Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/PKT_DjlU6SylDI1YlDBqpePGdNQ.roa
File: PKT_DjlU6SylDI1YlDBqpePGdNQ.roa (raw, json)
Hash identifier: iz6x9KqroNDvLTsEbLIhPQiv9PKGFNavOCzaEE/HeWA=
Subject key identifier: 3C:A4:FF:0E:39:54:E9:2C:A5:0C:8D:58:94:30:6A:A5:E3:C6:74:D4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C81
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/PKT_DjlU6SylDI1YlDBqpePGdNQ.roa
Signing time: Wed 29 Jan 2025 15:55:02 +0000
ROA not before: Wed 29 Jan 2025 15:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 29 15:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3CA4FF0E3954E92CA50C8D5894306AA5E3C674D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:56:00:35:e0:a2:30:13:9b:53:e0:86:bd:
94:65:fb:3c:bd:e4:a4:eb:10:67:54:23:41:bc:3e:
8a:ee:11:c8:49:d6:df:66:2d:24:15:cd:fa:d8:72:
73:2b:59:23:1c:ad:18:4a:53:49:32:f8:7a:0a:3f:
38:a7:ae:1d:ee:66:15:4d:39:27:0b:23:f4:6e:18:
48:3c:79:7b:01:af:d5:fc:a5:0b:55:b4:10:8c:e2:
9c:e8:d3:db:28:78:b3:68:2b:80:87:f3:e6:91:96:
26:e2:10:c6:ce:38:d8:07:81:3b:53:a5:34:dc:7f:
f2:14:76:cb:a2:1d:55:6e:61:42:19:c1:bf:dc:95:
fc:cc:f2:43:4f:2e:e4:7b:3a:f1:17:1b:1a:fc:5e:
b6:84:06:21:9a:1a:0e:ba:2a:41:94:00:14:63:97:
a3:b4:fc:ad:60:c9:2b:75:b0:4a:69:92:bb:7d:cd:
2f:9c:45:53:dd:02:5e:c8:17:9e:e7:45:b8:ec:db:
bc:09:a3:c9:fd:16:27:b3:c7:e7:68:75:5e:35:d6:
17:5b:1e:e3:f6:2f:04:0e:f2:9f:44:d6:93:58:29:
5e:18:b8:87:85:eb:d7:7b:00:85:31:28:95:77:23:
2c:67:b1:cc:8f:14:3b:9e:12:d0:5d:7e:f6:e2:13:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A4:FF:0E:39:54:E9:2C:A5:0C:8D:58:94:30:6A:A5:E3:C6:74:D4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/PKT_DjlU6SylDI1YlDBqpePGdNQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cd:eb:7d:4b:ab:82:b0:aa:4f:8b:e3:57:d3:cf:a7:07:76:
2b:12:92:3a:db:95:38:4c:97:3f:7d:6e:d7:9d:41:7b:d6:6a:
30:20:cf:a9:cc:fa:be:e1:c2:53:bc:74:30:54:88:6b:50:39:
a9:0d:01:46:6c:05:fb:28:82:c0:d4:58:1d:9b:9c:c6:b2:2b:
e3:27:5c:7f:cf:44:0f:c8:27:cf:56:85:04:24:ea:b2:ba:ea:
8e:80:6b:ac:2e:0b:7b:e0:3d:6a:7e:20:e5:ce:e5:75:86:67:
02:20:d1:c6:4a:b6:95:34:83:60:89:ee:12:38:9a:6d:f0:09:
3c:56:ec:55:47:0c:81:4e:01:3c:01:45:6b:a1:7a:da:5c:be:
72:fd:04:f0:22:8f:69:c2:89:29:86:f9:a9:7a:eb:95:b8:25:
74:e9:0a:d2:07:ea:a0:95:e6:17:cf:4a:1d:b6:cd:8f:73:45:
ba:61:14:06:34:c4:a5:f1:81:10:11:fd:03:b6:1e:ab:20:c4:
c9:f9:48:6c:a3:7f:0c:84:37:1d:f2:3f:97:9d:03:a7:8f:44:
57:09:db:49:0f:66:0c:48:fb:84:49:8b:8a:10:45:69:b8:10:
1d:74:8b:5c:23:b9:19:9f:34:16:8b:dc:87:0b:48:d4:a1:0f:
a8:63:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:23:00 2025 by rpki-client