Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Gp_HMbYAN-Q7r4migPsy747Ff9I.roa
File: Gp_HMbYAN-Q7r4migPsy747Ff9I.roa (raw, json)
Hash identifier: 5MfsS7UxN+TnkUKt0SOLAFMwdMRpr6qtAs0XrvCdc4U=
Subject key identifier: 1A:9F:C7:31:B6:00:37:E4:3B:AF:89:A2:80:FB:32:EF:8E:C5:7F:D2
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B94
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gp_HMbYAN-Q7r4migPsy747Ff9I.roa
Signing time: Fri 03 Jan 2025 07:55:03 +0000
ROA not before: Fri 03 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 3 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1A9FC731B60037E43BAF89A280FB32EF8EC57FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:ab:f1:4e:2a:41:6a:61:ce:e8:01:b2:76:
ae:31:7a:4a:1f:5a:97:dc:a4:a1:33:10:cb:13:91:
d0:18:18:c6:c6:d0:e7:c7:69:68:07:16:57:a5:3c:
74:bd:7a:02:54:b2:e3:da:a4:79:52:10:bc:42:16:
9c:9a:1b:84:c9:ea:9f:44:d6:b2:8c:7a:75:e0:4d:
03:a7:8d:15:b6:18:dc:bd:b5:69:09:bf:16:89:c2:
0a:87:26:de:44:c0:e1:dc:cc:57:52:0e:5c:1a:2c:
cd:89:4a:13:a9:e2:6f:c8:16:c6:3f:12:3a:c9:75:
7d:d6:3f:28:d7:54:ec:d0:84:f4:9d:aa:b2:84:e2:
2a:89:48:e2:6f:55:d2:6a:b9:8a:86:5a:32:8d:a9:
b0:a9:81:67:b7:8a:d9:c0:e3:91:73:e0:ea:6e:3d:
63:89:4a:07:62:e0:02:47:e3:c9:11:ef:06:8d:ed:
23:ea:e9:d2:31:e6:42:07:9e:b4:8c:0b:b4:8d:83:
12:ce:1c:3f:d6:a9:fd:4d:b0:0c:6a:e5:7b:65:3b:
4a:21:70:66:74:63:04:e2:5f:96:93:a6:c1:27:c6:
ab:90:26:06:15:f0:ee:70:95:ee:1b:88:0f:f6:1a:
19:f9:0b:1d:55:a3:76:d9:ce:34:76:69:63:ec:b7:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:C7:31:B6:00:37:E4:3B:AF:89:A2:80:FB:32:EF:8E:C5:7F:D2
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gp_HMbYAN-Q7r4migPsy747Ff9I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:57:87:dc:f2:36:e2:2a:e3:5a:10:3e:49:85:d5:bf:93:6b:
5f:27:95:12:71:21:14:00:57:3f:8b:42:a7:f9:19:25:c1:93:
6e:99:90:79:55:8c:d8:6e:e6:72:d4:16:4e:c5:11:df:a4:3d:
8a:37:1c:26:3a:5e:3c:1e:60:85:24:f6:b6:1a:55:d8:52:9f:
3f:d2:03:ca:2f:3f:d5:14:eb:7d:47:48:57:b3:83:ec:4e:4f:
70:78:d5:68:0b:6f:47:34:88:a6:7d:47:76:ae:3f:05:10:ee:
13:44:20:68:da:5d:d7:70:ff:f4:7e:52:e4:a9:ec:e6:73:25:
d2:f6:3a:17:80:0d:f6:0f:4d:ca:95:89:d9:5a:e6:23:6a:a7:
b4:4d:ec:32:2d:16:11:b7:da:bc:d9:2c:ab:42:f3:4e:93:a8:
71:c5:63:f9:8c:a5:1a:d9:33:89:45:b7:76:cb:20:f8:b8:d1:
75:e6:b3:a6:69:fe:fd:30:03:9c:68:0a:1a:be:2c:10:11:a7:
d1:9a:a4:63:87:68:f9:4f:d8:04:e8:9a:6c:2e:d6:fb:a7:4b:
95:0d:97:7d:d3:41:64:0a:95:f5:c4:5e:63:cf:8f:86:09:5a:
70:f6:b4:d5:f1:3b:0b:9f:aa:d0:da:b9:75:2f:34:3a:d4:10:
8d:64:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:25:02 2025 by rpki-client