Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/DWfv737ZbZy1DI-mYDxbVpnso_4.roa
File: DWfv737ZbZy1DI-mYDxbVpnso_4.roa (raw, json)
Hash identifier: aItOyDpiPC1tsaaKz4UPLVpfIUGbqH0P6nLwN1LGM6c=
Subject key identifier: 0D:67:EF:EF:7E:D9:6D:9C:B5:0C:8F:A6:60:3C:5B:56:99:EC:A3:FE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B24
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DWfv737ZbZy1DI-mYDxbVpnso_4.roa
Signing time: Sat 21 Dec 2024 23:55:03 +0000
ROA not before: Sat 21 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 21 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0D67EFEF7ED96D9CB50C8FA6603C5B5699ECA3FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:2e:b8:6b:3f:c4:fd:aa:3b:ee:39:a2:5a:
5c:45:8b:49:25:15:34:b6:aa:8a:d8:97:af:fa:f7:
c3:9e:ab:21:31:90:6f:6a:cc:b2:81:64:61:eb:94:
36:15:be:58:e7:2e:85:60:9b:d3:a4:12:21:4b:ca:
8c:7c:31:9e:d6:be:c2:97:fb:b0:41:26:d9:7d:4e:
dd:b2:c9:74:ac:a7:1d:5f:90:45:e9:5f:a9:39:2b:
8f:ed:3b:26:70:8c:d8:9e:96:e6:e5:cf:f5:85:e7:
03:25:84:14:de:be:d2:9b:78:ec:f0:04:d6:ba:c7:
b2:7b:3c:b2:07:07:d6:da:7c:4a:83:58:1d:8e:79:
29:2c:32:a5:40:45:e5:ac:5f:79:57:16:c0:d7:cc:
aa:54:18:bd:37:ad:be:22:2d:54:9c:be:24:40:18:
74:d4:f6:d6:ca:e6:1d:c6:ce:bd:fc:7c:f3:4d:e1:
f3:fa:70:eb:d1:c8:92:46:31:04:88:33:31:a1:53:
61:c7:30:ff:09:7c:db:9c:24:44:30:c6:8a:c0:11:
fc:61:b7:5f:44:33:0b:89:44:98:01:ff:22:5e:9b:
03:ed:5d:4d:aa:a3:0b:42:c2:e3:41:65:2a:d3:16:
80:ea:08:2a:eb:34:e3:ea:cd:08:84:82:91:58:ec:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:EF:EF:7E:D9:6D:9C:B5:0C:8F:A6:60:3C:5B:56:99:EC:A3:FE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DWfv737ZbZy1DI-mYDxbVpnso_4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c7:0a:55:25:b9:6d:03:7c:a3:13:bb:93:3b:d2:7e:df:dd:
d4:be:e0:9c:3e:b4:2c:ba:05:38:7a:f2:8c:96:59:f2:12:b8:
68:d5:01:0a:4f:55:30:90:f6:16:eb:65:d7:c7:a7:fc:ba:fe:
3a:e2:fd:7a:85:44:aa:2f:9f:52:95:ae:b9:7c:f8:41:a4:04:
a1:fb:47:e9:35:46:c4:7d:7d:0e:54:bb:f8:4f:2e:ce:e1:b3:
50:ca:c0:c5:58:5a:01:f1:df:70:33:5d:c4:3f:b5:b9:93:dc:
30:b5:6c:ef:d5:38:c2:fd:9b:30:53:1b:d9:31:50:f0:04:8a:
66:c7:1a:9e:be:1b:76:0a:13:b9:8b:9b:06:55:0d:74:ec:c3:
e9:dd:b2:e3:68:74:c4:36:e7:fe:0c:71:d7:b6:7f:f7:11:38:
46:e9:c8:e7:4d:fa:a2:7b:7e:17:74:b8:75:7e:c8:64:9f:de:
b5:12:21:aa:75:3c:83:c4:be:ff:de:73:1b:8a:f9:22:76:3f:
1c:7c:53:c4:59:61:8b:c5:16:6d:96:71:a2:0b:5e:0e:8a:1c:
f1:cc:b5:4d:ac:09:14:2c:44:cc:d7:c4:e2:de:6d:60:65:c2:
81:ab:cc:63:57:9e:7b:6c:dd:ba:dd:29:05:79:f4:c0:29:7c:
b7:e0:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:22:44 2025 by rpki-client