Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/IzBaSI_FV7cVbTQ9w_JZA_p115A.roa
File: IzBaSI_FV7cVbTQ9w_JZA_p115A.roa (raw, json)
Hash identifier: eEBddRcuKwuPIB+T5JPy6P+P1+zLDPCl0UvcrEOc+HI=
Subject key identifier: 23:30:5A:48:8F:C5:57:B7:15:6D:34:3D:C3:F2:59:03:FA:75:D7:90
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AD6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/IzBaSI_FV7cVbTQ9w_JZA_p115A.roa
Signing time: Fri 13 Dec 2024 07:55:02 +0000
ROA not before: Fri 13 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 13 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23305A488FC557B7156D343DC3F25903FA75D790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:af:5b:ab:57:f9:24:a7:73:e7:d5:7e:f1:
98:00:9c:82:d6:97:bb:74:5a:83:dd:9f:eb:17:ae:
8a:a9:d2:6e:20:e6:ee:8a:de:9a:dc:d7:eb:36:7f:
50:b6:76:cf:f4:57:1e:5a:4c:50:a3:40:43:8e:c3:
42:6b:e5:2c:0d:73:e3:fa:7d:8e:30:49:e4:e4:96:
40:a1:21:40:00:a0:0a:22:e8:75:94:e7:9c:fe:91:
85:0e:44:2a:a0:66:d8:d3:e5:39:9e:21:9b:5c:be:
b3:6c:8c:64:db:49:23:71:84:35:ba:a3:7e:bd:5e:
65:64:cf:ee:31:ef:e4:6d:0f:f2:76:d3:0f:51:c9:
94:f2:78:9b:d7:a4:b7:49:c4:78:e2:69:e2:2a:89:
8b:3e:92:d5:eb:db:e1:ce:74:b2:54:54:6c:43:26:
d1:cb:f6:07:cc:65:60:35:36:6b:65:53:7e:6b:1c:
19:55:f7:f9:19:b1:0f:b6:6b:64:a0:00:45:e0:69:
61:c1:3a:a2:45:25:dd:22:e5:ba:55:5e:07:39:23:
15:8d:a2:4e:cd:10:62:2d:d5:76:c7:45:ce:e4:02:
29:28:cc:f5:90:7c:02:72:89:05:1a:29:84:55:d5:
50:8d:2d:da:a9:46:c6:e0:03:46:bb:62:17:b1:92:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:5A:48:8F:C5:57:B7:15:6D:34:3D:C3:F2:59:03:FA:75:D7:90
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/IzBaSI_FV7cVbTQ9w_JZA_p115A.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ba:7a:2a:39:4f:f3:2a:4c:d6:76:a9:fb:c2:96:28:ac:85:
da:65:52:e0:00:35:ee:07:40:29:09:71:a2:41:f5:8b:a0:79:
83:7c:fc:b4:b5:86:e3:ac:32:49:81:28:92:5a:90:2e:d3:ce:
04:00:97:0e:4e:24:81:33:c3:9e:90:03:e4:e0:fa:eb:30:56:
84:f8:73:47:4a:0b:89:cd:22:68:14:18:84:c4:a5:37:3d:38:
27:3e:e2:17:b6:a4:fd:5f:10:f0:24:15:18:39:ce:5a:4d:bc:
01:5c:53:2b:cf:b3:ad:ab:28:43:44:34:b7:44:aa:ab:94:98:
58:50:6d:08:f2:d9:94:b8:59:8a:e6:00:22:fa:47:6a:68:8e:
d4:5a:59:a5:2b:be:27:f2:fe:f7:31:00:cd:23:16:53:ef:75:
bd:4b:76:d0:ea:20:2e:7b:16:fc:d1:dc:9c:57:03:64:e5:19:
58:ab:ea:37:6a:bc:89:20:e9:98:66:5e:16:07:f7:82:73:04:
5b:63:1c:91:84:a8:40:49:95:02:96:5c:13:8b:a3:2b:2a:9b:
f1:76:e0:d8:de:e7:47:69:68:f7:0d:c6:46:03:c0:19:4d:70:
7a:d4:f9:52:f3:04:4a:d0:e0:ad:6b:ef:a7:4b:b4:68:3b:c3:
47:95:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:09:33 2025 by rpki-client