Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/S3XaQIIZiR7oM41Pro9Ki32xnCE.roa
File: S3XaQIIZiR7oM41Pro9Ki32xnCE.roa (raw, json)
Hash identifier: p0otDXCk5To/I2Oez7aBvofMRt4m8qwe9tCsZ/Rfka0=
Subject key identifier: 4B:75:DA:40:82:19:89:1E:E8:33:8D:4F:AE:8F:4A:8B:7D:B1:9C:21
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0ABE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/S3XaQIIZiR7oM41Pro9Ki32xnCE.roa
Signing time: Tue 10 Dec 2024 15:55:03 +0000
ROA not before: Tue 10 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 10 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4B75DA408219891EE8338D4FAE8F4A8B7DB19C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:ae:12:98:44:eb:06:38:bd:a2:6a:3e:61:
50:54:cc:67:d4:d5:22:43:a8:c6:82:7d:25:55:f3:
d5:2c:e9:c4:bb:8e:3c:f8:55:68:a5:11:44:f6:19:
31:d7:45:56:85:2a:fb:99:77:c4:9a:91:8d:cc:aa:
bd:f4:ef:7c:4e:80:ef:56:e0:23:d9:42:ad:e0:22:
ef:e8:dd:03:24:af:b2:eb:6a:e8:7a:91:1f:6c:de:
46:89:ba:a3:9e:23:e4:ab:10:91:a7:92:21:06:98:
25:e1:12:21:66:80:40:35:63:c2:8e:a2:be:d5:90:
bc:6c:d2:ac:13:05:b0:6d:23:64:05:62:a0:16:e0:
f5:39:25:3e:73:95:86:bd:62:35:04:31:49:5d:dd:
1b:bb:8b:d5:e0:57:d7:42:db:4d:84:ad:8f:16:3c:
0f:fc:a0:16:af:fa:8c:76:81:73:fc:a2:bf:09:01:
da:c8:c0:cc:70:fa:63:21:14:7c:54:9f:31:7f:58:
64:38:6c:5c:86:f3:5a:21:64:27:c7:ea:25:d9:3e:
38:d3:b9:fc:4b:05:16:57:52:ad:29:a0:3c:2c:eb:
13:d5:b8:d6:96:fe:6d:0b:5e:27:c3:95:30:f5:02:
45:b9:e1:93:3a:fb:fd:25:c6:95:05:f0:cc:1e:72:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:DA:40:82:19:89:1E:E8:33:8D:4F:AE:8F:4A:8B:7D:B1:9C:21
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/S3XaQIIZiR7oM41Pro9Ki32xnCE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:48:9b:85:94:17:aa:e5:7a:e4:02:e0:cd:d9:9e:f8:dc:66:
b3:13:96:27:16:87:34:17:17:b2:51:a0:b3:a9:03:b3:f4:e1:
d7:15:30:74:3b:f6:bb:7f:3b:6b:82:13:a8:54:f2:57:df:b6:
53:57:ef:bd:e2:93:de:6c:07:a2:92:b8:1e:c6:b1:76:02:ec:
6c:0a:7e:85:f8:4d:15:a7:0d:d8:66:ad:b8:0b:5c:f3:e1:41:
8e:9a:c1:5a:c6:85:8b:30:b7:a1:ed:40:b8:64:fd:83:93:3c:
26:2c:17:82:92:25:9d:10:64:dc:8a:9c:0a:7d:f9:7e:c9:96:
d4:a9:b8:05:65:05:c3:5e:9c:ff:2b:5a:29:de:3d:a6:12:46:
ba:6e:7d:a2:f3:0d:f2:15:5a:10:1c:cb:9c:23:44:84:72:92:
ac:73:f3:d3:be:40:55:9d:b8:b8:56:6b:3f:91:a4:44:f9:49:
5f:8e:67:b9:3e:88:5d:b2:08:d5:6d:53:bc:3b:e0:0a:ef:75:
52:cf:23:14:3c:be:bd:df:7b:52:43:20:b0:a9:90:40:2f:20:
25:86:56:29:2a:76:f8:26:e8:ee:d1:c0:2f:cb:d4:e2:64:6e:
e1:0d:50:88:0b:bb:04:3e:f4:df:cf:e2:ba:14:d4:f0:f5:0f:
42:89:5e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:41 2025 by rpki-client