Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/G4JNpjtFIc_p8brrZcN0GPIaCug.roa
File: G4JNpjtFIc_p8brrZcN0GPIaCug.roa (raw, json)
Hash identifier: 2a9/shfma2HwSxHysW8NWh/3yLvu5/20ST6yvjSwgfc=
Subject key identifier: 1B:82:4D:A6:3B:45:21:CF:E9:F1:BA:EB:65:C3:74:18:F2:1A:0A:E8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B30
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/G4JNpjtFIc_p8brrZcN0GPIaCug.roa
Signing time: Mon 23 Dec 2024 07:55:03 +0000
ROA not before: Mon 23 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2864 (0xb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 23 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1B824DA63B4521CFE9F1BAEB65C37418F21A0AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:0c:7e:94:0a:b2:20:85:cd:9c:71:b8:59:
88:17:03:c8:a3:1d:3b:44:2e:d1:ee:ea:3f:e1:a6:
39:00:84:f9:9d:56:c6:6a:3a:33:59:ed:d0:9a:c3:
02:96:e8:91:aa:c7:68:44:1b:3a:20:f5:49:f1:ba:
e1:68:ab:96:5e:8a:46:68:09:6e:82:bf:b2:96:aa:
00:16:15:8c:07:31:c9:9f:36:66:32:92:0e:53:22:
88:93:00:b4:bb:c6:bc:d3:5e:a8:3e:0e:39:4c:cb:
43:61:73:23:5e:cf:60:8f:2a:37:b6:52:14:8b:9a:
d3:bf:ce:67:91:71:00:c4:59:f9:a7:93:06:80:ac:
3b:49:89:c7:03:ea:e1:13:40:fd:6c:7b:14:94:1f:
55:cb:cd:c0:10:b5:f5:ca:c3:d6:c4:01:45:7a:2e:
93:27:28:99:36:8b:ab:0f:3f:32:6c:5b:ca:ff:99:
25:2a:1e:b6:4b:68:90:53:66:21:5d:67:1a:34:d0:
b4:8f:9f:89:d7:d0:6f:14:db:4c:9d:1f:5b:2d:4b:
0f:dd:f7:72:dd:a4:e9:dc:7e:34:f0:36:15:60:ac:
1a:94:85:8b:b0:35:08:39:ea:ae:df:4a:41:8b:35:
5a:8a:ef:69:31:d4:60:3c:30:f6:4d:d5:74:95:fe:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:4D:A6:3B:45:21:CF:E9:F1:BA:EB:65:C3:74:18:F2:1A:0A:E8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/G4JNpjtFIc_p8brrZcN0GPIaCug.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ef:b0:23:44:d8:b5:f3:b7:8d:04:00:d2:db:7e:65:2c:d2:
20:fe:f4:1f:97:c2:33:67:93:06:01:59:55:38:c9:a6:c1:9d:
96:85:3f:cb:a7:fc:9c:27:b3:32:a1:53:92:ea:cb:b7:58:ec:
dc:02:4b:f3:b5:8c:5b:2d:ba:ae:75:3c:d3:72:68:b5:01:db:
07:eb:d3:30:44:5e:98:b2:e7:a2:51:44:8a:8c:43:5a:a8:43:
d1:3b:ab:2d:53:d4:78:6f:60:44:2c:ca:93:52:be:3c:4d:f2:
60:b3:f1:b0:7a:c8:ab:cf:39:b8:93:0e:5a:2a:b2:f6:b0:28:
8a:8f:e3:3d:90:84:9f:6c:ee:a2:64:18:3b:8e:41:fc:2a:5c:
a2:a5:1d:92:21:73:a5:db:73:7f:4a:a9:f9:e9:29:67:a2:d8:
04:b0:96:07:f2:bb:d5:05:62:62:a0:26:6b:fb:27:f0:05:8f:
43:ea:bf:07:ab:de:17:1e:15:1f:9d:d8:68:32:cc:42:6e:33:
ae:3c:ba:27:34:f1:39:51:9c:3c:84:f3:76:eb:18:d2:bc:96:
9a:d2:b6:14:f0:18:22:07:ae:e0:32:6b:d0:28:8b:de:38:01:
de:83:19:15:0c:a7:4e:61:91:ea:da:ab:fc:63:93:23:49:6e:
6b:7c:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:26 2025 by rpki-client