Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/DpoIcOoVoAWgv5gGwLPRj_uZdXo.roa
File: DpoIcOoVoAWgv5gGwLPRj_uZdXo.roa (raw, json)
Hash identifier: 9bXYEJz2RGcK4NY+MjK5K38BnK39KVThPJxsTUj0kz0=
Subject key identifier: 0E:9A:08:70:EA:15:A0:05:A0:BF:98:06:C0:B3:D1:8F:FB:99:75:7A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C3F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DpoIcOoVoAWgv5gGwLPRj_uZdXo.roa
Signing time: Wed 22 Jan 2025 07:55:03 +0000
ROA not before: Wed 22 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3135 (0xc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 22 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0E9A0870EA15A005A0BF9806C0B3D18FFB99757A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:6d:7e:83:ce:56:11:01:72:e1:ff:59:48:
9e:7c:89:8e:b4:99:65:b5:ba:10:a5:87:99:d8:78:
42:98:0e:f8:32:9c:38:d8:5b:5f:92:e0:56:3b:38:
fe:20:30:68:86:12:fd:6a:5c:f5:78:b2:01:f2:f5:
95:62:47:d7:bd:80:26:b1:22:4e:b1:75:6b:5b:26:
ac:be:be:63:02:35:b3:68:06:0b:53:9f:a3:81:07:
0c:08:5d:e2:0f:3f:3b:46:e9:61:40:99:1f:68:0e:
81:02:f1:8b:1f:02:a0:40:96:e3:f2:d8:4f:5b:11:
d0:4d:53:ca:6e:82:b0:0c:4e:dd:7e:43:69:6a:49:
56:b2:3f:23:01:4e:70:40:66:4e:a5:1c:ca:c1:87:
12:82:23:f5:ae:36:1f:92:d5:9e:37:54:9e:8e:f2:
b0:a0:49:2e:af:fb:8e:e1:d1:8e:a9:54:a1:0b:e4:
2d:3a:24:85:c5:09:c8:eb:37:bf:00:01:f9:a3:a3:
79:47:87:fa:b8:0d:6d:f8:ed:ce:43:21:5e:be:95:
73:5d:0a:95:35:b2:eb:0e:59:0a:96:98:f7:9b:0c:
82:6f:8c:80:b5:8d:ba:97:f8:26:cf:ce:66:e1:c2:
dd:f7:06:2a:06:d1:25:bf:47:fc:12:24:1a:3a:37:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:08:70:EA:15:A0:05:A0:BF:98:06:C0:B3:D1:8F:FB:99:75:7A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/DpoIcOoVoAWgv5gGwLPRj_uZdXo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f8:d2:97:3e:14:96:c0:98:22:a4:9b:5e:0b:9e:2b:29:1c:
45:d2:a9:d4:db:4e:3b:37:8a:5e:10:c3:4e:1d:fb:4b:59:2c:
96:98:85:91:89:fe:3e:c5:fc:de:9f:6b:a2:4f:f4:17:05:a9:
89:37:eb:71:28:bd:69:0e:02:a1:c5:bc:93:65:24:bb:73:b4:
98:63:7a:11:cd:0d:24:b8:b2:e6:b7:ae:f1:fe:d0:40:fc:ab:
ba:91:04:2e:32:69:ee:78:a2:73:7c:e6:db:23:c2:3a:31:87:
43:79:89:db:51:74:34:bd:ed:57:07:50:36:4d:d2:16:32:a0:
97:f7:a7:a1:de:50:a4:f8:69:82:b0:38:7c:b8:dc:2d:67:9a:
4c:e4:73:65:42:33:be:f8:e0:79:f9:f6:73:a8:4a:9a:6c:71:
29:04:1a:5a:07:eb:9f:c2:34:86:f1:e4:ed:99:a0:9d:87:f4:
fc:42:b7:3d:ca:13:53:40:93:b6:d6:f4:da:88:4e:0a:9d:e6:
de:1f:57:f8:f0:17:52:5e:a4:b6:ce:b0:18:f4:11:1e:61:81:
52:e8:6a:81:80:f2:7e:53:9d:dd:20:8a:3d:67:ce:78:c0:84:
4b:7b:9c:4f:13:2f:dc:2f:53:23:f9:2b:46:e8:36:b8:ac:6e:
38:96:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:44:28 2025 by rpki-client