Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/OESTnPaRC1Cb5ISIJ2sdvS1W6XM.roa
File: OESTnPaRC1Cb5ISIJ2sdvS1W6XM.roa (raw, json)
Hash identifier: rvMiCQk6ZBYw8Nbfm9mEieAltShCepMnH6KZ6ZwPMDo=
Subject key identifier: 38:44:93:9C:F6:91:0B:50:9B:E4:84:88:27:6B:1D:BD:2D:56:E9:73
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B85
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/OESTnPaRC1Cb5ISIJ2sdvS1W6XM.roa
Signing time: Wed 01 Jan 2025 15:55:04 +0000
ROA not before: Wed 01 Jan 2025 15:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 1 15:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3844939CF6910B509BE48488276B1DBD2D56E973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:51:8a:c0:d6:a1:1e:65:75:94:c9:60:cf:
9d:c6:a2:5d:18:8a:94:8a:4c:b4:0d:96:35:ed:06:
c9:31:70:f6:76:0e:4c:de:40:ae:97:0c:82:a0:87:
10:0e:15:a5:4c:b1:ff:1d:fb:24:14:0e:dd:ca:3f:
c7:28:81:e0:39:cb:93:1c:0c:b4:87:18:81:2d:e7:
c8:3a:1d:ae:92:91:99:1b:52:bf:12:60:d3:19:c1:
09:0c:ef:1d:84:39:52:12:45:76:f8:b3:50:15:0a:
3c:fc:14:29:de:f9:e1:d1:6a:1b:31:d3:35:0b:88:
37:3f:57:0e:cc:b0:4f:8a:e5:60:ca:50:29:1b:c5:
31:a9:b2:fa:50:5a:2e:ae:0d:ce:38:ce:51:47:9e:
41:c7:04:dd:c2:d1:3c:de:cf:2a:38:eb:7c:1c:10:
3c:04:46:cf:eb:cf:e6:63:dc:35:6a:fe:c3:3c:31:
fd:bd:0b:bf:0c:d2:7c:59:56:11:7b:4e:58:98:b5:
e4:d6:3e:5e:03:be:c1:93:41:97:bb:8c:33:62:05:
a5:25:e8:d6:96:95:2b:48:df:05:0e:3b:31:6d:af:
c7:dd:0d:0d:74:d1:ad:93:80:8b:b6:04:38:b0:f6:
a1:66:cd:a1:1e:ca:a9:f3:e5:d1:a4:0f:e8:3b:50:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:93:9C:F6:91:0B:50:9B:E4:84:88:27:6B:1D:BD:2D:56:E9:73
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/OESTnPaRC1Cb5ISIJ2sdvS1W6XM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e4:a8:eb:79:a6:7d:1d:d4:f6:5c:98:f1:58:50:f1:c3:e6:
fa:ff:10:aa:54:fb:1d:47:f4:f7:fd:c8:a3:f0:3e:4f:50:f3:
39:06:6c:75:cc:2c:8a:07:d8:7b:e9:47:6f:ec:0b:80:c6:2a:
aa:41:b7:67:3a:1a:5c:47:0b:b5:a6:20:b0:e5:6a:26:6b:1e:
a7:4e:ac:9d:9e:ad:d3:a4:43:ff:2d:5e:d3:c6:01:ff:7c:ca:
d5:5a:3e:db:d7:22:90:2c:69:00:0b:cb:02:76:a2:1f:f0:17:
4d:ed:28:ef:7e:4a:1f:ec:01:c8:2b:b3:b8:c2:82:ee:79:4c:
3f:f3:f2:ee:a9:9e:9c:37:3d:b9:99:3a:58:d9:13:72:e9:7b:
47:f7:df:dd:35:43:2a:cb:db:3d:ca:0a:3f:ff:f9:e0:ac:4e:
3f:23:05:12:56:84:b3:5c:63:b2:2c:02:b4:2d:9a:50:61:33:
6f:6b:80:30:b9:29:10:9f:ef:2a:d0:fe:95:71:e6:85:bf:5b:
fa:82:07:4a:8a:c2:70:da:6f:cb:44:c3:c4:84:90:4f:49:97:
5d:07:83:1b:ff:7f:94:2d:d1:a5:24:de:71:53:db:f3:a0:8d:
b0:20:0b:d8:77:c9:81:77:7b:1d:70:3d:cd:f1:e3:db:a1:f2:
01:cb:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:41 2025 by rpki-client