Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/7dIlBNXh-0rwlgdc16YwO2YG9bc.roa
File: 7dIlBNXh-0rwlgdc16YwO2YG9bc.roa (raw, json)
Hash identifier: HPqFPJr3t9TPIZ4HF6Ijkms0NwVGccLG7JK5Lw5HOzY=
Subject key identifier: ED:D2:25:04:D5:E1:FB:4A:F0:96:07:5C:D7:A6:30:3B:66:06:F5:B7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B09
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7dIlBNXh-0rwlgdc16YwO2YG9bc.roa
Signing time: Wed 18 Dec 2024 23:55:03 +0000
ROA not before: Wed 18 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2825 (0xb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 18 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EDD22504D5E1FB4AF096075CD7A6303B6606F5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:a9:c3:4f:8b:64:a8:eb:1d:b1:c5:2d:85:
6a:10:27:04:59:0b:91:74:25:90:e7:13:2b:95:ad:
c0:65:54:0f:5c:03:61:51:f5:ba:07:df:07:9f:97:
0f:5d:d9:d9:33:00:41:f5:13:ce:c1:db:7a:74:9c:
5c:3e:12:de:73:d1:85:c5:13:6b:7f:51:21:3c:9e:
3f:be:5d:7a:a0:84:79:e7:de:75:89:46:d1:66:8d:
c2:ee:64:99:60:19:e2:4a:a1:90:e2:fe:77:82:44:
b4:d2:fd:f2:ed:7e:07:7a:e5:a8:d9:73:a4:b3:5b:
4b:a8:9e:cb:e6:44:e8:2d:27:a8:f0:ed:67:b4:c4:
36:0a:3b:fa:4c:5b:61:d7:39:2c:ab:7c:d7:04:d3:
fb:82:39:b0:7d:5e:ca:0c:6e:d6:af:ba:d7:63:75:
76:55:bd:83:10:6f:6e:62:b6:78:75:58:0b:0a:1d:
97:dd:b3:a2:02:56:d2:a7:04:dc:fe:be:7c:63:fe:
fb:65:94:17:e4:1d:53:84:5d:1e:90:6c:35:83:a1:
77:26:a4:87:4c:0d:07:6f:4e:c3:11:a9:ca:60:6e:
2a:2f:ec:92:75:60:8a:d5:c6:84:ee:93:db:51:33:
2a:0d:fb:e1:f8:90:95:ec:cb:ab:ec:8a:88:fe:fa:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D2:25:04:D5:E1:FB:4A:F0:96:07:5C:D7:A6:30:3B:66:06:F5:B7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7dIlBNXh-0rwlgdc16YwO2YG9bc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8f:29:0a:7a:c9:6b:7e:cb:2f:fb:40:9e:ed:7c:a8:97:5b:
57:77:ab:03:53:3f:74:23:b3:96:56:9e:ed:6f:24:89:f9:22:
89:54:6f:17:14:51:42:f9:75:f0:76:c4:3a:63:6f:e2:1e:94:
1d:7b:ec:28:8b:bf:91:2e:c3:41:ac:c8:f1:d0:af:85:47:a7:
aa:d0:f4:48:c6:57:a5:c9:2a:7d:4f:04:e1:c4:c2:6a:4c:a8:
5e:0b:e5:fb:ef:70:7c:22:f3:85:2c:50:f5:79:8e:a8:55:20:
72:34:5a:f4:21:82:cd:aa:68:53:c2:63:fe:59:8a:07:0c:47:
4c:b8:f3:ee:4b:19:0b:33:73:b9:48:da:88:6c:dc:0e:83:6d:
da:f7:cf:88:37:bd:bc:73:7e:2b:54:35:a9:7a:af:f5:b3:2a:
bd:aa:ae:9e:cc:d2:61:1a:5e:5b:07:e0:24:5e:6c:c3:3d:c8:
17:8d:30:92:8b:e3:40:bb:66:87:85:64:77:26:66:90:ca:91:
b8:07:00:ff:21:89:c5:50:c1:d1:ce:0f:34:02:57:b9:72:da:
30:77:b1:78:e3:20:f1:37:47:65:34:f2:7b:4a:67:ee:68:60:
d3:75:09:00:f8:49:81:6d:9f:86:d6:5e:f0:8a:72:dc:43:01:
57:66:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:01:46 2025 by rpki-client