Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/DRJctva3CJ4JOcQotgWHwHm9KzQ.roa
File: DRJctva3CJ4JOcQotgWHwHm9KzQ.roa (raw, json)
Hash identifier: sTLtoTpiwH7Q2ZhEEKPEuVIKURakYl2tXk7nXwqH1y4=
Subject key identifier: 0D:12:5C:B6:F6:B7:08:9E:09:39:C4:28:B6:05:87:C0:79:BD:2B:34
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B72
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DRJctva3CJ4JOcQotgWHwHm9KzQ.roa
Signing time: Mon 30 Dec 2024 15:55:03 +0000
ROA not before: Mon 30 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 30 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0D125CB6F6B7089E0939C428B60587C079BD2B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:45:8d:56:d4:ef:df:38:fe:83:54:7d:46:
06:80:32:48:7a:ab:4e:f1:53:25:ce:63:6a:f3:b6:
57:84:5f:26:aa:90:78:2a:bd:7c:8c:36:fb:8a:21:
8f:fd:05:c4:97:fb:84:eb:cc:5e:15:4b:48:33:b2:
69:84:37:1d:40:ad:b1:b8:8a:9a:d4:ee:6b:c6:15:
e9:57:0f:4c:d4:26:bc:1a:b2:d7:a9:52:62:86:53:
66:2c:e8:78:58:b5:12:ec:f5:b6:de:d7:80:39:d8:
d3:2d:4a:a0:27:bf:67:8a:83:78:12:3f:3a:10:8a:
33:af:f2:58:2d:d5:4d:02:90:5c:ef:9c:53:41:02:
ca:db:f5:cd:ad:5a:59:39:23:62:5b:e8:fb:96:bc:
54:07:f8:63:b6:fd:e8:f0:aa:2c:2e:ab:d3:9a:33:
46:27:b4:b2:e9:3e:c2:df:2c:98:84:05:21:bc:05:
83:81:ef:d6:0f:7e:70:07:86:50:06:05:37:32:a8:
cc:17:94:38:52:78:7e:cf:6e:9b:2d:8e:29:4f:f2:
65:86:ca:ba:09:bc:a0:23:81:ce:34:98:4b:55:75:
c3:ee:a8:51:31:cd:56:f9:ef:dd:7b:81:69:c2:f4:
6d:3b:e7:71:eb:45:e6:29:f5:e3:98:13:ba:84:1a:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:5C:B6:F6:B7:08:9E:09:39:C4:28:B6:05:87:C0:79:BD:2B:34
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DRJctva3CJ4JOcQotgWHwHm9KzQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:09:b8:b0:ed:fb:4c:e2:8a:97:3b:f8:ed:ad:74:89:bf:d7:
90:8b:7e:3c:56:44:a3:14:2e:03:e3:cc:79:02:a5:2a:35:f1:
63:73:99:19:4d:12:ef:ee:90:c8:04:82:4d:bb:bf:db:16:69:
db:94:31:a6:2c:10:9c:98:9d:91:48:7e:73:7d:32:2b:5b:62:
41:ce:c8:33:54:9a:27:c4:62:42:ce:54:4e:ac:a9:6b:2e:d2:
47:15:ee:5f:fb:46:ae:d1:f9:8e:7a:42:b7:78:5c:63:65:2f:
7c:79:0a:ab:b5:ef:cb:b9:af:37:99:b8:8e:12:69:21:25:12:
e9:8f:48:67:2b:f5:99:c7:ea:a1:4a:48:d6:1f:80:29:9a:3b:
98:10:42:57:07:bb:a5:f3:ed:e5:c1:40:6b:3c:89:ae:86:0e:
76:92:33:77:f1:ea:37:68:ad:f3:2c:1a:6b:ac:a1:af:ea:e8:
c1:c6:2b:16:9f:50:3e:96:b0:47:09:e2:43:f6:52:49:1b:7d:
71:21:84:33:63:6e:f3:bf:0b:55:dc:a8:8c:ff:e0:f8:0e:ff:
99:0b:b9:ab:c0:51:7d:d5:95:e4:17:55:6a:fa:72:45:f8:0a:
04:45:f5:16:f2:9a:70:c1:37:58:be:e9:c9:a7:51:1b:4d:bb:
65:74:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:30:16 2025 by rpki-client