Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Ps10_iIEg8MI2K57tnkBs8P906w.roa
File: Ps10_iIEg8MI2K57tnkBs8P906w.roa (raw, json)
Hash identifier: nYS6OYCNDtlQYwkulf3SBbFe20TQZGRPmWPACCErtHU=
Subject key identifier: 3E:CD:74:FE:22:04:83:C3:08:D8:AE:7B:B6:79:01:B3:C3:FD:D3:AC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C8A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ps10_iIEg8MI2K57tnkBs8P906w.roa
Signing time: Thu 30 Jan 2025 15:55:04 +0000
ROA not before: Thu 30 Jan 2025 15:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 30 15:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ECD74FE220483C308D8AE7BB67901B3C3FDD3AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:43:b8:d2:f7:95:b0:b9:38:56:80:55:2a:
80:26:19:79:0c:83:5e:a6:b3:b1:1a:29:9b:fa:f4:
98:cb:41:05:53:7e:de:b4:0a:0a:8c:a7:e0:fe:d1:
9b:95:c7:2f:5c:dc:a7:21:25:fd:6b:3a:42:f9:03:
de:b5:d6:27:8d:cb:9c:1b:78:7e:df:fa:4d:ff:24:
83:74:63:af:0c:8a:7e:19:c5:2b:36:9f:cb:1a:b0:
f3:3a:c4:a5:ef:ec:17:1a:0c:d1:df:5f:70:2e:55:
e1:96:d8:9e:37:2e:fb:17:4c:93:2c:31:d1:f2:26:
73:f5:4b:98:09:aa:59:56:cf:f7:0d:85:d3:6f:98:
e1:cd:d4:8f:95:ed:aa:b6:97:1f:15:a7:72:f7:18:
07:c5:e5:8f:71:51:b9:a4:38:cd:f0:aa:e3:98:57:
bf:49:1b:8f:ab:a3:1c:6c:4b:6d:7b:47:a8:c2:56:
bd:0c:73:15:d0:f0:63:73:b6:8c:40:48:3e:d4:48:
65:68:62:d8:6b:20:51:0d:b6:e5:4c:23:64:e0:26:
25:13:9b:f6:a9:0e:fd:00:ea:5a:90:03:7f:72:b5:
98:2c:5a:59:7f:a5:8f:18:de:dc:f8:cc:8d:c3:4f:
a0:3a:23:a2:13:c3:85:75:f3:42:0c:55:fd:83:de:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:74:FE:22:04:83:C3:08:D8:AE:7B:B6:79:01:B3:C3:FD:D3:AC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Ps10_iIEg8MI2K57tnkBs8P906w.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:81:2c:02:1b:e7:f6:c7:73:c0:30:88:64:58:eb:60:69:7c:
c5:c2:b8:1f:ca:e0:9e:8e:aa:b9:40:74:46:3b:91:e0:87:a2:
a0:23:67:c8:2d:1c:3b:39:d7:fb:10:cd:73:04:9c:83:66:7d:
58:52:1d:b3:fc:ec:ca:15:27:82:30:47:f1:b4:7b:db:1e:81:
3f:44:29:12:ba:13:a6:30:a5:d0:9f:53:5e:76:c8:67:90:8e:
20:fd:55:69:1e:b1:42:2f:ec:87:ee:67:f4:a9:68:bc:0d:5e:
86:0c:c9:c8:2e:cd:cc:fc:3b:91:de:b2:e8:c3:30:c3:94:b1:
17:29:da:1c:f7:ae:d1:b2:be:a8:41:34:1c:52:ce:4d:34:d2:
10:14:61:3c:13:a5:d1:71:ce:e9:97:2e:b1:9d:44:c3:2a:28:
07:e7:6c:01:6f:c0:f4:0e:13:1f:27:ab:7f:6c:6c:c5:57:7a:
94:36:5f:4b:61:9c:99:c5:70:5d:d9:8a:30:0b:6c:47:8f:66:
16:06:b1:3e:9e:1d:a5:c8:b2:d5:e8:06:59:31:05:f0:d3:9b:
71:d0:89:b1:db:ea:33:c4:04:16:25:4b:5a:b9:cf:b6:04:a0:
09:80:ed:4a:93:69:03:a5:f7:77:99:b9:3b:89:ef:6b:5a:ef:
b1:28:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:46:02 2025 by rpki-client