Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/R3ia8vpyhbTV1vx6YgA0urCWarA.roa
File: R3ia8vpyhbTV1vx6YgA0urCWarA.roa (raw, json)
Hash identifier: wuspQhAXdqUJm8CKCWqDkLydGxfZLWpm6zfRxKpuuTI=
Subject key identifier: 47:78:9A:F2:FA:72:85:B4:D5:D6:FC:7A:62:00:34:BA:B0:96:6A:B0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BD3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/R3ia8vpyhbTV1vx6YgA0urCWarA.roa
Signing time: Fri 10 Jan 2025 07:55:03 +0000
ROA not before: Fri 10 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3027 (0xbd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 10 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47789AF2FA7285B4D5D6FC7A620034BAB0966AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:f4:59:8e:a0:da:fa:db:55:9a:b1:a5:39:
75:28:8e:06:1b:1c:14:73:82:36:08:6c:9d:0e:13:
e9:10:66:2b:e9:1e:ec:0f:cf:47:90:7a:9e:37:94:
95:06:b6:12:fd:62:df:85:39:3b:15:2a:39:82:50:
02:51:eb:54:e3:ac:2c:ed:5b:2e:b3:c1:86:2c:8b:
27:e1:b1:8d:9b:94:f4:ce:b9:b5:29:95:41:e2:95:
4e:b9:fc:ed:4d:1e:c5:e6:9e:95:cb:f5:0a:20:53:
b3:64:23:e5:e8:32:ab:3e:e7:9e:fb:10:31:3e:c7:
6f:79:86:c8:df:1a:fe:d2:3f:2a:97:6d:02:5f:ee:
9b:07:3e:7d:75:32:4d:28:a5:a8:ac:47:17:df:f1:
c0:a5:25:54:42:f0:ac:96:74:f5:db:0e:67:5f:86:
1f:39:38:f9:ca:98:9e:d7:2e:e4:fe:0a:ac:9b:45:
98:a4:dd:d8:69:77:56:cf:4c:67:f7:41:bd:e1:15:
86:57:0c:4e:40:c9:1b:1b:6f:2c:3d:bd:72:74:03:
06:9b:43:75:d5:94:57:9c:49:07:82:5b:56:5d:6d:
81:0f:65:47:d5:ed:94:d1:19:96:c1:bc:a8:66:b4:
cd:c9:db:26:37:cf:f9:fc:a3:95:81:37:66:19:5f:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:78:9A:F2:FA:72:85:B4:D5:D6:FC:7A:62:00:34:BA:B0:96:6A:B0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/R3ia8vpyhbTV1vx6YgA0urCWarA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:84:66:fb:ce:48:b1:c0:28:ec:be:28:18:fe:2b:23:3a:eb:
f1:0d:f0:ff:36:aa:c5:55:ce:d8:8e:a6:1d:93:71:af:74:b3:
23:4b:a6:5c:8e:d1:da:9b:9c:85:ff:ea:aa:f2:dd:a0:0f:fa:
69:e9:8e:95:fa:e9:cf:b9:88:3a:c0:4f:3a:aa:f4:a6:67:7d:
b7:2c:2a:0a:f3:3a:4b:cb:fa:60:7c:e0:6c:b2:12:b0:c9:02:
4f:8b:ea:35:20:59:aa:73:c0:c8:b1:23:b2:61:59:75:82:75:
05:8c:e3:3d:14:d4:5e:d6:1e:13:e7:0f:38:ce:7b:78:86:1c:
4f:7a:41:b2:71:94:64:c1:4f:18:3a:e7:2a:21:40:14:35:ce:
ad:4b:72:a0:56:8e:a4:44:7d:b7:fe:ca:fd:fc:78:41:68:3f:
f5:f4:90:44:03:9b:8f:e1:7c:79:fe:05:97:d2:f6:8b:0f:d7:
24:b1:13:38:b5:7f:01:bd:67:c4:33:81:5d:35:a1:24:3a:67:
4c:fe:7c:26:96:da:33:f8:e9:7e:2a:0b:0c:1a:18:29:5d:72:
f9:42:34:ba:86:13:d6:a7:82:02:d8:8e:7f:e6:eb:42:79:db:
a5:60:24:02:e2:0f:ca:3b:c1:29:48:fe:64:60:36:14:b7:68:
59:f6:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:02:13 2025 by rpki-client