Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/CIXuWhhnc6MgONPqEd9LM6XCu3o.roa
File: CIXuWhhnc6MgONPqEd9LM6XCu3o.roa (raw, json)
Hash identifier: w/Hojop6Tp91g4P3LOd0SB3e2trANkjjwrF8Ewkpmok=
Subject key identifier: 08:85:EE:5A:18:67:73:A3:20:38:D3:EA:11:DF:4B:33:A5:C2:BB:7A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BF7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CIXuWhhnc6MgONPqEd9LM6XCu3o.roa
Signing time: Tue 14 Jan 2025 07:55:03 +0000
ROA not before: Tue 14 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 14 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0885EE5A186773A32038D3EA11DF4B33A5C2BB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:d0:13:60:4b:3e:dd:92:c5:7b:95:66:34:
30:95:b7:fb:0b:f9:ef:9e:f3:43:e3:89:44:ee:7b:
32:d6:f0:92:14:eb:84:ba:68:b0:c1:25:79:b3:37:
d0:a2:58:ea:84:0f:5a:78:70:f7:c9:74:3e:0d:42:
e2:06:c7:9c:4a:b3:25:72:6a:17:75:f3:42:13:ab:
84:91:02:6a:3d:5f:e5:2b:a5:43:b1:9e:17:32:81:
c6:90:ba:ef:56:7e:27:e7:96:e5:b3:d6:5b:63:4b:
36:3f:22:1b:b4:49:fd:8c:eb:b4:a9:47:1d:c6:61:
6c:3f:f1:65:1a:9e:17:bc:f4:e8:27:4a:55:98:32:
d4:8d:45:0c:22:2f:ed:5a:10:e6:2a:0c:e5:6c:3d:
10:33:c9:b2:84:cf:4d:bf:4e:bd:bc:82:fa:c0:e8:
a4:8e:83:30:c7:17:09:01:7a:6d:f2:3c:40:c3:8c:
8d:e6:1a:bf:a3:d7:ce:68:17:96:17:91:f1:81:59:
e3:5b:20:e8:3c:a2:d7:65:e4:c2:0a:fa:71:d4:2c:
e1:5a:91:4b:cc:fa:87:ef:80:a3:9d:f4:cf:61:ef:
5f:57:9a:6d:31:fe:2a:60:28:7d:f5:55:7b:cc:7f:
2a:88:ed:e4:5b:51:bc:ee:35:c1:90:c7:a6:5c:bf:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:85:EE:5A:18:67:73:A3:20:38:D3:EA:11:DF:4B:33:A5:C2:BB:7A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CIXuWhhnc6MgONPqEd9LM6XCu3o.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b1:ec:7c:5c:94:e0:43:b6:15:7f:42:38:79:1e:c5:33:e6:
d6:fd:01:4d:2a:96:72:2c:03:07:ff:57:8f:4e:1d:67:1f:05:
be:96:8d:af:43:5a:fa:88:ef:3f:c2:3f:3e:d4:1a:bf:88:2e:
82:4e:8e:74:18:39:bf:d0:7d:97:4f:19:61:9b:23:61:5c:9c:
da:84:bc:62:da:14:a2:64:4d:d7:f1:11:5b:0c:1b:ea:f5:cd:
7d:76:13:18:b9:61:a4:0e:f9:1d:fd:e4:9b:20:73:25:40:dd:
d8:20:0b:af:91:8c:c4:a2:f1:fd:a6:5a:e0:fe:4e:65:dc:de:
b9:77:7c:6b:a3:d8:2d:d8:30:91:17:c3:97:91:52:5b:64:f5:
a4:85:d3:a2:56:89:04:4d:d1:d3:32:32:c3:d7:98:11:ac:cd:
e9:29:1c:af:3f:5a:8c:ae:4a:15:0d:89:75:02:c4:03:3f:19:
1a:aa:4f:ab:27:1c:7a:79:16:46:09:0a:78:a3:b4:5c:47:a5:
6b:47:98:7a:80:bc:68:63:c6:4f:16:7c:40:4a:74:64:14:72:
85:fc:61:e3:dd:a0:6f:8d:f0:9e:80:6f:3c:30:57:4a:0f:e6:
14:03:22:b2:ee:75:42:f2:5d:4e:59:0b:f6:9b:59:fb:d3:d9:
7f:e1:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:09 2025 by rpki-client