Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/FgD2z7RO0yp4UFoyZGFMD42h0is.roa
File: FgD2z7RO0yp4UFoyZGFMD42h0is.roa (raw, json)
Hash identifier: axX4vqp/TgP/pR1o0PVkE57rXcvfS85bUkIgzHiYFIo=
Subject key identifier: 16:00:F6:CF:B4:4E:D3:2A:78:50:5A:32:64:61:4C:0F:8D:A1:D2:2B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02DA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/FgD2z7RO0yp4UFoyZGFMD42h0is.roa
Signing time: Tue 30 Apr 2024 07:55:03 +0000
ROA not before: Tue 30 Apr 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 30 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1600F6CFB44ED32A78505A3264614C0F8DA1D22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:2e:1d:01:d3:39:d7:93:70:04:3d:a4:c6:
9b:66:e0:97:02:cd:81:ef:25:6f:d2:75:b5:0e:3d:
68:5b:7b:7e:e3:bb:d7:00:ce:c2:13:e3:41:25:22:
f4:d9:15:63:f2:3b:58:0f:8c:b0:73:1d:cb:25:45:
06:82:bd:48:45:58:af:3a:2d:4a:9b:8f:47:e5:aa:
de:b7:42:2a:5b:d1:a7:7e:20:05:b9:d9:98:c8:e2:
cc:ae:9e:a5:7f:76:89:d9:4c:a7:98:ec:67:5f:13:
59:af:4f:d1:ac:b2:93:04:97:c2:a4:38:30:33:7a:
cd:ad:9a:35:99:bf:3a:4a:04:12:31:a9:1a:5d:b9:
21:66:b2:5e:6a:55:9e:df:ed:af:40:70:65:ab:26:
1e:ce:78:8c:c5:8a:5f:ce:10:be:d3:a9:68:90:a7:
d9:78:70:a4:9d:be:4f:bf:3f:1a:6b:66:b2:97:37:
94:e3:3f:7d:12:38:de:f5:32:75:bb:ad:b7:3f:a9:
0a:35:a6:4e:ff:f8:42:6b:a0:34:d4:f5:1c:9f:cd:
93:d6:c0:97:35:8a:d5:82:5e:ea:d0:e2:ae:aa:0b:
b3:28:99:93:6e:7b:47:9b:3b:85:bb:c6:b7:32:cf:
6d:1c:a7:54:5d:f4:9b:b2:ce:4a:4c:40:d5:86:2b:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:F6:CF:B4:4E:D3:2A:78:50:5A:32:64:61:4C:0F:8D:A1:D2:2B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/FgD2z7RO0yp4UFoyZGFMD42h0is.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7d:d7:d8:15:e0:8d:02:76:08:c8:92:3b:08:4c:92:e8:bc:
5b:5c:df:09:1a:cb:18:7b:dd:18:7c:3e:2a:bd:0b:39:4d:e8:
82:e7:79:8a:a6:db:a5:e8:4d:50:6d:fa:00:02:8c:d7:08:4d:
44:30:30:52:c6:91:92:7d:dd:55:27:46:d6:86:6c:e4:5b:d0:
99:e4:c5:42:a8:b0:c2:2d:0f:f2:19:56:72:be:fa:71:c8:c3:
a9:62:7d:75:f0:3d:9d:1e:16:a4:e1:f9:be:e0:39:30:64:9e:
ee:35:60:83:c5:09:1b:39:a2:16:5c:09:8f:9f:38:60:04:92:
73:72:c6:69:fc:74:41:bf:2d:87:cb:a2:6d:89:6e:b4:9b:8a:
9b:89:8f:32:78:b0:dc:09:d5:36:a4:00:ca:ce:94:2e:e6:ee:
ac:39:48:86:f7:1d:80:88:ef:86:2d:5e:06:cc:ad:a6:ec:b5:
35:70:96:cb:53:8f:71:05:2c:b6:17:0f:68:3d:46:e9:60:2e:
79:c0:77:62:37:55:c8:86:8f:b6:40:35:e0:28:e7:51:90:1f:
49:13:4a:5b:35:e1:49:3d:f5:f4:13:6c:b0:53:33:04:cd:27:
46:82:df:cc:44:86:35:81:85:21:47:81:03:3d:26:dc:9d:50:
db:96:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:36:58 2025 by rpki-client