1b:e5:1a:cd:5a:d6:6d:57:
ac:da:ae:d2:3d:97:5a:ea:c4:20:a9:17:4d:19:32:21:51:70:
1c:16:5c:4c:db:ca:ee:4a:5e:ae:f3:ec:8d:f1:a3:38:93:62:
9d:56:be:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:32:25 2025 by rpki-client