Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa
File: EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa (raw, json)
Hash identifier: Fp0tEiDLZ8D+49+JjKP90XTxEXok9yNM5hK/oFDUifQ=
Subject key identifier: 11:63:77:5A:20:E0:75:18:3B:60:74:07:84:61:91:94:14:71:EC:5A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C15
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa
Signing time: Fri 17 Jan 2025 15:55:03 +0000
ROA not before: Fri 17 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 17 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1163775A20E075183B607407846191941471EC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:c8:ce:30:e9:ef:91:7a:75:75:b1:e3:bc:
00:33:e6:0d:43:0e:2f:c4:06:40:c4:88:fe:1a:ec:
ff:f4:75:0e:74:9f:c7:f5:13:ea:7a:bf:98:09:ea:
61:43:b0:c0:9b:3a:14:ec:d3:0c:17:b8:f8:e0:12:
6f:eb:71:54:34:81:a3:7d:d7:e1:f9:24:3e:04:ba:
24:f7:22:23:f1:e4:f2:88:5a:04:4f:f2:95:9b:61:
da:7c:ec:ee:68:26:f6:2a:b9:78:30:67:d0:0f:ec:
60:e5:b1:25:b9:0f:8c:30:7d:2b:dd:3e:d0:e4:38:
ac:13:2e:55:1a:85:d3:a0:c6:64:35:cf:98:a8:19:
8a:2a:c4:91:11:5d:b3:75:28:8c:5a:f8:42:da:07:
49:26:25:e9:95:f4:d8:c9:e6:c5:af:8a:05:de:52:
1d:85:9c:0e:ca:99:13:5f:39:39:a3:03:53:a3:85:
1a:6a:5c:3c:f8:19:2f:79:19:0a:5a:d0:86:dd:25:
49:8a:2a:ad:b1:10:fd:8c:a0:23:27:de:f3:6d:2c:
3e:84:6f:c0:24:2f:bb:ad:9b:0f:94:62:41:ca:51:
f4:11:97:b8:aa:d4:64:c2:a9:aa:96:d2:84:22:ed:
00:66:72:b7:06:01:b6:12:58:0c:73:8d:36:da:9c:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:77:5A:20:E0:75:18:3B:60:74:07:84:61:91:94:14:71:EC:5A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d1:4a:1d:fc:19:bc:c5:be:75:33:f8:09:3f:bf:e5:40:c3:
a7:11:8c:d1:c7:dd:ff:f9:eb:2a:70:ea:17:21:9a:b9:82:ce:
f8:bf:af:36:53:bc:50:e9:17:fa:d7:f5:21:57:a1:b7:d6:8d:
8c:2f:63:15:27:86:6d:62:b9:18:12:98:d9:e9:a1:88:48:71:
1b:02:a6:3b:90:a3:f4:ca:81:9b:c3:20:a6:89:bb:bb:cc:57:
d1:06:43:ef:ef:4f:34:06:50:3b:6b:7c:ec:e3:74:c7:e1:46:
88:66:e5:87:d6:a7:94:7c:0e:be:85:0a:10:90:ee:c4:0f:07:
d3:e3:b5:1d:bd:63:39:a4:ec:fd:fa:fe:2b:06:ed:1d:62:40:
51:a0:23:d8:1a:45:9b:3e:3f:dc:c1:71:b0:0b:04:52:4c:28:
76:bf:a1:7d:9b:ad:9c:54:45:25:62:22:4e:1a:59:c1:7d:27:
4b:7a:55:c3:65:99:6d:09:f1:0e:57:93:38:1b:8b:ba:29:da:
6f:f5:d2:6e:ee:a7:0d:98:9c:4e:39:dc:fa:3f:30:a8:3d:22:
a2:5d:e4:d9:80:97:f9:d1:4a:ea:ca:fb:73:ee:6d:f4:10:7c:
d6:ff:70:ea:78:eb:2a:2b:11:f6:97:e3:f0:6d:78:6b:cd:4d:
1f:27:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:44:25 2025 by rpki-client