Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/H8OBFA_qQQg5fTmrtfmi_TnCE1Y.roa
File: H8OBFA_qQQg5fTmrtfmi_TnCE1Y.roa (raw, json)
Hash identifier: kZnibo91h+GaoxP5lTB+k9TzPAU4ReyKjuOiJrD1GY0=
Subject key identifier: 1F:C3:81:14:0F:EA:41:08:39:7D:39:AB:B5:F9:A2:FD:39:C2:13:56
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B60
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/H8OBFA_qQQg5fTmrtfmi_TnCE1Y.roa
Signing time: Sat 28 Dec 2024 15:55:03 +0000
ROA not before: Sat 28 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 28 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1FC381140FEA4108397D39ABB5F9A2FD39C21356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:8a:87:d5:43:b4:dc:3c:17:1e:77:24:aa:
44:a7:e8:a2:b7:db:00:31:72:76:3f:ff:ae:57:13:
a6:16:fc:ba:f4:06:bb:13:69:68:32:04:9d:94:ef:
57:d1:58:d6:40:2b:d9:d7:73:60:89:48:b1:87:90:
77:d1:ae:be:09:33:dd:1b:af:37:ee:05:cf:5a:ea:
72:8a:ff:28:77:0f:f7:be:1d:4b:c3:c8:50:a0:46:
f2:a7:ac:74:b7:a0:20:2f:2b:93:1a:40:98:85:68:
a7:ae:78:b4:31:57:9d:0b:80:39:0f:82:50:b8:cc:
bc:2c:a2:5d:b8:bb:c1:7c:f5:b0:d1:d9:b9:98:12:
4d:34:23:76:f4:48:18:9a:44:1a:c3:0e:0a:d2:da:
eb:5f:80:94:20:be:38:7f:bb:e7:da:c5:36:25:e8:
70:53:9d:71:9e:e6:0d:1c:40:ae:7e:1b:37:34:e8:
3e:b3:d9:04:95:95:31:d0:0e:31:dc:89:14:bf:74:
20:53:cc:a9:93:4e:cf:3a:ea:f8:7f:f7:0d:2f:93:
9c:b1:a2:2e:51:8e:fa:5e:d0:84:a1:0b:d8:88:07:
65:c4:02:11:eb:2d:6a:d6:b4:8e:d2:9c:f3:f5:a9:
60:06:37:a4:a0:ba:78:0c:22:fa:ed:cc:5f:cb:db:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:81:14:0F:EA:41:08:39:7D:39:AB:B5:F9:A2:FD:39:C2:13:56
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/H8OBFA_qQQg5fTmrtfmi_TnCE1Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ea:6f:06:dc:86:b3:f6:93:15:e1:28:c2:bf:d1:fc:8f:65:
9d:1e:e9:bd:a3:54:c8:6b:86:e3:73:b0:4b:08:b9:30:11:0c:
a5:e8:7b:ff:cc:92:3d:43:5f:6e:bc:84:14:67:8c:94:21:81:
bd:dc:e7:83:3f:30:1f:63:97:27:67:83:72:bb:44:b3:1e:cf:
13:9c:de:47:d9:a7:a1:2e:fe:f3:04:f8:fd:f6:9b:aa:3d:3c:
3f:08:d1:43:29:e5:f3:59:4f:7e:90:96:fa:e8:3b:4d:47:e1:
c0:03:97:a3:1b:50:93:31:2e:e7:c9:83:bd:7e:3d:bf:07:72:
e2:40:61:59:0d:c7:a7:8b:e9:d6:84:0c:e4:06:b7:57:68:fd:
21:3f:05:6b:d8:40:db:0c:28:d2:eb:aa:b2:31:49:bd:a5:fc:
98:ee:72:c5:4f:41:91:f6:2f:e2:be:d9:64:4c:44:43:64:df:
3a:8e:55:cb:ff:91:35:80:3f:02:63:55:39:c7:d1:18:ab:da:
9c:5e:f6:f2:21:22:e0:c0:9e:32:8e:d5:63:5f:cf:83:7a:e4:
74:e8:e9:26:81:71:b7:37:db:00:7e:90:e3:2f:a7:8b:09:c2:
67:bf:0b:c2:34:5d:97:e0:ae:ca:64:d5:ce:e0:65:33:0c:4b:
52:3d:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:07 2025 by rpki-client