Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/LJwchlfNIF5iWY_qqf39n3HD5Tg.roa
File: LJwchlfNIF5iWY_qqf39n3HD5Tg.roa (raw, json)
Hash identifier: bFoWJTkwASOnBH6Uzh7V9Wh9eQKSa+cwk6cC8irgkUI=
Subject key identifier: 2C:9C:1C:86:57:CD:20:5E:62:59:8F:EA:A9:FD:FD:9F:71:C3:E5:38
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AAF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/LJwchlfNIF5iWY_qqf39n3HD5Tg.roa
Signing time: Sun 08 Dec 2024 23:55:03 +0000
ROA not before: Sun 08 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2735 (0xaaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 8 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2C9C1C8657CD205E62598FEAA9FDFD9F71C3E538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:c1:67:f7:cd:94:e4:50:8d:94:dc:24:af:
06:60:c7:5b:86:e9:86:11:db:0a:cc:05:20:4d:44:
fa:fe:af:96:44:86:9c:ff:a9:a6:99:a2:f8:e7:33:
2e:fb:84:f0:b2:79:4d:61:fa:4e:56:ff:2d:df:c0:
af:a7:8f:39:88:0b:05:42:a8:ad:1f:c9:bb:a8:bf:
05:c8:c6:df:07:4a:21:fe:da:92:51:38:be:2f:a0:
1e:52:53:ff:b2:f8:ca:32:67:3a:72:e3:50:84:f9:
28:6e:58:cd:30:ff:b0:e4:3e:54:3e:9e:32:83:ab:
1e:e9:64:2d:6d:30:6e:9d:6c:f9:97:da:c2:cb:6b:
5b:56:d1:e5:b3:b3:6d:1d:97:3e:65:8d:3c:46:a9:
bf:47:d0:03:d5:34:d1:f4:48:b8:8b:d7:be:45:93:
69:3f:2d:63:7f:a6:d2:5f:46:19:49:99:db:57:3f:
d3:52:b7:9a:5d:b6:ff:95:c5:7c:51:ca:44:86:fa:
85:02:4a:6d:f1:6f:c5:cb:7f:1d:d0:15:d6:6c:f5:
3a:dd:04:aa:47:17:2c:54:37:82:8d:07:65:51:7a:
01:80:b7:38:92:9e:32:f2:37:97:00:52:1b:1f:76:
f1:58:42:33:8b:fd:db:35:87:d5:61:e7:73:eb:ef:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:1C:86:57:CD:20:5E:62:59:8F:EA:A9:FD:FD:9F:71:C3:E5:38
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/LJwchlfNIF5iWY_qqf39n3HD5Tg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
82:19:bb:f7:b8:03:b6:d5:0d:54:8c:e8:4f:2d:c8:52:95:48:
90:50:4c:0f:b8:97:b0:f2:52:66:1b:64:36:54:4d:3d:92:ec:
96:82:32:a1:73:38:4d:29:d1:17:d7:04:45:60:f8:15:c1:0f:
79:4d:f3:bf:38:50:b1:16:08:09:42:19:f1:45:c1:3a:dd:58:
ba:a5:ee:33:62:30:ac:9b:9f:af:89:f3:6c:ca:7b:d5:eb:7f:
5e:50:26:fe:ed:04:f5:ff:c6:20:f3:ef:32:b6:49:70:a8:06:
a1:df:51:09:13:c9:a1:5a:a2:c4:73:7b:aa:ed:dc:83:d9:4c:
99:bd:78:e4:42:c8:a6:5b:f7:ab:05:f5:ce:f7:0c:28:d8:90:
f2:f1:aa:5d:f5:a2:31:8c:83:a7:3f:6a:f7:11:b1:8d:0e:22:
fe:2f:7f:d2:29:4e:94:c7:22:35:7d:92:92:4b:3e:26:13:60:
97:18:ec:9e:b5:fa:5c:7b:22:0c:d9:4a:50:7c:a9:41:e7:e8:
44:2a:43:c6:e1:ec:bd:94:50:d8:1e:5e:60:78:d8:3c:2a:f0:
fa:c0:f8:cc:a5:20:fe:7f:59:3c:b7:4b:69:05:70:77:35:79:
58:00:83:d5:b3:5e:af:f6:94:3a:86:a3:99:87:14:8e:13:a5:
fe:83:b9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:55:10 2025 by rpki-client