Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/IAor9xzoYcTzbq046tcVyyjMi54.roa
File: IAor9xzoYcTzbq046tcVyyjMi54.roa (raw, json)
Hash identifier: ST1EH6saRDe/09DIzmjsqRFayGCf7oWfx0g/USGps0E=
Subject key identifier: 20:0A:2B:F7:1C:E8:61:C4:F3:6E:AD:38:EA:D7:15:CB:28:CC:8B:9E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B57
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/IAor9xzoYcTzbq046tcVyyjMi54.roa
Signing time: Fri 27 Dec 2024 15:55:03 +0000
ROA not before: Fri 27 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2903 (0xb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 27 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=200A2BF71CE861C4F36EAD38EAD715CB28CC8B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a0:48:43:23:21:94:de:03:1f:f5:f4:2a:1f:
12:21:47:fa:d7:a2:af:17:08:0b:5c:43:3d:e9:06:
52:96:c5:72:d9:f8:55:79:da:3e:e0:99:b2:1b:7f:
43:46:22:bf:81:81:f0:83:d1:4c:db:2e:c9:13:79:
49:b7:14:cb:b7:41:e4:05:2e:85:93:0f:73:83:9b:
7c:5d:56:e4:a0:e0:60:a8:35:db:13:c9:d4:f7:be:
b9:df:ac:5d:a9:bc:b1:32:2f:d0:97:36:0a:ea:aa:
83:a1:7e:3a:37:a7:17:f1:80:f7:bc:07:d9:dc:61:
ec:9a:9e:f0:57:72:52:92:8f:a7:45:20:f4:12:13:
fc:c5:d3:be:f5:26:d5:70:27:6a:05:75:f7:c6:73:
69:67:fd:f7:10:f4:77:f7:46:28:a8:f7:3f:31:31:
55:2d:f8:a6:a4:a1:6e:0c:0e:eb:e0:97:6a:62:aa:
2a:28:cb:58:3e:21:92:6d:7b:26:eb:17:18:37:88:
a3:0f:39:15:b9:6a:22:e6:45:8b:2a:59:67:a2:75:
1f:b1:88:0f:a5:b1:b2:af:49:2a:c6:12:3a:d9:51:
63:c2:06:6b:66:71:4e:79:a9:54:36:9b:5b:54:30:
fb:ad:d3:d4:77:74:d9:33:71:61:b8:f4:f6:0b:eb:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:2B:F7:1C:E8:61:C4:F3:6E:AD:38:EA:D7:15:CB:28:CC:8B:9E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/IAor9xzoYcTzbq046tcVyyjMi54.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
10:39:80:f1:af:f4:25:07:45:d3:ef:24:df:95:68:44:f5:04:
1b:c9:11:74:52:75:27:9a:d0:09:0a:6f:4c:33:a1:3e:ba:34:
d5:a7:a0:5c:cd:ce:11:b8:69:15:b4:61:43:2c:c1:f9:e2:34:
46:33:4a:08:a1:5e:ef:3b:4b:f0:8e:f0:58:9d:b0:d2:e9:93:
84:42:51:08:af:ca:c2:e9:f8:09:a0:b3:66:cc:9b:ed:5b:f4:
45:28:a6:e5:96:69:f7:eb:95:27:93:ef:d2:62:14:c8:e2:14:
c0:a0:55:d7:84:49:ce:b8:a3:c0:0a:3a:f0:7f:2e:8a:9b:c4:
f4:d6:3f:b6:88:8d:94:08:2b:9f:d7:a5:e5:5d:60:89:25:88:
e7:54:3d:11:c6:d5:fc:35:82:99:df:74:f3:ed:7d:b5:38:1d:
85:66:eb:71:bf:52:e2:d9:e2:6d:c1:23:5a:ee:7f:0b:dc:82:
35:81:14:f0:0e:0a:2b:05:42:b4:fd:bc:59:82:d0:1b:2b:97:
60:98:c2:53:6a:4b:45:e6:ec:32:34:dc:3d:0c:69:7a:e4:12:
44:3b:e3:fb:4c:5a:f8:5b:6a:8b:da:50:81:bd:70:3f:43:8f:
ff:95:ca:c2:64:37:a0:95:d1:b3:4f:0c:a5:93:2e:48:e3:11:
15:42:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:26 2025 by rpki-client