Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa
File: EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa (raw, json)
Hash identifier: I8mLMnWeVQqFNcBeYKmEBsPEFYtwSAeFAVJtPX119y8=
Subject key identifier: 11:96:39:F6:95:6E:38:45:D4:A4:01:D7:3B:A3:9B:FF:64:BA:B3:66
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B66
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa
Signing time: Sun 29 Dec 2024 07:55:03 +0000
ROA not before: Sun 29 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2918 (0xb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 29 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=119639F6956E3845D4A401D73BA39BFF64BAB366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:5d:f3:e4:c6:ed:b0:90:54:df:9f:0e:5d:
59:86:c5:26:be:b4:b6:d1:e8:84:4b:ae:4b:97:93:
de:8d:dc:c6:2c:54:19:d0:c0:0e:41:1f:9b:c4:66:
7c:b1:27:4c:26:1f:f7:60:ea:15:b0:81:76:56:eb:
f6:7c:11:f7:f3:8f:ed:ef:45:85:3f:26:77:57:5c:
ae:07:3c:11:e3:c2:e3:1a:38:81:50:f6:0c:9f:13:
cc:25:d4:06:fc:6a:76:a0:7f:c9:9e:57:32:63:2c:
68:e0:c6:21:6b:c5:f8:83:09:85:73:bd:65:48:4d:
03:cd:db:d3:9a:16:90:70:e3:a4:d5:5c:eb:74:d1:
fd:75:73:df:bb:7f:1e:d1:ba:93:0b:ae:79:34:b4:
64:82:48:4d:b6:01:f4:29:6e:bc:43:5d:8b:90:de:
31:79:fc:9b:16:06:76:5b:2b:67:de:6c:8a:fd:4e:
ea:63:ec:11:09:8e:ac:ea:ec:74:8a:27:02:fe:77:
96:4f:c5:4f:18:69:25:5d:5c:a7:f5:1d:c3:7b:71:
c3:b8:63:69:79:83:73:c2:51:b6:da:6a:b7:d2:69:
1d:94:59:1b:c9:53:73:58:cd:3d:94:9a:2a:16:52:
18:83:b1:75:9b:5d:00:10:9b:b0:92:08:4a:7e:a0:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:39:F6:95:6E:38:45:D4:A4:01:D7:3B:A3:9B:FF:64:BA:B3:66
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2e:6e:4c:e7:f0:e0:dc:48:58:cf:c6:a6:bd:75:cc:cc:bb:
16:80:20:ce:5f:2d:e5:ae:72:f4:b5:49:8b:0f:47:dd:23:49:
99:9f:62:16:45:a1:af:c8:d9:0b:76:2b:35:b1:90:dd:85:92:
18:8b:84:f5:8d:35:e3:57:90:a3:8a:a8:4b:09:d4:e0:ee:04:
21:5d:e4:a9:03:c2:41:90:80:bd:dd:1a:53:10:61:5f:cf:a3:
3d:ec:c9:92:11:10:6d:8d:d3:a8:34:9e:74:19:e4:c2:96:e7:
64:a8:82:cb:4b:1b:b9:4a:ba:21:ec:f5:d6:6c:f6:b1:c1:1b:
6d:80:d8:1a:ab:76:9a:cc:96:ed:53:dc:d4:00:b6:e3:e9:d7:
69:50:e1:99:a7:6c:78:b3:93:e7:53:2d:27:52:61:dc:c7:57:
5f:9c:7b:ef:03:10:ad:47:c8:31:e4:bb:ae:3a:6a:82:9a:f0:
79:0c:b9:22:1c:a3:22:36:48:9b:2c:1c:fb:6c:04:83:7a:68:
92:7d:29:56:a3:8a:1d:7a:42:5a:6e:57:75:93:4c:0c:f2:22:
a9:b0:d8:d2:bb:ae:aa:19:f4:04:e1:d3:12:21:e9:6a:5d:a9:
ff:fa:75:cc:7a:f7:63:c5:bf:69:cc:72:29:97:7b:6d:5f:23:
98:bf:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:53:19 2025 by rpki-client