Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/63rlsLWJ_SiAIi2j5VZvS1NnINQ.roa
File: 63rlsLWJ_SiAIi2j5VZvS1NnINQ.roa (raw, json)
Hash identifier: Y7B4XscqXsT/xyk97dkyJisvCj07+XwwMHDKVtlbsdQ=
Subject key identifier: EB:7A:E5:B0:B5:89:FD:28:80:22:2D:A3:E5:56:6F:4B:53:67:20:D4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C75
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/63rlsLWJ_SiAIi2j5VZvS1NnINQ.roa
Signing time: Tue 28 Jan 2025 07:55:03 +0000
ROA not before: Tue 28 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 28 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=EB7AE5B0B589FD2880222DA3E5566F4B536720D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:0d:e1:ae:95:73:45:c2:c8:5e:20:f2:22:
f5:1e:8f:32:7b:0a:be:3a:b0:1c:b8:11:86:a1:c9:
34:b4:7a:53:33:22:5b:96:3d:a8:21:b6:8c:76:e0:
be:f7:83:29:9c:83:98:ee:85:2b:c0:83:e6:79:2b:
3e:84:f6:fc:15:c5:47:3d:5e:8a:0e:d9:a6:17:fc:
3f:12:36:50:c5:df:51:c4:2d:1a:ff:92:3a:d8:16:
93:20:28:ea:44:fc:37:ef:cf:8f:a1:02:77:38:53:
d9:c2:86:0a:ff:cd:84:c5:9a:71:dd:c1:8c:3c:89:
2e:fb:7e:95:af:39:4f:87:e0:fd:42:37:c4:b9:f8:
b0:b2:db:d0:b0:bf:d3:12:6f:38:0a:6a:0d:50:f3:
85:13:e6:f7:db:4b:9c:fe:f2:94:ca:b7:41:b5:4c:
65:47:f5:06:59:c2:ef:47:2f:16:13:de:43:e4:d4:
69:47:a1:d2:7d:fb:c4:51:43:cf:55:44:61:d3:e7:
02:53:7c:67:fc:65:92:e9:15:e6:93:24:db:fd:bc:
32:25:9c:04:28:f4:f7:f5:80:c8:48:eb:cf:5f:fd:
0e:21:69:1c:c3:9b:b3:5c:d9:e8:16:07:9f:63:fb:
00:c5:6a:4c:74:28:b6:69:b0:a7:a3:bd:05:a5:31:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:E5:B0:B5:89:FD:28:80:22:2D:A3:E5:56:6F:4B:53:67:20:D4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/63rlsLWJ_SiAIi2j5VZvS1NnINQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
94:be:dc:05:6d:19:97:e0:9e:99:1b:5a:b3:b8:03:38:c0:b0:
78:6f:ac:09:bb:96:f5:50:ce:45:28:2c:eb:26:99:e4:ff:06:
f8:cf:c4:c9:77:77:46:7f:6c:79:dd:58:85:db:bd:7f:a2:27:
9e:8f:7d:66:2e:be:cf:bd:4b:75:66:55:92:06:80:15:a5:f9:
76:75:db:7b:3a:8a:bf:42:bf:70:53:2d:0d:d2:d8:37:13:d4:
f1:30:c5:1c:b9:1c:13:1c:fc:07:2a:13:2e:d0:7c:52:c2:eb:
6f:42:2a:87:a4:80:4d:31:50:14:80:b3:0b:83:7e:06:91:60:
bc:95:bf:d8:c7:24:da:c5:0b:ef:d2:c1:06:38:f7:23:1e:5c:
e1:59:4a:5f:fa:bc:07:3a:f4:b8:6c:c7:d4:a3:ce:f3:40:b7:
20:fa:14:78:07:25:cf:39:5a:1f:38:9d:db:5a:e2:f1:a9:f2:
19:33:db:00:88:99:0c:ba:c1:9f:a5:ae:0c:6c:52:01:dd:dd:
74:b1:3d:83:ec:71:56:c3:c3:44:57:12:0d:b8:61:1e:55:b6:
8e:96:aa:3b:e9:8d:6a:ed:a3:5c:1d:8a:ca:85:58:30:49:ec:
b4:ae:f2:19:47:b0:7c:46:06:d4:e7:c0:fe:f3:57:05:06:f6:
6f:80:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:36:36 2025 by rpki-client