Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/MYVu9MMm1fN6B01_f8fDvPkBi7g.roa
File: MYVu9MMm1fN6B01_f8fDvPkBi7g.roa (raw, json)
Hash identifier: iRcXTS6Bv/cMllG+myEGa18NBwt9lgP8ThpNWsfGGZ8=
Subject key identifier: 31:85:6E:F4:C3:26:D5:F3:7A:07:4D:7F:7F:C7:C3:BC:F9:01:8B:B8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B6F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/MYVu9MMm1fN6B01_f8fDvPkBi7g.roa
Signing time: Mon 30 Dec 2024 07:55:03 +0000
ROA not before: Mon 30 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2927 (0xb6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 30 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31856EF4C326D5F37A074D7F7FC7C3BCF9018BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:d2:28:a0:55:66:70:e7:d0:6a:0b:66:ff:
c7:cd:3d:1d:b8:a9:5f:e8:0c:6b:86:e0:1d:0b:30:
c2:eb:d1:13:fe:f5:6b:30:66:20:37:f5:60:56:44:
b0:c3:e0:48:4b:46:64:96:ba:42:31:f9:9c:0f:f6:
77:33:86:93:d0:42:7e:88:62:c9:19:cb:8d:f9:ed:
28:95:e7:9b:49:8f:61:68:c3:fe:af:ff:03:dd:3a:
8f:de:57:dc:94:e3:ad:da:2d:a4:fa:8d:5e:32:93:
cd:9e:22:89:e0:7a:a7:99:a3:6e:a3:2d:87:be:04:
38:77:59:47:fe:5f:ab:e6:41:12:6f:16:e0:be:27:
6a:01:0f:73:b2:3b:3d:b8:b5:44:59:f6:1e:6b:84:
d5:c0:4d:80:a1:c3:2e:00:4b:29:fd:4b:81:84:f8:
4d:60:87:4c:b9:f0:48:bd:7a:16:37:e0:0f:f3:55:
a7:99:53:a5:9c:27:1a:fd:4f:f7:3c:34:64:4c:4b:
77:34:82:8b:1e:76:a6:0d:f2:4c:da:1e:9f:73:43:
5d:cb:d1:06:f8:0c:51:c0:b6:13:cc:6c:7e:b0:46:
24:60:97:9b:16:8e:c8:62:77:ee:d3:db:35:a7:84:
8b:f0:7b:26:8c:d4:70:ba:03:7e:25:a3:96:17:d9:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:6E:F4:C3:26:D5:F3:7A:07:4D:7F:7F:C7:C3:BC:F9:01:8B:B8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/MYVu9MMm1fN6B01_f8fDvPkBi7g.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
16:18:5e:80:6e:37:07:2c:2a:f4:73:fc:d0:b7:01:71:46:d7:
dd:79:7d:e8:59:57:c0:79:6d:0a:2f:de:2a:9e:d4:da:75:31:
24:ca:91:46:ff:99:ad:30:28:16:46:7c:2c:ad:09:9f:80:08:
7a:3e:18:9c:61:6a:6a:37:57:68:7b:df:d0:c7:ec:f5:8a:4b:
7f:18:0b:fb:4e:2c:42:05:f7:38:7c:3a:39:a2:62:0f:47:c7:
eb:29:0e:37:55:f3:45:70:94:57:ab:8d:1d:31:e1:a6:28:b9:
67:24:9a:84:d1:43:d6:88:1f:de:f0:f7:e7:f0:23:9b:2a:fa:
c3:a5:62:61:75:55:91:6e:72:29:63:87:93:79:bb:78:51:6b:
1a:20:56:ac:29:b8:82:6b:09:23:97:18:ea:49:21:71:6e:1a:
67:59:4a:71:77:b0:6d:53:f4:21:e7:dc:d8:7b:e0:d7:25:33:
b3:ae:10:72:d5:dd:bd:77:ab:8d:e7:c0:c2:09:a7:9d:37:7d:
62:c4:95:0b:ea:bf:d9:a4:cc:8f:63:39:26:57:99:2b:29:33:
93:9b:b3:0f:49:3a:03:65:b5:01:ed:97:d3:f9:96:db:dd:61:
9c:68:fa:ba:8a:c1:52:18:e5:17:50:b5:58:3e:eb:25:5a:dd:
93:c6:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:52 2025 by rpki-client