Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/BzvkKx2K0HDCEzx84L27JwT74ZY.roa
File: BzvkKx2K0HDCEzx84L27JwT74ZY.roa (raw, json)
Hash identifier: 3QKvwjZ9cfo2yJAtvJsgF7MATIHdJjR0ekRhDezvdSk=
Subject key identifier: 07:3B:E4:2B:1D:8A:D0:70:C2:13:3C:7C:E0:BD:BB:27:04:FB:E1:96
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AF7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/BzvkKx2K0HDCEzx84L27JwT74ZY.roa
Signing time: Mon 16 Dec 2024 23:55:03 +0000
ROA not before: Mon 16 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2807 (0xaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 16 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=073BE42B1D8AD070C2133C7CE0BDBB2704FBE196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:fb:cb:21:7b:31:c0:f1:c8:51:c3:ee:84:
32:69:f6:9b:09:54:93:ed:87:49:a0:98:12:54:20:
4e:c8:60:44:b8:2a:62:13:6d:de:26:85:2d:f7:f9:
1d:79:dc:cb:7b:0d:9e:2b:4f:e6:9d:36:fe:b8:31:
e9:b5:f8:66:c0:a0:9e:df:3b:47:6c:8d:1d:2f:06:
01:f2:75:eb:83:6d:ea:08:8a:3f:f6:5f:2e:04:b3:
d8:af:4c:8c:9a:be:f8:d4:3c:f7:6d:89:4e:11:7b:
01:a7:71:a9:6a:fd:b3:9e:0d:c9:03:46:88:0e:00:
19:99:30:f7:1b:e6:d6:98:6c:28:9a:ab:01:e1:22:
b2:7e:fe:18:72:76:f1:12:3b:40:45:bb:79:92:20:
ae:27:ca:a3:13:2f:ba:da:dc:6d:2f:30:ea:37:f5:
a1:2a:fe:0a:c4:c7:23:e4:5e:2d:d5:ec:6f:50:17:
de:e4:4a:ad:5e:bd:e9:5d:d1:dc:b2:a4:00:a1:9b:
21:06:64:40:f3:18:be:4a:40:ce:e2:2e:a9:21:12:
d5:97:f1:00:58:27:1b:44:1a:43:8e:8a:2f:54:99:
c0:f2:65:01:2b:be:2c:d8:fa:ed:6e:2d:72:78:5a:
93:44:a5:01:9c:81:9c:15:f8:9d:98:ac:2d:25:84:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:E4:2B:1D:8A:D0:70:C2:13:3C:7C:E0:BD:BB:27:04:FB:E1:96
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/BzvkKx2K0HDCEzx84L27JwT74ZY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
83:65:a9:03:54:98:48:49:f7:a3:a5:1d:ae:09:85:69:f1:c9:
41:59:50:e2:00:51:9e:ee:b5:5b:ed:6d:d7:dc:57:e7:b5:21:
6e:9e:f4:fd:53:4a:c0:83:16:bc:f9:2d:d4:bd:89:a8:d7:79:
40:67:76:07:a4:07:85:3f:be:79:b4:82:5a:9b:b5:9e:da:1b:
52:a2:83:a2:74:8f:b9:59:a9:d0:37:55:d0:26:e5:05:4d:16:
0c:d0:f3:57:d9:af:d3:ec:42:60:f8:07:98:d3:07:9f:3e:ea:
db:81:7b:83:68:9f:b5:69:57:22:0b:27:fa:84:9b:c9:08:25:
92:4c:d0:7e:7a:1d:6c:de:79:55:69:e6:64:c6:0f:c9:9e:85:
50:c7:97:2d:e5:b7:fe:a9:7d:4f:78:0f:76:b8:1f:5e:fb:7a:
bc:45:9a:33:41:4a:6e:30:6a:85:23:8d:ae:f9:54:40:c0:f5:
bd:72:1b:30:a8:1f:44:ea:20:8e:cf:5c:51:52:02:80:e9:55:
26:a3:6f:31:a2:8a:6d:74:45:9e:1b:f3:f2:3c:84:92:d2:90:
0f:af:d1:5b:78:27:30:f9:60:cb:f1:f3:9c:1a:e6:12:cb:7a:
bf:7e:7b:26:61:55:b6:5f:b7:48:39:62:1c:4d:01:c7:f9:9d:
2d:d9:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:13:34 2025 by rpki-client