Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/KYlTU1iEPPYhLZ2VshyTiNi1E78.roa
File: KYlTU1iEPPYhLZ2VshyTiNi1E78.roa (raw, json)
Hash identifier: zyeZCCWmKcuM0ftQTAfajRP27o90t2eYIpuzRcrcjR0=
Subject key identifier: 29:89:53:53:58:84:3C:F6:21:2D:9D:95:B2:1C:93:88:D8:B5:13:BF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B8B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KYlTU1iEPPYhLZ2VshyTiNi1E78.roa
Signing time: Thu 02 Jan 2025 07:55:03 +0000
ROA not before: Thu 02 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2955 (0xb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 2 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2989535358843CF6212D9D95B21C9388D8B513BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:44:2b:70:1e:ac:0d:67:bd:20:c5:73:87:
d5:43:2e:22:70:b7:1a:b7:02:94:ee:eb:1e:be:02:
49:91:5f:e4:5f:a9:9b:4b:9b:9c:ee:2b:17:9f:50:
af:bd:f7:22:07:cb:65:da:aa:d6:27:f7:57:40:19:
38:9c:b6:4e:ba:39:12:67:f7:0e:6d:82:10:ef:03:
a6:95:61:fd:df:9c:c2:21:ff:99:c2:0a:49:1d:a3:
6b:f5:09:e7:f3:50:69:0a:15:70:e9:d7:5a:04:ab:
52:7c:4d:fc:9a:04:ed:42:1d:cc:20:d0:35:db:af:
1a:d9:51:84:63:ab:74:39:f5:05:b6:7a:39:0c:ae:
22:d0:78:43:d0:89:b1:aa:2c:f6:c5:ac:52:0b:b5:
03:15:bc:a9:f5:43:21:f5:75:21:c2:4f:93:d4:b8:
0b:34:d3:5d:7e:a3:11:5b:89:50:06:b4:2b:71:d1:
de:69:dc:b5:28:9e:63:d2:a5:83:97:df:5d:55:40:
2f:70:d4:8a:51:32:1b:c0:d6:3c:c8:ce:03:f8:50:
94:fd:12:92:f6:4c:14:1d:71:f8:cf:dc:c2:76:6e:
2d:4c:6f:0e:63:59:7a:73:64:ae:a7:c4:f7:b2:67:
6e:7d:d2:a5:2e:ed:5a:77:47:35:06:eb:ac:1f:2a:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:53:53:58:84:3C:F6:21:2D:9D:95:B2:1C:93:88:D8:B5:13:BF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KYlTU1iEPPYhLZ2VshyTiNi1E78.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:11:80:63:6a:5d:12:7b:57:68:84:f1:dc:ea:a4:03:ae:42:
7a:a2:3e:92:e9:a2:03:56:35:6a:46:f6:21:18:58:8b:7f:c4:
82:a6:58:cb:48:1b:41:67:52:2d:44:be:f4:83:b8:01:8d:d3:
32:d8:bd:35:2f:70:79:ca:5d:8f:f5:20:8a:54:d0:6b:d1:11:
92:3c:39:6d:5b:1a:c2:ed:a2:38:b4:33:a7:b3:f4:9a:2b:c8:
53:4f:58:6d:93:31:2a:7f:b2:05:e5:81:87:a3:3b:c8:53:46:
bb:dd:b0:66:e9:0c:e8:f8:9b:05:35:ba:5a:fd:92:95:54:ef:
8c:65:7e:42:78:7d:8b:57:32:39:b9:12:2e:d0:d3:bb:00:ce:
c6:a9:5f:34:10:54:b9:f2:56:da:aa:8e:a6:b9:b2:3a:9b:52:
79:ff:2f:58:23:3b:c4:97:2f:e8:9c:2f:c7:da:86:e4:0f:b2:
7a:e8:f6:26:72:84:ac:7a:54:fc:3d:7e:fa:99:7a:db:3a:14:
cd:5c:77:9b:c2:95:75:a3:6e:2b:50:fc:ce:c7:d4:c2:db:cc:
98:78:d1:f0:71:8d:94:6a:72:08:23:62:17:33:2c:ce:7c:69:
1a:ed:b5:a2:ce:e3:2a:17:b3:a5:b8:37:d2:52:70:b8:b8:21:
26:50:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:00:24 2025 by rpki-client