Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/R6ccHFn-FuYytVyvPkrxXQjKVP4.roa
File: R6ccHFn-FuYytVyvPkrxXQjKVP4.roa (raw, json)
Hash identifier: figl4d9B+0y37yFbhrBZrQx1Je601stNJTl9ZpUq2fo=
Subject key identifier: 47:A7:1C:1C:59:FE:16:E6:32:B5:5C:AF:3E:4A:F1:5D:08:CA:54:FE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B8E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/R6ccHFn-FuYytVyvPkrxXQjKVP4.roa
Signing time: Thu 02 Jan 2025 15:55:03 +0000
ROA not before: Thu 02 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2958 (0xb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 2 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47A71C1C59FE16E632B55CAF3E4AF15D08CA54FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:ac:4a:53:cd:01:e3:0d:dd:11:80:dd:ca:
e0:7d:2a:82:99:b7:58:12:bc:47:7a:22:49:71:07:
c7:e8:1d:c6:29:a1:85:f1:87:2e:75:69:64:0d:04:
a6:6d:f9:e3:3a:a8:12:5b:8d:82:da:62:02:e2:6f:
dc:39:10:5b:a5:25:98:85:79:ef:6b:95:0a:19:56:
d3:84:e2:fd:fd:2b:59:83:0e:00:a2:09:46:b6:ef:
dd:c7:c4:00:44:f1:16:de:6b:73:09:2a:88:87:c4:
71:43:61:b9:d5:2b:50:d9:ea:00:57:8a:e1:78:8b:
f0:54:36:a9:6f:ee:86:27:79:a3:fa:17:36:99:97:
52:58:dc:2e:66:8d:27:15:f4:8c:58:b5:d3:14:b8:
43:1d:cd:22:24:36:60:29:12:ee:aa:86:ab:72:f4:
32:fc:6c:40:83:f7:54:11:26:bd:64:22:5f:b3:0d:
ef:b9:c8:e7:38:c4:84:fe:3f:fb:bd:d9:26:06:1b:
43:7a:7b:60:87:4c:a4:c9:5c:58:56:96:03:bf:8d:
2a:36:84:cf:bf:cc:7f:a6:a9:db:a8:45:48:5a:c4:
6b:21:2f:e3:70:71:37:f6:54:40:d4:5f:0b:5a:c3:
a7:78:bc:b1:55:22:fb:4d:25:d8:06:23:53:44:69:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:1C:1C:59:FE:16:E6:32:B5:5C:AF:3E:4A:F1:5D:08:CA:54:FE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/R6ccHFn-FuYytVyvPkrxXQjKVP4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5e:88:de:fc:95:c1:a6:25:34:7c:3d:d7:a8:26:0a:4a:4f:
4d:d9:f5:e3:83:b4:28:3e:f1:21:d1:a6:7b:03:ac:82:d9:38:
1c:2a:0b:36:82:5d:e4:55:4e:d1:4f:41:dc:96:30:0a:c9:c7:
16:a0:cd:08:4e:f8:36:96:e7:9d:ea:89:de:4c:c5:7b:36:99:
5f:d9:46:ae:39:de:14:62:54:1d:1b:4f:9f:88:bf:d7:8d:6b:
c2:de:9e:50:d2:11:60:aa:93:4e:1a:57:72:24:c6:60:98:3e:
7d:36:7f:36:bc:c3:71:d8:be:69:e6:ea:46:76:79:8f:75:1d:
a8:06:9e:f9:7f:0a:88:e4:fa:fc:89:f7:d9:4a:6d:f6:cf:79:
e7:31:8d:34:33:84:d8:7c:b6:94:4a:81:54:44:d8:4b:a8:73:
b1:78:35:91:1d:6e:b3:2c:d7:2b:e5:84:24:33:39:6d:cb:3a:
1c:cc:3c:4f:94:a8:85:c6:c1:a9:ab:32:1f:e9:78:6f:8e:f2:
f6:bd:92:98:a3:c5:1f:bd:c5:d6:42:38:57:0d:0d:39:79:da:
80:ae:d9:1d:1a:8d:87:27:35:7d:39:c2:02:cc:8a:be:dc:31:
22:d1:67:8b:5b:9d:94:86:f2:7d:30:4c:0f:29:92:7b:d0:b5:
6c:4c:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:48:38 2025 by rpki-client