Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Cj5DE2VXEsatq3ChHdBmdtOH9ko.roa
File: Cj5DE2VXEsatq3ChHdBmdtOH9ko.roa (raw, json)
Hash identifier: ZELrNuJivI1TKUeQURbgIYgPgwwPndZlbCT7JOazmFc=
Subject key identifier: 0A:3E:43:13:65:57:12:C6:AD:AB:70:A1:1D:D0:66:76:D3:87:F6:4A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BEE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Cj5DE2VXEsatq3ChHdBmdtOH9ko.roa
Signing time: Mon 13 Jan 2025 07:55:02 +0000
ROA not before: Mon 13 Jan 2025 07:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3054 (0xbee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 13 07:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0A3E4313655712C6ADAB70A11DD06676D387F64A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:12:77:cb:34:46:a4:1f:03:fe:43:8f:b4:
7f:07:4f:26:25:3f:8f:89:66:90:d3:65:ea:90:11:
04:20:69:ed:2e:3d:9f:2b:e8:01:96:de:16:1d:d1:
4d:01:1a:93:15:65:da:07:99:91:22:a4:2c:16:b8:
ef:e1:0f:3a:53:8c:c8:91:56:61:e4:a8:4c:cc:d8:
7a:31:1f:38:e2:1c:10:a6:db:ea:d0:5c:09:8a:7e:
f4:bd:f9:76:2a:75:e9:eb:e2:e5:69:ae:c9:c6:12:
ae:79:7a:45:27:6e:85:c4:9c:94:8d:f9:61:43:b8:
dd:4c:b7:0b:b2:1d:c0:06:e8:69:fe:fb:9f:03:f6:
99:7e:52:8f:07:d6:67:07:14:5f:9d:6d:5b:4c:3d:
02:ca:bf:59:f4:89:50:00:76:c6:fd:d8:04:34:99:
32:90:70:ca:9e:8b:d4:5c:e2:89:f4:23:15:75:f6:
5b:ff:b4:ab:d2:7a:f0:ac:61:21:6d:6d:3a:81:17:
42:b9:e6:0e:ea:8a:8b:62:5a:57:98:c4:14:25:86:
47:42:9a:b5:a0:df:fc:1d:99:6a:4e:42:1c:a0:ab:
e3:03:ef:bb:98:07:e9:65:84:74:74:54:93:e6:aa:
04:00:14:0c:77:76:06:50:12:63:65:27:1b:50:29:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:43:13:65:57:12:C6:AD:AB:70:A1:1D:D0:66:76:D3:87:F6:4A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Cj5DE2VXEsatq3ChHdBmdtOH9ko.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:be:96:60:fe:02:0d:82:5c:3a:b7:23:d4:9b:7f:08:c4:5d:
c4:ff:6e:ce:ef:06:97:f7:be:24:9d:85:f4:27:3b:92:09:8b:
a4:40:3e:76:f1:70:ad:9f:38:9a:09:b0:b7:68:33:7c:7b:74:
89:46:6c:ad:78:98:f1:ae:9d:93:2b:45:66:d0:ef:4c:0f:bf:
94:a7:41:ad:6b:cb:5c:91:4f:a1:a9:bf:5b:ad:92:c7:26:07:
af:ba:6b:1f:24:25:70:bd:ac:3a:c2:97:6d:7f:b8:b5:5e:a6:
32:db:97:d1:7f:c1:cf:8f:b8:26:c7:5b:a3:b5:ea:99:df:50:
79:ca:79:64:74:e0:b4:1b:64:82:ee:d2:e9:14:12:78:cd:92:
78:80:7e:9c:18:48:c7:c2:49:90:d5:6d:fb:a2:c3:65:2a:03:
1f:44:eb:76:09:e2:ff:0e:36:9b:0b:d0:55:07:24:e5:5b:41:
da:68:d2:de:f2:dd:97:e0:ee:48:37:01:42:df:fa:d0:a8:cd:
9f:0f:c2:7e:cc:e0:74:25:28:c7:a9:f8:6f:02:a1:b9:bc:ed:
2f:7c:cc:da:5e:f2:16:4e:b1:23:36:1b:1e:cc:67:7f:67:89:
52:8b:4e:07:9b:12:f0:f1:a0:ba:99:80:a7:84:e0:c9:ce:1d:
fe:b1:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:10 2025 by rpki-client