Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JlSpQtPqTr4Fl3g5mFUL-cK5eTs.roa
File: JlSpQtPqTr4Fl3g5mFUL-cK5eTs.roa (raw, json)
Hash identifier: jz1llRDqM4DrJOJUHGpfEXRWGS8A75hJ3MGiyF4BFpA=
Subject key identifier: 26:54:A9:42:D3:EA:4E:BE:05:97:78:39:98:55:0B:F9:C2:B9:79:3B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BA3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JlSpQtPqTr4Fl3g5mFUL-cK5eTs.roa
Signing time: Sat 04 Jan 2025 23:55:02 +0000
ROA not before: Sat 04 Jan 2025 23:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2979 (0xba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 4 23:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2654A942D3EA4EBE0597783998550BF9C2B9793B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:7f:5b:5b:bb:b1:10:fd:a4:be:71:7f:6a:
e1:bd:52:13:06:29:1a:59:74:af:89:86:5d:f9:d6:
af:b3:03:31:6f:f7:07:0c:c4:c5:56:15:38:2b:1f:
c1:10:d0:73:b1:bc:3a:e8:2f:fb:15:96:77:f9:d4:
f5:7f:0d:69:3e:49:f1:34:64:02:e1:f8:b0:c5:30:
38:f5:d7:ec:63:ae:7a:35:7f:f8:76:e3:4f:05:9f:
99:19:78:e2:b7:84:a8:f6:a2:95:4f:88:69:e0:ab:
8b:5b:15:95:d2:5e:0a:21:91:00:c3:53:6c:81:97:
cd:aa:e6:72:e8:7b:56:44:fe:0f:62:a3:60:22:ee:
7a:36:2a:61:2f:d7:6d:25:b9:81:8b:8a:7b:4c:7e:
dc:33:77:d4:6e:18:4c:9e:78:c3:62:73:cd:55:c8:
75:d3:e1:29:87:55:65:fc:6e:99:4f:88:be:9c:e8:
00:a4:fd:75:ef:4b:b3:f6:28:f2:b7:0b:e2:ad:73:
3f:e1:d6:04:56:98:f9:a0:74:8e:98:c1:35:2b:50:
b3:91:f4:18:96:af:19:d9:82:e2:dc:2b:94:4f:1a:
69:72:3d:08:4e:f7:f9:df:34:0c:fb:0d:f2:a8:e9:
42:e5:4e:94:9a:82:c2:d0:48:bb:94:9c:d1:ce:b8:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:A9:42:D3:EA:4E:BE:05:97:78:39:98:55:0B:F9:C2:B9:79:3B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JlSpQtPqTr4Fl3g5mFUL-cK5eTs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6b:e8:fa:ab:ea:12:42:7c:e6:9f:eb:33:d0:d7:04:97:d5:
ce:5a:2d:cc:01:e2:b4:6a:7d:e0:11:a4:90:fa:19:cd:ac:3c:
21:f4:82:c6:32:ae:0c:16:2b:0e:95:67:22:2e:da:98:c3:c7:
8d:81:b2:e6:c9:7a:45:64:b4:5d:6e:b3:98:49:dc:60:40:32:
24:5e:3d:11:28:0d:99:20:7c:71:9d:32:83:00:1c:bc:7d:0b:
53:0e:43:71:47:00:eb:57:0d:16:4c:6c:be:6d:6d:31:7d:2e:
de:67:75:aa:10:1e:f7:fe:57:15:e8:1f:4d:06:ab:39:54:73:
bd:c9:47:17:a5:c8:40:3e:b8:e1:c6:39:c7:1f:ad:e8:64:15:
b6:88:c4:e4:fe:55:3c:c1:ba:e4:03:ab:02:f8:ec:92:08:cd:
79:d1:90:89:4c:75:eb:e6:5f:64:28:96:35:0d:14:5a:ac:ea:
05:16:31:37:60:8d:0c:61:49:36:aa:78:a7:78:35:ed:5c:7b:
94:8b:3a:33:9d:e4:2c:5c:47:a9:9e:23:9b:5f:66:8b:1e:33:
2f:a8:df:9e:9a:62:a0:f3:06:f3:fd:4c:09:0e:20:b6:5b:70:
a4:11:46:f5:ba:c7:b7:51:3a:ba:ae:5b:7b:8a:9e:64:62:f3:
bf:8b:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:10 2025 by rpki-client