Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JOrWBSt1to85nYMo9xBkuETCu2Y.roa
File: JOrWBSt1to85nYMo9xBkuETCu2Y.roa (raw, json)
Hash identifier: jKvmws+WuhBJQHer77Pc2fzREgWRXgB0cbettVQYd44=
Subject key identifier: 24:EA:D6:05:2B:75:B6:8F:39:9D:83:28:F7:10:64:B8:44:C2:BB:66
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AF4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JOrWBSt1to85nYMo9xBkuETCu2Y.roa
Signing time: Mon 16 Dec 2024 15:55:02 +0000
ROA not before: Mon 16 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2804 (0xaf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 16 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24EAD6052B75B68F399D8328F71064B844C2BB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:1a:64:a7:a9:3c:85:5c:45:74:e8:68:cc:
61:8d:03:16:dc:0b:0b:27:c0:1d:58:c0:e2:d9:ee:
21:76:af:9e:98:be:f3:78:6d:be:aa:30:4f:41:4b:
ea:60:9a:12:c9:0a:6d:72:c5:dd:2b:ba:64:77:d1:
3f:20:63:49:35:bb:d4:c7:92:79:1d:dc:c6:57:86:
d0:96:e9:ad:56:8a:75:5c:85:6c:0c:49:f8:1e:56:
33:1c:d9:e9:56:ee:ce:75:51:b5:37:a7:10:ca:5a:
76:3c:fa:82:a3:9f:9b:df:c2:8d:35:84:7a:87:50:
bd:44:77:12:50:1d:0d:c8:a0:27:29:b9:b4:31:07:
16:70:b1:58:23:87:84:b2:19:07:a9:f3:10:6c:66:
11:b3:f3:ce:95:0e:6c:7e:da:b0:54:b2:1f:e4:08:
7d:72:cc:58:66:ee:1e:ea:69:b6:7b:ba:cf:b4:da:
af:4b:79:a5:d6:9c:c0:11:57:b2:cd:26:cc:c6:1b:
b8:43:81:79:b2:f5:a9:9e:12:81:07:fe:a5:69:94:
d0:d3:cb:b6:5f:3d:55:a9:df:8c:8d:5e:cb:8a:3a:
bf:4c:e2:eb:ac:97:c8:13:33:d1:f7:64:a7:6e:fd:
20:77:7b:57:05:a5:70:07:96:8c:74:eb:22:4d:1b:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:D6:05:2B:75:B6:8F:39:9D:83:28:F7:10:64:B8:44:C2:BB:66
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JOrWBSt1to85nYMo9xBkuETCu2Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:99:19:99:d0:55:d7:27:e2:1c:87:f3:32:06:45:0d:2e:b5:
a4:49:d8:21:2a:c7:7b:2d:61:fd:83:5f:ec:ed:b5:e3:6a:06:
32:ed:7b:f6:8e:78:27:7f:9f:5b:81:48:c4:30:89:8e:e7:24:
d5:17:a0:32:41:bb:c1:3f:33:57:fe:57:68:9e:74:a0:c7:43:
07:fb:d8:6c:20:eb:22:a0:98:fd:c2:75:a5:6e:13:eb:f3:38:
e8:ac:58:0a:0a:71:eb:72:73:79:d9:c5:ad:46:1b:db:2e:1d:
03:1b:de:dd:0f:2a:e8:cc:3a:93:90:a3:ac:81:b8:73:95:3a:
79:30:66:04:5b:20:48:88:48:d9:ab:cc:82:a5:2b:5f:64:a0:
6f:6f:ad:a5:63:0d:b4:54:b8:ea:eb:44:19:b5:f6:5c:f1:b5:
5a:23:ee:74:29:f2:1e:e3:3e:21:87:34:75:08:5a:e8:bc:7c:
da:04:6b:64:7e:02:b9:92:54:95:62:5d:2c:44:d2:60:60:d7:
9f:a7:97:0a:41:ec:83:d3:d8:12:40:75:4c:ca:66:ad:03:d3:
11:75:32:8f:17:d9:14:7b:06:a2:f0:b7:d7:48:f9:be:70:4c:
76:f1:ca:00:da:d9:90:69:bb:fd:32:c5:e6:56:67:7a:aa:9e:
29:db:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:09:30 2025 by rpki-client