Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/7lm01jTyh-9yxFCUN_pagN4WWaM.roa
File: 7lm01jTyh-9yxFCUN_pagN4WWaM.roa (raw, json)
Hash identifier: Mjf+mvu++rAA18fIWDyEiuiTPZzJ4fIqNAcpUq6l8ns=
Subject key identifier: EE:59:B4:D6:34:F2:87:EF:72:C4:50:94:37:FA:5A:80:DE:16:59:A3
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AEE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7lm01jTyh-9yxFCUN_pagN4WWaM.roa
Signing time: Sun 15 Dec 2024 23:55:02 +0000
ROA not before: Sun 15 Dec 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 15 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EE59B4D634F287EF72C4509437FA5A80DE1659A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:41:39:92:46:d2:8b:88:97:cf:05:fb:63:
33:d3:9d:36:42:fb:d1:ba:31:34:cb:af:10:c5:ac:
72:3e:2a:89:73:8b:29:31:0f:07:43:9b:fa:29:e0:
64:89:fa:16:77:03:66:dd:73:c5:31:5e:54:aa:c1:
d4:76:05:99:c1:9b:1b:d6:f2:fa:58:1a:7b:20:26:
2a:a7:63:e5:79:1d:44:2a:6e:0c:68:90:f7:29:b0:
5b:b0:3c:35:a6:9b:c4:93:56:6c:ce:74:11:15:c5:
f6:fe:fc:f1:22:fc:4d:00:26:1c:5b:bd:5d:42:4c:
a1:88:ed:31:4b:34:c0:89:d7:fa:3d:2a:6f:98:da:
a0:9d:28:84:c7:79:53:c3:40:e8:10:e3:6e:15:5e:
43:89:b3:33:f7:a4:6d:43:ec:6d:91:6d:63:3b:a6:
98:e4:7a:d8:ac:35:84:51:47:e4:41:45:05:e6:9a:
5c:d7:1c:55:44:56:4a:eb:76:7d:63:82:2d:2b:6c:
f5:51:4d:8f:e5:ea:e1:fa:7a:80:84:5a:d0:b4:c7:
42:f2:28:27:09:bb:45:08:7b:e8:89:82:df:ba:32:
9e:5d:6e:27:7e:20:d4:ff:9f:6e:62:31:77:e3:93:
1a:0c:e1:f7:7b:0b:75:a3:48:e8:90:bc:b0:38:00:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:B4:D6:34:F2:87:EF:72:C4:50:94:37:FA:5A:80:DE:16:59:A3
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/7lm01jTyh-9yxFCUN_pagN4WWaM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1f:28:42:bd:61:37:87:c6:17:b8:b2:8b:4f:92:ef:a0:6c:
7a:2f:2e:4a:07:fb:0d:34:76:62:32:d8:b6:74:4f:7e:cb:99:
be:81:d4:03:09:a4:7c:3e:c6:91:3d:e1:fe:2f:bc:d1:f1:af:
0f:7a:c2:27:e4:78:43:53:6a:ec:67:56:28:10:31:e0:81:a3:
3a:6b:86:fc:69:3b:c1:fe:d9:25:a1:f0:b6:a2:de:ca:55:4c:
45:b8:79:cf:fd:7c:f1:31:58:5d:5f:8a:22:9e:be:65:c7:4b:
b1:1e:11:e8:73:1d:fc:c3:8c:3a:f1:1d:3e:c9:d7:6d:11:50:
7d:1c:45:7a:bc:31:f5:ba:5d:6f:49:ca:e2:2b:8c:2d:00:c1:
1e:b5:50:f8:92:c8:e4:f8:ff:1a:5b:50:04:ed:c8:63:f2:a0:
ec:7f:a6:76:18:5c:4e:68:a1:a5:df:82:76:ea:21:78:ea:f6:
6b:c9:64:12:42:70:26:88:8f:8c:0a:e6:2e:44:cf:5e:c3:ef:
0b:af:d3:2b:a4:b7:e7:f1:53:15:5d:53:ad:1d:92:ab:45:dc:
da:37:e7:82:af:3f:67:e7:91:48:e2:39:ab:d2:9a:a5:20:6e:
2d:2c:f2:87:fa:c8:d8:eb:24:a5:d8:de:20:84:b8:93:57:44:
ce:ee:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:52:49 2025 by rpki-client