Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/CSUn7-FACvrPGwoZqoxYN1ryQv0.roa
File: CSUn7-FACvrPGwoZqoxYN1ryQv0.roa (raw, json)
Hash identifier: lTgs2U3fLpL7sCArmr0ezhE9RrrI2xnWHfvt1UHbTho=
Subject key identifier: 09:25:27:EF:E1:40:0A:FA:CF:1B:0A:19:AA:8C:58:37:5A:F2:42:FD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B33
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CSUn7-FACvrPGwoZqoxYN1ryQv0.roa
Signing time: Mon 23 Dec 2024 15:55:03 +0000
ROA not before: Mon 23 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 23 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=092527EFE1400AFACF1B0A19AA8C58375AF242FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:42:f4:57:bc:78:9e:71:3d:85:11:85:0a:
02:63:03:87:f7:53:1f:85:23:4e:17:cf:1b:0f:5f:
2d:53:3f:78:34:9e:02:b2:5a:0f:2e:8a:31:f3:f7:
46:34:86:07:75:47:e4:95:b9:bb:74:87:54:8e:92:
66:50:b0:20:ca:fb:f3:73:df:eb:e1:72:f5:c3:40:
b7:fb:aa:0f:3d:fe:9b:da:4a:ad:48:bf:d6:3a:c7:
b1:d2:53:e8:af:91:73:a5:11:e5:a6:5c:29:35:00:
8b:9d:00:37:6f:4a:9d:5a:0f:4d:ce:32:3c:5c:97:
d5:60:2b:fc:6e:9f:20:87:67:46:4c:9e:8b:5e:f9:
4a:7e:cc:95:e9:d6:51:59:69:07:2d:41:22:9c:fd:
af:5b:43:f3:6e:72:82:f3:0c:ae:3e:27:8c:3b:c2:
41:23:3c:0e:e5:1b:7c:66:db:f0:dd:50:bd:f4:5a:
72:a1:60:79:e3:20:e8:73:34:c1:b4:e0:21:a4:fe:
45:fc:c9:12:46:7c:ef:5b:d8:81:4f:39:7e:c4:0d:
fe:e3:65:f9:28:dc:08:be:4c:88:29:60:31:01:ca:
8a:ff:76:84:2c:37:0c:fb:90:33:2d:e7:c9:c8:5c:
ce:3e:5c:1c:a5:96:5a:c5:60:20:c2:2f:fa:35:2a:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:25:27:EF:E1:40:0A:FA:CF:1B:0A:19:AA:8C:58:37:5A:F2:42:FD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CSUn7-FACvrPGwoZqoxYN1ryQv0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8e:d5:e0:cf:36:d5:2a:2e:2b:85:77:e4:77:4b:3b:c8:10:
e2:0f:d1:bd:c9:fa:78:0e:1a:f5:db:d0:c9:bc:f2:37:fc:ea:
45:a1:85:2d:6d:9f:9a:f2:46:ce:da:8d:22:66:32:44:55:f2:
06:60:14:0a:83:5d:2d:a5:07:14:01:15:81:c3:db:e8:86:7a:
4c:10:ac:7f:9c:9f:16:e7:df:ce:b7:3e:64:80:50:12:a3:39:
27:06:1d:2a:da:c3:e5:e2:4f:3f:18:b4:04:a3:c3:8e:96:51:
2f:0a:4e:d8:b0:bb:16:d8:7e:7b:31:9a:44:41:52:93:03:00:
9c:a4:2d:1e:98:e2:45:d5:ee:d6:fe:22:10:54:03:71:ce:85:
27:51:f0:78:51:09:a6:d6:f3:b1:31:da:84:c4:b1:6c:31:b4:
55:ba:46:09:85:3b:7a:71:29:07:33:55:75:a3:84:3f:70:c4:
77:fd:e8:21:f6:cb:ba:dc:f2:c4:cd:f7:6c:13:71:bd:75:2c:
37:dc:22:03:17:8e:82:17:59:45:f8:3b:72:ad:7d:4e:a7:5e:
ce:7a:88:6d:dc:7d:90:18:76:f7:6a:3a:ef:18:7a:b3:ae:28:
f2:c0:58:c3:ef:c3:e1:fb:d5:be:78:50:8f:00:b8:3f:a8:1c:
72:c8:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:09 2025 by rpki-client