Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Pwn9IOdwb3vDKAlL4fyTUTmsZI8.roa
File: Pwn9IOdwb3vDKAlL4fyTUTmsZI8.roa (raw, json)
Hash identifier: g5rJyBLxizThkLnhWe2I+FuHT1iE+Jf5HXzPFvKN5IY=
Subject key identifier: 3F:09:FD:20:E7:70:6F:7B:C3:28:09:4B:E1:FC:93:51:39:AC:64:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AB8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Pwn9IOdwb3vDKAlL4fyTUTmsZI8.roa
Signing time: Mon 09 Dec 2024 23:55:02 +0000
ROA not before: Mon 09 Dec 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 9 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3F09FD20E7706F7BC328094BE1FC935139AC648F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:ca:c3:d3:95:20:bb:45:61:76:73:71:08:
3e:fc:6e:b9:ea:88:ea:ea:6f:01:be:2d:86:e3:67:
37:55:37:cc:4a:a9:7e:c3:96:d4:37:5c:ba:a8:77:
4b:58:83:09:c0:d9:e8:8f:38:3d:42:a7:e4:96:1c:
21:22:40:8a:4c:ae:d2:0f:5a:0e:aa:74:a0:4e:da:
0c:5a:22:7d:46:7d:93:7c:9e:8b:51:4e:cf:83:60:
00:3f:fd:0f:ea:72:9f:23:36:5c:8e:2d:96:06:a1:
b6:59:4d:ed:ba:d4:94:42:2c:ed:82:c9:a1:03:14:
66:02:f3:33:5a:4f:e5:54:ef:56:fb:ae:cf:f7:18:
f7:b3:da:3b:58:2f:d0:46:94:11:5e:ea:08:d1:26:
1a:70:c0:72:f6:72:25:61:65:c7:cf:26:00:61:9d:
ea:8d:5f:28:d1:7b:a2:6b:c5:ac:a7:90:2b:31:07:
b9:51:d7:17:ff:70:aa:d2:bb:54:b2:b5:50:9e:68:
7e:dd:49:a1:90:53:46:e9:6f:09:7d:d9:b4:19:1f:
5b:a1:6d:af:bf:22:f2:15:8f:1f:70:a0:8e:71:ea:
34:4b:a6:db:92:ba:76:0d:6c:0d:6f:4d:eb:52:ab:
09:47:c4:96:50:ac:57:e6:76:fe:30:11:9f:9c:1f:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:09:FD:20:E7:70:6F:7B:C3:28:09:4B:E1:FC:93:51:39:AC:64:8F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Pwn9IOdwb3vDKAlL4fyTUTmsZI8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
79:17:3f:1f:89:38:a8:8f:f8:76:29:f9:a3:fd:37:d3:56:be:
fd:77:cb:08:43:18:3c:f0:81:d7:9a:73:a3:9d:21:9b:1c:1a:
95:c8:ab:fe:93:c3:6e:40:3b:52:0c:46:f2:d2:df:c4:f1:fd:
62:c3:84:fb:24:2e:a9:18:14:68:a9:e7:26:ff:cc:64:11:d5:
c0:44:74:dc:3b:6d:78:e0:a6:3c:25:0b:21:ac:6e:1c:b9:5c:
2d:87:8d:53:cb:7a:0c:7a:3b:ee:62:ae:69:b2:d6:a4:60:19:
e5:5c:14:bc:df:32:6a:16:0a:09:28:4f:d4:77:16:70:92:70:
76:64:20:be:15:9f:31:84:fe:06:f0:72:dc:cd:3c:ec:e3:06:
a9:a6:89:7e:f2:a5:ff:8f:07:4e:90:4f:cd:0b:2b:b1:3d:96:
a7:69:62:7a:ef:d1:67:c4:7d:be:d8:65:cf:69:89:6e:f9:f7:
b8:eb:7b:24:2f:67:2d:db:40:4e:96:01:d4:51:29:6b:bb:1b:
92:28:62:ff:df:05:c9:a9:a8:dd:3c:e0:b4:fa:04:f7:ac:f9:
0e:fb:87:b8:8e:f9:4a:df:a5:d0:11:f0:15:93:75:39:03:27:
f0:87:2e:d9:d5:8b:48:3b:93:2f:33:76:80:2d:bb:ce:c6:82:
0b:e1:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:47 2025 by rpki-client