Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/PhdKGv7uT8ryWsCIQ3vIgAzJsKE.roa
File: PhdKGv7uT8ryWsCIQ3vIgAzJsKE.roa (raw, json)
Hash identifier: ZT3d83meP1mokgmYyAsOFRhA3jSzG2Cb33nNKK25wWo=
Subject key identifier: 3E:17:4A:1A:FE:EE:4F:CA:F2:5A:C0:88:43:7B:C8:80:0C:C9:B0:A1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B36
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/PhdKGv7uT8ryWsCIQ3vIgAzJsKE.roa
Signing time: Mon 23 Dec 2024 23:55:02 +0000
ROA not before: Mon 23 Dec 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 23 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3E174A1AFEEE4FCAF25AC088437BC8800CC9B0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:39:08:8a:58:4d:09:e8:c0:d2:1a:7b:49:fe:
e6:a5:e6:29:50:2f:4e:4a:bf:04:f0:64:e0:2a:aa:
48:83:58:65:c0:fd:17:82:0c:f9:a9:7f:0f:87:bd:
44:2a:7e:d4:e6:16:e8:e0:90:fe:f0:e1:cc:21:8a:
9f:f6:64:e4:8f:83:b3:66:1a:2e:41:e0:d0:e6:42:
a5:10:d5:06:80:76:47:b3:eb:a0:76:5e:ac:40:cb:
04:a3:ce:d0:f6:99:33:66:56:17:5d:dc:28:92:b1:
19:3b:88:ee:83:56:94:14:42:ee:df:35:44:6a:30:
af:e1:58:f6:46:7a:c3:e2:ef:54:33:1b:00:a9:eb:
3f:8d:c5:92:e8:7d:19:fc:97:71:a5:31:ec:26:2e:
d7:29:f0:29:e0:e2:78:70:c5:e2:be:b3:05:3e:69:
40:26:cc:39:7b:dd:60:e6:65:35:2f:2f:95:9a:49:
86:9a:5e:96:0c:09:b9:70:1b:f0:aa:77:77:aa:3a:
c6:79:b7:28:6b:28:93:c8:de:d0:0e:1d:f6:72:62:
cc:0e:1a:c3:22:b7:fa:6f:88:32:74:25:d6:08:b5:
94:24:2b:1d:66:a4:ca:66:f0:e9:77:fc:70:f3:fa:
44:4f:a6:2e:1f:a4:8c:bf:55:39:5b:30:aa:65:07:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:17:4A:1A:FE:EE:4F:CA:F2:5A:C0:88:43:7B:C8:80:0C:C9:B0:A1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/PhdKGv7uT8ryWsCIQ3vIgAzJsKE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:37:7b:76:a2:b5:ba:36:02:bb:65:1e:6b:44:25:08:b2:0e:
92:bf:58:71:90:e3:67:56:38:57:cf:d7:dc:eb:0e:f9:0d:8a:
8c:6c:01:c4:8f:07:38:09:19:8d:65:43:dd:36:a9:f9:6c:b7:
6a:77:0a:0c:63:74:fc:78:b6:4e:23:19:9c:e5:19:4c:c7:39:
04:0a:92:2a:69:f5:21:1e:25:77:7f:26:7c:23:a7:4d:23:34:
c6:44:cd:5d:d1:ca:52:9e:5f:ad:e1:6d:1a:10:99:26:ae:b6:
fe:8c:9f:6e:2d:7a:08:b7:c1:6b:ec:b6:23:09:09:e1:70:9e:
ac:ac:64:1d:7a:35:02:f9:97:1f:1f:72:e8:d6:e9:70:be:ef:
56:26:68:5e:4f:75:32:68:c5:37:3a:7c:df:4d:f3:23:8b:1f:
4c:3c:ab:4d:09:70:c7:c7:11:bb:4d:ab:ce:e0:ef:e0:43:62:
5a:4d:38:fb:52:e4:f9:50:a6:f2:3a:95:2a:66:23:cd:e5:4c:
27:be:b5:04:a7:8b:c3:fb:f4:d0:e9:7f:35:ad:ac:b0:23:c9:
3e:d4:4e:e4:2b:75:15:c8:80:79:c3:2c:a6:0e:a1:6d:6a:29:
dd:12:c1:c1:da:0c:db:d7:eb:fd:f7:58:ed:57:55:70:00:cb:
cd:d7:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:44 2025 by rpki-client