Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/O0GKS4O0qgluOqvW3HLeiPr49eo.roa
File: O0GKS4O0qgluOqvW3HLeiPr49eo.roa (raw, json)
Hash identifier: GAYEBoBVFhXLqlfGd/I5wt9EdVjNsZnydBrLeLEylAE=
Subject key identifier: 3B:41:8A:4B:83:B4:AA:09:6E:3A:AB:D6:DC:72:DE:88:FA:F8:F5:EA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C0F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/O0GKS4O0qgluOqvW3HLeiPr49eo.roa
Signing time: Thu 16 Jan 2025 23:55:03 +0000
ROA not before: Thu 16 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3087 (0xc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 16 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3B418A4B83B4AA096E3AABD6DC72DE88FAF8F5EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:9e:b3:55:a1:b4:1a:9d:70:b9:95:26:d5:
21:9f:74:f9:12:1f:c7:1b:af:0c:b2:ab:51:86:2f:
f7:33:64:ab:bc:34:68:7c:f1:5e:ca:bf:7d:c6:6e:
10:41:fb:b1:f3:2c:cd:52:9f:22:ed:5b:6a:4f:4a:
9c:7c:b9:8e:9d:11:0f:d0:fb:32:85:4e:d4:de:03:
e2:49:5a:20:01:52:29:76:3c:ff:ef:ab:8e:1f:41:
33:06:10:8b:0e:ad:56:bb:90:63:ba:d4:3f:d2:74:
30:e0:7b:56:dc:d2:5e:cf:09:de:51:71:03:98:cb:
ce:21:46:3e:a2:9d:f5:a4:43:0e:31:1b:54:61:a4:
17:10:49:77:cf:b5:f3:b8:92:34:de:b1:e2:47:1d:
40:bb:a5:cb:4f:d6:cc:96:10:ba:d1:e1:45:24:7b:
06:d0:06:61:2c:d5:59:9f:e8:0e:9f:aa:bf:02:8c:
a6:27:eb:7d:03:1f:52:c2:f3:c2:2a:48:f0:da:15:
77:4c:f0:d0:b9:ce:3f:1a:6b:2e:f6:f0:f9:52:e0:
b9:cf:85:04:b3:8e:d2:56:df:b9:9b:b8:7f:a4:dd:
fb:96:2b:c7:5f:10:6d:c0:a6:bf:a1:9d:f5:d2:b7:
5e:0d:4d:f4:2a:5c:cd:9b:a4:2e:0d:49:44:ff:90:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:8A:4B:83:B4:AA:09:6E:3A:AB:D6:DC:72:DE:88:FA:F8:F5:EA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/O0GKS4O0qgluOqvW3HLeiPr49eo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:a2:48:f5:33:f8:19:14:a5:f4:fc:53:74:30:83:d5:3e:e5:
b2:64:39:75:b3:fa:41:79:21:9b:3d:0a:21:b5:5b:aa:81:f8:
36:42:8f:5b:eb:bc:cc:cc:7f:e5:01:0d:09:e4:e5:f0:c6:83:
5a:2e:f4:ff:87:f2:40:f8:90:a6:11:72:9b:15:8d:81:06:d2:
fb:2d:ba:ab:d3:7f:79:23:2d:86:e7:61:1f:ce:7f:9b:e9:64:
84:a3:37:c6:6f:7e:23:4d:68:87:3d:70:61:9e:09:e2:ba:1a:
3b:92:9c:a9:4d:06:90:d6:ad:1a:f4:7e:41:a0:08:2c:14:5f:
dc:76:00:5f:e9:6a:f6:c7:ae:d5:af:c8:9a:24:10:58:3f:1e:
90:7a:26:e9:e1:84:d5:d8:8e:85:21:eb:7a:a7:34:29:38:da:
bd:b4:5e:1c:e4:27:cc:e5:0a:ae:ee:17:22:0f:55:15:8f:95:
0c:d1:36:48:2a:44:00:16:48:78:4f:38:c9:f9:15:65:8d:4b:
a2:f9:22:97:5b:51:16:a2:14:2f:dc:39:a7:89:ef:e9:35:47:
2c:b1:bf:b1:e6:49:da:a1:9f:0d:2f:6d:6b:0c:2d:21:88:52:
12:a5:76:5e:9f:9f:b0:f9:ef:89:e9:db:96:2f:0e:37:3f:f9:
39:41:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:39:56 2025 by rpki-client