Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/OQFu592hqDEIcZVSk3e9qsWBTPk.roa
File: OQFu592hqDEIcZVSk3e9qsWBTPk.roa (raw, json)
Hash identifier: ZGtxW1ls/+uHUhCOTz4Ue+P7nNd3NF+hzQ5xRBhGvjE=
Subject key identifier: 39:01:6E:E7:DD:A1:A8:31:08:71:95:52:93:77:BD:AA:C5:81:4C:F9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A5B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/OQFu592hqDEIcZVSk3e9qsWBTPk.roa
Signing time: Fri 29 Nov 2024 15:55:02 +0000
ROA not before: Fri 29 Nov 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 29 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39016EE7DDA1A831087195529377BDAAC5814CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:03:2c:2d:f1:4d:b2:3e:7a:a2:67:44:51:
75:20:c5:b7:ad:93:a8:1d:e3:5b:96:f4:1f:19:b3:
ca:f2:d8:ca:79:29:08:d8:52:02:b8:03:cd:a5:54:
9c:b6:bc:83:00:82:7d:fc:fc:1b:f2:0f:d9:7e:54:
c0:b0:09:ab:bd:0d:6b:3e:b3:fd:35:35:8d:85:d4:
67:b2:5f:fb:6e:cc:05:c3:32:8c:e3:2b:b6:85:8b:
a2:e8:d2:3f:09:75:08:48:b5:e0:1e:74:b1:7f:cc:
56:58:67:57:85:34:a2:2a:a5:f6:7f:6c:32:01:7d:
7c:01:90:ae:80:83:69:84:77:f1:e4:59:ec:af:74:
00:33:09:6b:da:1f:69:3c:1b:29:56:75:14:5e:7e:
ec:f3:87:9f:e2:ff:c3:5a:6a:aa:2b:1f:e9:7b:9f:
c2:2d:de:63:3e:3e:85:a3:7b:a6:a1:37:33:90:ef:
4d:78:eb:32:e3:83:e9:90:67:25:2f:c7:2f:cd:77:
af:fa:88:0a:90:f2:c9:bc:e8:5b:78:9f:43:b9:8d:
5d:0a:d4:e1:ba:8c:76:cb:e2:7e:a6:54:0d:82:28:
3c:62:fa:41:0f:99:0f:17:6f:14:4d:ae:3f:06:f7:
82:00:d3:36:e6:d7:49:e2:ef:f3:6d:9c:13:f2:f2:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:01:6E:E7:DD:A1:A8:31:08:71:95:52:93:77:BD:AA:C5:81:4C:F9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/OQFu592hqDEIcZVSk3e9qsWBTPk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
be:11:a5:06:34:44:57:cd:5b:c3:16:2c:d0:d0:80:e7:8d:c8:
45:98:06:b3:45:f6:fd:f6:41:f1:64:b5:3c:a4:e2:16:00:df:
78:49:f7:72:00:3d:a3:7a:5b:20:88:25:ff:66:ef:4b:2a:b6:
84:3e:27:41:ba:3d:cc:31:88:73:14:9f:03:60:a3:29:86:ed:
63:d2:be:9b:91:ba:3c:06:d8:2c:ce:18:3f:e7:9c:d0:8b:b1:
e5:57:ee:65:6b:76:a4:01:f9:e8:cb:b0:4f:d4:f7:f5:44:4c:
0e:c5:ff:a8:4d:46:7c:b0:6f:a0:27:b0:12:e9:e1:56:96:bc:
f6:6f:e2:81:61:c3:f9:c0:6f:14:58:96:1f:60:83:4b:45:b2:
7c:39:f8:b7:cd:74:15:bb:3e:46:70:88:c9:9d:27:7a:e6:0b:
8e:14:c4:4c:a5:8e:4b:29:c0:03:69:41:3d:1f:bd:1d:79:61:
cb:74:a7:49:97:21:3d:c4:88:75:97:97:a3:3d:9b:6c:f2:c4:
7e:f6:63:49:b3:b4:4a:69:c8:e2:bb:6e:71:1f:ed:51:da:bd:
24:c7:3b:15:7c:e1:cb:1b:57:30:e6:3c:82:9a:c4:7d:b6:10:
99:5c:15:b9:0c:8f:4c:9d:03:e0:1d:90:52:d8:2d:b0:1b:2c:
86:ad:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:35 2025 by rpki-client