Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/DhLPiXcAE1xgO2tMcZBYPQfr8_A.roa
File: DhLPiXcAE1xgO2tMcZBYPQfr8_A.roa (raw, json)
Hash identifier: R917C+k3hFqsZ5dykKsoCLetrUOCm3Gf+vPn/8GIZJs=
Subject key identifier: 0E:12:CF:89:77:00:13:5C:60:3B:6B:4C:71:90:58:3D:07:EB:F3:F0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C18
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DhLPiXcAE1xgO2tMcZBYPQfr8_A.roa
Signing time: Fri 17 Jan 2025 23:55:03 +0000
ROA not before: Fri 17 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 17 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0E12CF897700135C603B6B4C7190583D07EBF3F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:3d:8b:f7:63:7d:ac:36:1b:d1:7b:21:2b:
69:b7:55:f7:0a:1c:fc:e7:99:51:df:ec:d5:2a:89:
9c:53:f4:bf:49:de:f4:13:47:ca:a1:1c:57:91:a9:
63:0e:0d:14:10:35:09:57:18:90:2a:d7:44:33:ad:
a3:e4:ab:9f:a6:e3:4a:16:6f:fb:f3:58:72:20:93:
07:a0:ac:83:a0:c4:34:b1:0c:57:55:e4:fc:ca:31:
70:a1:9d:b1:90:97:7a:4a:ae:9e:7b:96:76:43:99:
6f:05:af:bf:eb:9c:2e:df:a2:b7:53:ff:5a:6b:d9:
1e:4e:8e:cd:af:6c:ca:b8:56:a5:08:fe:ac:5b:ad:
92:e1:3f:57:7c:f2:1e:ae:c0:ea:e0:e3:46:c8:90:
ab:bf:ce:52:86:ad:a2:e9:59:2c:4a:94:27:9f:ec:
60:e4:7c:d1:ce:b4:e7:de:ac:d6:5d:f8:f1:b4:a2:
b1:bc:7b:74:e4:7e:a2:f1:83:5e:31:d0:3e:0f:d4:
7f:73:27:28:ca:a6:82:99:d9:02:fa:8c:29:b2:c3:
5c:8f:7b:3a:b3:eb:61:55:61:f7:cc:c1:31:bc:19:
fd:4a:db:95:b2:33:77:ef:11:51:64:fa:ed:82:ca:
ef:49:88:02:1b:7d:84:65:ee:3c:e3:f8:b5:07:c2:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:CF:89:77:00:13:5C:60:3B:6B:4C:71:90:58:3D:07:EB:F3:F0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DhLPiXcAE1xgO2tMcZBYPQfr8_A.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9d:cf:4e:a4:63:f9:70:87:5d:e7:13:c4:92:bd:f1:a2:e7:
73:7d:e7:2f:47:53:ba:18:04:cb:e3:69:63:e3:e3:b1:c4:86:
cf:33:25:0e:2e:a5:79:fc:05:6a:fc:72:f2:66:f9:cb:ad:9d:
ae:18:5d:e5:e5:e6:13:34:21:0f:34:0c:e1:cc:8d:25:58:85:
42:59:0c:fa:f7:44:36:cd:8a:ff:8c:7a:b8:a7:c8:68:06:1b:
c1:cb:64:07:99:a5:61:7b:c1:96:a0:c0:f8:4e:da:14:65:14:
5f:26:75:02:42:e6:bf:22:2a:ef:77:1b:58:12:3e:78:ab:45:
9e:bd:a4:fb:73:64:f7:66:6a:d8:92:8f:40:c2:91:76:f2:c3:
20:8d:5d:a3:5a:ef:2e:e0:b4:6a:68:f0:0e:43:82:3f:86:d4:
b9:dc:4f:fd:15:51:ca:a2:17:9e:7a:40:de:76:57:95:7b:f9:
a6:12:dd:12:cb:87:92:c3:67:1e:ae:41:ad:39:58:3f:55:32:
eb:e1:2c:5b:5d:07:bf:bd:13:00:e4:57:1c:f9:7e:20:d9:1b:
ea:61:ba:f3:8f:4d:07:8a:22:2f:e6:bf:4f:66:46:04:ae:a1:
90:23:c2:b9:07:38:37:fc:b3:3a:3f:12:45:ad:7f:8c:c2:d4:
61:4c:c6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:00:04 2025 by rpki-client