Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Gwux-bgoARMf0DAmjpnBLxIQDac.roa
File: Gwux-bgoARMf0DAmjpnBLxIQDac.roa (raw, json)
Hash identifier: +yza7C4jODTeO4JPQsFBRNtrHopfCeH3koSgv2LLq1s=
Subject key identifier: 1B:0B:B1:F9:B8:28:01:13:1F:D0:30:26:8E:99:C1:2F:12:10:0D:A7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A61
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gwux-bgoARMf0DAmjpnBLxIQDac.roa
Signing time: Sat 30 Nov 2024 07:55:03 +0000
ROA not before: Sat 30 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 30 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1B0BB1F9B82801131FD030268E99C12F12100DA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:20:17:01:7d:ee:45:1c:91:43:e5:48:3a:
ae:91:a8:56:ac:36:66:5c:12:23:95:ef:bd:ec:a8:
b8:90:d4:c7:03:5a:e6:05:1c:f6:f5:aa:bc:ce:ca:
f9:96:1e:e3:74:84:bd:33:d3:ca:9d:50:1e:c8:b7:
b3:b4:da:ed:d1:43:a0:62:25:67:5f:09:85:64:ba:
14:28:0b:79:60:d0:9c:b8:dc:aa:68:74:54:88:e9:
83:e5:23:2a:f3:a3:77:a2:3a:30:c7:71:60:93:e6:
aa:5f:63:9d:3d:fc:e8:7d:08:4b:96:c1:36:41:4c:
7d:6a:c0:36:8f:28:a0:ae:a6:88:cc:16:55:40:06:
b1:bc:59:3d:28:c5:f8:a5:6c:0d:41:dd:29:18:e9:
fe:4e:0b:7e:1a:92:49:ed:c2:56:cc:78:7b:e8:31:
a7:99:76:44:d5:e7:3f:f9:46:0d:ec:a2:de:ac:25:
d3:72:3a:b8:01:10:d4:88:55:ce:89:58:f1:7f:14:
30:94:1f:ea:32:f7:52:7a:8a:98:e5:4f:03:60:9c:
7f:66:ff:6e:94:32:f6:3b:f5:dc:2c:ad:21:95:5f:
05:7b:04:05:00:8b:e2:88:5a:d3:7e:49:c9:2c:64:
81:01:f3:d2:6a:35:7a:66:10:06:8b:83:02:5b:24:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:B1:F9:B8:28:01:13:1F:D0:30:26:8E:99:C1:2F:12:10:0D:A7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gwux-bgoARMf0DAmjpnBLxIQDac.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3b:62:f8:78:05:39:88:67:55:72:96:d5:71:9e:f1:d0:50:
d1:15:ec:f6:63:0b:cc:09:4c:4f:de:a6:21:97:26:b6:78:a8:
75:1b:e7:ad:ac:a6:a9:09:3f:b1:c1:f5:49:be:29:ab:6f:c5:
34:81:ec:11:a8:5d:aa:8f:cd:b0:b6:6d:ce:14:24:d2:d7:e1:
6b:31:71:1d:40:38:fa:24:9d:1d:1b:ce:08:78:a2:cb:ab:b8:
89:06:19:19:7d:a8:09:be:c6:4e:75:e3:6a:90:6f:d9:06:51:
67:2f:be:90:ec:38:8a:3a:33:58:20:5d:8c:64:a5:94:c8:c2:
37:dd:9b:65:44:b4:cf:2a:2b:a3:8b:a7:9f:9d:95:97:c6:78:
07:c3:0d:7a:89:c0:ef:b7:18:c6:15:a5:8f:bd:41:cf:34:07:
41:22:2c:2e:52:fb:4d:74:8f:f1:1a:5d:c9:6b:c6:8a:71:50:
22:31:de:af:ff:be:80:76:f1:fc:11:8e:f6:a9:0c:88:13:2e:
8e:51:4c:d2:a8:ca:bd:d9:11:cf:77:ba:d9:b9:67:63:25:15:
99:15:bc:d8:16:81:50:4d:84:bc:43:c1:c3:af:8c:12:3c:42:
bd:57:d0:82:a0:7a:b5:4c:d1:97:11:18:e1:55:c0:a7:82:43:
02:25:e6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:05:08 2025 by rpki-client