Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/UhUUyeDlGUH2qY9cB-jqEMegy74.roa
File: UhUUyeDlGUH2qY9cB-jqEMegy74.roa (raw, json)
Hash identifier: FXGEeswPzZKi41BR8ouqv2yFgR4R+7pMhlqADV91T5c=
Subject key identifier: 52:15:14:C9:E0:E5:19:41:F6:A9:8F:5C:07:E8:EA:10:C7:A0:CB:BE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C4B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/UhUUyeDlGUH2qY9cB-jqEMegy74.roa
Signing time: Thu 23 Jan 2025 15:55:03 +0000
ROA not before: Thu 23 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3147 (0xc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 23 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521514C9E0E51941F6A98F5C07E8EA10C7A0CBBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:26:d1:e2:43:27:7c:7f:3d:2e:f9:4a:d3:
e9:85:75:c5:0e:56:47:1c:e8:0c:7a:ce:e6:88:9e:
5c:7d:dc:c4:56:27:20:76:2d:f4:ee:f5:46:9c:07:
c5:96:70:88:e0:ac:45:6d:73:9d:9c:dc:71:24:cd:
1b:0f:ad:59:ff:4b:f3:0b:3a:e7:80:6b:66:6e:aa:
28:60:c6:de:d0:9a:5b:a1:e0:1c:9e:57:ff:d1:38:
26:d7:59:f3:c1:83:61:dc:30:d6:ce:0e:08:d7:d6:
c5:f4:5f:d6:1f:ed:f3:09:f1:a4:81:4c:f9:83:9b:
f2:be:3f:c0:60:89:13:f6:13:a6:5b:ad:f7:3b:af:
bd:89:a4:60:29:77:35:d0:43:6f:da:55:65:d0:f4:
1c:d7:0e:c7:5d:f5:f5:b9:2d:93:fd:19:92:1a:2e:
04:b3:72:a2:b9:5a:64:76:02:95:1e:28:01:d0:ce:
cf:b0:1e:60:b3:a6:9c:5e:4d:30:fc:39:f7:b5:17:
e0:77:56:32:cf:53:35:5f:c4:21:e5:b1:87:b4:15:
af:b8:bc:b5:97:70:a1:48:c7:a5:0b:12:61:58:d2:
8f:3c:80:13:d4:b5:f3:dc:7c:f5:8a:2c:d9:0d:57:
2e:9c:4c:90:c4:a9:e0:ce:37:ad:8d:cd:47:3a:bd:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:14:C9:E0:E5:19:41:F6:A9:8F:5C:07:E8:EA:10:C7:A0:CB:BE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/UhUUyeDlGUH2qY9cB-jqEMegy74.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ab:85:12:af:66:5e:28:52:8b:f2:f8:6c:27:dd:38:42:be:
55:46:4c:4a:08:b4:d0:ce:ee:fe:c2:f5:de:73:a9:15:f6:f4:
39:08:eb:e9:03:3f:9b:43:d3:d2:8c:b8:00:8b:b3:20:f3:43:
35:48:1e:95:b8:d7:55:6d:fd:ff:06:aa:a5:0b:6f:16:cd:e5:
f3:89:63:d9:1e:50:5f:bc:f1:d3:bc:9e:10:91:2d:32:bb:40:
5b:40:2e:19:51:3f:71:fe:bd:58:36:56:8c:1a:e4:76:6a:67:
62:b7:57:17:28:79:90:e8:37:b3:d0:d5:67:3a:b5:ec:ea:b6:
5a:7d:99:72:0f:a8:5a:66:9b:e0:7d:f0:f0:74:11:e3:18:d9:
95:29:a8:c5:98:cf:7b:eb:65:c5:82:66:a3:c7:5b:eb:d4:89:
46:96:3a:f2:5f:32:3a:85:ab:14:71:2a:af:2d:d5:4d:c8:34:
6f:4d:77:56:7c:62:1c:c4:7c:6d:87:bb:08:bb:a6:13:b8:b8:
e9:e4:fb:fe:ce:15:58:27:14:28:46:f9:13:e5:3a:78:8a:7a:
6c:04:33:47:0f:5c:ba:85:9c:ce:54:29:25:34:71:23:71:66:
29:08:b4:72:28:0c:4d:09:a1:83:77:ae:fa:8e:d0:2a:a2:07:
be:f3:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:56 2025 by rpki-client