Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Egd9NTlYOJf5tzBsAYUoIHcxEmM.roa
File: Egd9NTlYOJf5tzBsAYUoIHcxEmM.roa (raw, json)
Hash identifier: jR32O8P9puVqUAG8gtMwpIOZcjoLOMxPpdTosnMPeIg=
Subject key identifier: 12:07:7D:35:39:58:38:97:F9:B7:30:6C:01:85:28:20:77:31:12:63
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0ACD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Egd9NTlYOJf5tzBsAYUoIHcxEmM.roa
Signing time: Thu 12 Dec 2024 07:55:02 +0000
ROA not before: Thu 12 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2765 (0xacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 12 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12077D3539583897F9B7306C0185282077311263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:10:e1:22:af:89:1d:63:8f:84:f6:1d:bc:48:
c0:7d:0c:45:31:b1:eb:61:43:37:e2:ec:f8:71:44:
19:e0:0d:be:45:83:15:e5:40:0a:9e:10:a8:17:6d:
27:da:71:ec:9d:22:fa:0a:e8:b5:83:9b:ca:28:81:
9b:d3:ea:1c:ab:b4:bb:18:99:34:f8:cf:ec:1a:cc:
29:63:7a:2a:79:55:14:2d:e6:f1:72:00:8e:0a:45:
0c:e3:c3:99:77:2c:3b:9c:11:53:ae:03:58:b4:32:
ef:54:3e:f4:41:48:25:ae:24:a2:c4:6c:a9:b6:a3:
e6:11:6c:d0:b2:d7:94:61:80:6b:a9:ca:40:b5:34:
91:24:20:97:40:cf:18:cd:88:7f:ea:1a:8e:23:b7:
94:43:f8:72:af:58:21:2d:31:27:93:d4:0b:ed:4c:
59:d3:78:9c:ce:52:14:ca:cb:a6:60:cc:3a:ef:93:
e5:c2:18:d7:e0:32:58:29:b4:30:96:58:f3:6d:c2:
bf:b0:8c:66:35:07:e4:ae:23:8d:1a:88:4a:5c:a5:
fc:0d:a1:90:99:82:ed:18:b3:f0:2e:bb:ea:44:9e:
ac:47:b4:f4:a5:88:e6:f0:7f:c3:55:26:c2:6b:ec:
a6:08:64:30:ec:fc:7b:37:3d:68:ff:a7:ad:e2:8b:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:7D:35:39:58:38:97:F9:B7:30:6C:01:85:28:20:77:31:12:63
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Egd9NTlYOJf5tzBsAYUoIHcxEmM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:82:70:2d:30:2b:e6:4f:78:3c:04:d0:53:93:aa:9f:a6:49:
ba:04:2e:59:ab:ac:89:8b:c9:77:f8:0d:bf:dd:92:75:5c:a5:
a1:6c:61:c5:f1:21:7f:8f:03:06:cd:d5:10:ba:60:0b:47:65:
97:b9:d4:09:42:00:94:ba:2d:e4:97:eb:92:87:bc:26:5e:83:
0a:c2:79:1b:18:0e:d0:8e:28:f8:2a:04:79:2b:f7:6a:ae:99:
2c:f8:c7:7d:e6:79:33:9c:65:7b:a0:37:6a:e0:08:59:19:a5:
94:6f:28:af:d9:e4:5f:84:cc:f5:cc:22:ac:e2:cd:9c:db:4f:
fa:96:f7:23:c7:6d:46:b9:83:44:20:1b:d3:12:87:3e:17:7a:
34:3a:f4:34:29:cb:39:6d:e3:b9:1c:23:a0:3a:8d:97:19:68:
48:fe:cf:0a:77:e4:2e:76:b7:14:c0:b0:14:5f:7d:77:ee:60:
0a:1c:67:84:6d:82:45:e5:b8:f0:d1:aa:71:d5:c8:d2:b1:9c:
3a:1b:d2:33:85:67:9d:7f:a5:d7:50:8d:45:7a:1f:f7:f9:7d:
4e:70:d7:7f:59:9c:24:07:b8:34:f8:b7:dd:b4:41:47:5a:79:
ed:8e:6c:99:70:77:fb:49:54:b3:54:64:61:24:63:f8:9f:9c:
6c:42:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:14:04 2025 by rpki-client