Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/McWfjI_UfFFH8JTw40eRySvdBKs.roa
File: McWfjI_UfFFH8JTw40eRySvdBKs.roa (raw, json)
Hash identifier: LO8alI1XwglbNtIAOIykJwJHC2H96rim0t9omRbx6NI=
Subject key identifier: 31:C5:9F:8C:8F:D4:7C:51:47:F0:94:F0:E3:47:91:C9:2B:DD:04:AB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AD3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/McWfjI_UfFFH8JTw40eRySvdBKs.roa
Signing time: Thu 12 Dec 2024 23:55:03 +0000
ROA not before: Thu 12 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 12 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31C59F8C8FD47C5147F094F0E34791C92BDD04AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:16:ce:50:0b:c1:80:22:47:19:61:cc:37:
a9:46:33:e7:f4:ad:6a:a8:c2:6f:06:0b:2e:00:56:
bd:d5:c4:a4:08:77:0f:58:5b:93:dc:eb:b3:57:f4:
64:93:ae:4a:df:ef:08:c2:87:84:9d:b9:52:b9:8f:
ea:e9:01:5e:7d:c7:46:56:dc:ce:0c:a6:f9:b7:33:
4f:9b:77:99:70:6b:5a:0d:89:ad:84:73:7d:97:ce:
c1:98:4c:7f:c9:db:93:12:44:d3:68:7d:1b:c7:cb:
9d:d0:9d:2e:f6:48:1c:e8:1b:68:e0:ca:1c:e7:0f:
34:03:32:b9:b7:99:67:a5:95:b7:04:61:63:87:0a:
01:97:d2:83:ef:af:3b:b1:c9:be:cf:8c:ae:07:73:
e1:ef:58:f2:6e:bb:5d:95:15:c0:96:06:c1:88:d0:
2e:5c:e1:94:d8:29:04:71:3d:f1:05:0e:8b:e4:47:
47:aa:74:eb:58:8a:59:85:29:56:f4:7b:c0:3c:03:
9c:7b:45:93:3e:fc:bb:00:11:38:29:fe:55:24:75:
33:5d:96:e6:37:10:84:76:4e:b2:7c:21:2d:38:f8:
fc:c3:7f:e1:b2:6d:c8:a1:6c:54:39:92:42:5d:f7:
4e:f7:75:70:f6:7f:0c:91:66:bb:e7:9f:91:be:54:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:9F:8C:8F:D4:7C:51:47:F0:94:F0:E3:47:91:C9:2B:DD:04:AB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/McWfjI_UfFFH8JTw40eRySvdBKs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:13:a9:76:1a:b1:55:9f:2e:6f:5a:a1:2b:95:bb:77:ea:7e:
72:8e:4e:43:2f:25:23:7e:64:f1:b2:c9:19:19:af:7a:79:d2:
99:7a:22:a0:37:b7:5d:36:2d:e6:39:fb:0d:7f:02:1a:7d:e3:
64:02:63:06:63:6d:de:ce:a7:37:26:4d:13:45:d3:3f:46:e9:
04:db:69:c2:7e:1d:66:4a:9f:47:af:e7:ad:dd:5c:a2:ea:e0:
e3:16:aa:02:60:62:30:70:37:a2:b0:60:d4:dc:95:a8:f9:b1:
86:52:71:3d:b2:82:fd:86:04:5d:11:ab:b9:ee:f2:5e:15:6a:
0e:86:93:a0:8d:39:79:dd:c0:cc:9f:d7:36:37:15:31:c1:4e:
66:9b:86:27:9e:18:5b:d7:43:85:0d:27:70:d6:a5:1d:c5:f1:
af:d2:a6:41:b5:c3:48:b4:3e:63:5a:ff:db:4b:40:13:67:68:
72:ab:05:1d:c2:24:c0:5e:52:34:15:73:a6:52:f2:90:b4:87:
de:56:66:8b:59:c6:2a:6f:dd:6e:ac:c7:27:f9:a7:28:e2:4d:
b9:d0:bb:be:fe:a5:a4:d6:ec:50:7e:6b:f3:e2:53:5a:9f:4b:
14:49:bd:b0:b9:97:f6:6f:a2:98:28:87:d1:48:f9:23:bf:50:
3a:11:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:16 2025 by rpki-client