Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JXHg5rccl5KkR81o84OhxrIGLb0.roa
File: JXHg5rccl5KkR81o84OhxrIGLb0.roa (raw, json)
Hash identifier: ZO83FP598DT+dwDbxaApG29bSw0ctWTLYz3xO6tb3cU=
Subject key identifier: 25:71:E0:E6:B7:1C:97:92:A4:47:CD:68:F3:83:A1:C6:B2:06:2D:BD
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BB8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JXHg5rccl5KkR81o84OhxrIGLb0.roa
Signing time: Tue 07 Jan 2025 07:55:03 +0000
ROA not before: Tue 07 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3000 (0xbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 7 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2571E0E6B71C9792A447CD68F383A1C6B2062DBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:e2:32:77:7a:c0:cc:d7:1d:c2:ba:6e:67:
4d:70:4f:87:68:27:1d:dd:ed:cf:d2:7a:03:ee:6b:
3b:08:a4:4b:39:9a:4c:9c:17:15:c5:3c:d9:60:35:
0f:27:16:a2:24:31:86:b2:33:70:b9:01:cf:65:8a:
08:cf:6f:93:3c:e5:50:e1:34:46:e0:00:84:5a:aa:
26:52:3a:f4:dc:dd:cb:d6:be:73:78:01:11:3d:18:
bf:06:dd:91:3d:e9:fb:60:1e:ec:fc:c5:56:63:29:
77:5d:ca:dc:d9:a3:19:5f:4a:51:2d:be:04:92:a5:
c3:80:01:ad:40:3b:11:c3:8e:06:96:57:4b:31:97:
9b:46:7a:c5:32:45:5b:65:e2:fa:5b:34:ad:66:e4:
37:ad:4f:bf:27:42:3c:5b:87:15:41:8b:c2:2f:aa:
79:a2:ad:e2:21:c0:74:0d:4b:00:76:e6:85:e1:17:
32:a1:73:e7:6d:1f:25:88:c1:42:06:8c:87:64:2f:
2a:d9:87:00:c9:7e:d9:e6:f2:6d:d0:13:b3:a5:be:
e3:3f:2a:db:29:e7:b5:e9:19:3b:cf:6f:f4:d6:3f:
8b:6d:49:16:83:bb:70:82:02:cb:81:14:8a:70:2a:
2f:98:a4:fe:64:f7:71:34:d3:d2:bf:56:e0:52:7b:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:71:E0:E6:B7:1C:97:92:A4:47:CD:68:F3:83:A1:C6:B2:06:2D:BD
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JXHg5rccl5KkR81o84OhxrIGLb0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:1e:e2:76:ca:30:20:22:f9:e5:fc:3a:92:15:83:38:80:8c:
01:e3:54:2f:76:07:b7:1b:f7:36:cf:b9:65:28:be:e3:88:88:
4b:7e:8a:97:78:5b:f7:2f:6a:af:e8:34:45:40:b8:04:08:dd:
79:3b:97:a7:76:34:3a:14:40:c4:13:90:ed:6c:d5:7c:7d:e7:
b5:bd:f3:8d:bb:91:bc:1b:6b:56:c8:4b:1d:0a:44:a2:44:4b:
cf:6b:e9:0a:d0:d8:be:39:7a:60:9f:fa:60:d1:92:b1:8b:8d:
5a:43:a4:6f:ab:5e:1b:bb:82:98:15:31:4d:fa:89:55:b9:c0:
54:0e:39:5f:8f:17:5c:66:5e:56:99:f0:05:79:ab:44:de:53:
3a:a4:02:1f:4f:07:33:1a:69:37:9a:5c:41:a8:de:6f:76:24:
60:fb:b0:61:6c:c1:db:e4:ad:97:95:83:44:1d:66:67:12:05:
c1:53:2b:0b:12:0b:bd:a2:9a:46:14:7e:1a:32:c4:6b:fe:40:
76:ad:ea:e5:a7:ea:31:40:ed:f8:d9:00:18:a6:93:81:53:04:
61:72:66:a2:0d:01:6b:3c:d0:a5:6f:a9:80:68:ae:94:2e:2c:
88:29:ff:c6:00:fc:be:35:bb:3a:1b:1e:85:60:04:52:18:ea:
73:12:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:30:03 2025 by rpki-client