Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/DmQmVKh_0n_65FRGINMN77pbqWk.roa
File: DmQmVKh_0n_65FRGINMN77pbqWk.roa (raw, json)
Hash identifier: jpC4K5WFX1Ugc1KFfYy+VC5w3UGiEjZ9Nk91Eb15JgI=
Subject key identifier: 0E:64:26:54:A8:7F:D2:7F:FA:E4:54:46:20:D3:0D:EF:BA:5B:A9:69
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BDC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DmQmVKh_0n_65FRGINMN77pbqWk.roa
Signing time: Sat 11 Jan 2025 07:55:03 +0000
ROA not before: Sat 11 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 11 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0E642654A87FD27FFAE4544620D30DEFBA5BA969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:48:d9:29:8a:ad:11:79:6c:e7:01:ba:d9:
c4:f9:3f:ad:92:0f:ea:19:a4:05:0e:8f:c7:1c:78:
f0:b6:32:70:55:5b:ed:2c:77:2c:7c:62:33:50:0d:
94:47:7f:df:ad:d1:fe:81:18:4d:40:44:4d:4e:b2:
7d:fb:54:19:08:64:61:42:c6:3b:46:45:75:99:f6:
0c:95:6d:90:2b:9d:76:c4:e8:b9:1f:e9:c8:42:aa:
ac:71:35:3b:ac:75:0e:f9:34:73:c9:72:c9:c2:12:
b5:fd:d2:04:3c:9e:57:87:1e:be:e0:3f:5b:e0:15:
b7:6c:7f:5e:85:67:1e:85:c5:07:66:28:89:80:40:
55:1c:2a:37:5a:3e:45:10:78:87:8c:a3:40:59:81:
25:2a:b3:50:f8:1e:05:cf:5f:11:d4:42:2b:48:95:
06:f0:91:df:d0:41:0d:0e:5c:f5:13:cf:16:e4:57:
d9:f4:4f:47:a7:3e:96:04:b2:25:0c:89:31:aa:89:
51:e7:c8:23:1c:1a:19:27:b5:76:7d:a3:ce:ec:0b:
be:1b:33:af:88:8a:f4:99:93:90:ab:3c:74:0a:05:
fe:56:61:f1:86:8e:05:08:89:96:54:66:ea:91:cc:
b1:5d:c4:98:3c:59:1d:9b:83:11:79:98:3f:46:b7:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:26:54:A8:7F:D2:7F:FA:E4:54:46:20:D3:0D:EF:BA:5B:A9:69
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DmQmVKh_0n_65FRGINMN77pbqWk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e2:9d:6a:77:62:a9:51:ef:a9:f1:62:cc:83:0c:0a:14:af:
09:54:97:af:3e:16:b5:d2:d9:c6:98:f6:f7:60:86:1f:0f:96:
e7:31:4d:bc:c7:79:aa:ea:dd:71:8b:26:be:3a:2e:63:5e:22:
aa:b8:b0:68:bc:0b:b3:08:15:ec:1c:3a:d9:8c:ee:48:b2:e0:
70:cb:10:6b:b5:4e:f3:02:2d:9d:5e:ce:87:40:06:80:f9:16:
f7:e1:6e:d0:26:b2:ff:ac:83:2b:ce:50:5e:50:a4:00:55:e2:
5c:90:f8:6b:a3:29:b7:cb:14:ab:bf:f4:11:d4:13:71:ed:1b:
f3:45:e8:9c:07:c8:e4:05:48:5d:9e:5d:85:ea:b1:e2:6c:1f:
12:18:7e:c2:43:ac:f4:0a:b1:ab:0f:ee:13:fc:15:ea:cd:9f:
36:e9:89:2e:72:bf:cf:a2:f3:fa:bc:42:31:2a:9c:a6:10:10:
a5:b4:0e:a2:4b:a7:3c:50:74:a7:3b:8a:76:48:b6:e4:b6:da:
58:89:25:09:04:18:0b:d4:b1:85:5d:da:a0:01:15:bc:fe:f6:
b9:30:ca:b3:d8:30:8c:74:85:9f:5e:86:83:0b:9c:95:59:6b:
f9:16:fc:6e:b7:79:88:be:6e:c0:c0:07:0f:ec:4a:4d:cb:d7:
6c:24:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:47:20 2025 by rpki-client