Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/V76CUbT-i6jVxbdxu6rv3Q1-M_E.roa
File: V76CUbT-i6jVxbdxu6rv3Q1-M_E.roa (raw, json)
Hash identifier: k8vGCYoKGa8BUqOfa07ISnQYRv0AEusFRU2DMUQP9Vs=
Subject key identifier: 57:BE:82:51:B4:FE:8B:A8:D5:C5:B7:71:BB:AA:EF:DD:0D:7E:33:F1
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A4F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/V76CUbT-i6jVxbdxu6rv3Q1-M_E.roa
Signing time: Thu 28 Nov 2024 07:55:03 +0000
ROA not before: Thu 28 Nov 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2639 (0xa4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 28 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57BE8251B4FE8BA8D5C5B771BBAAEFDD0D7E33F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:97:38:cd:4d:5f:8d:e7:44:1d:b6:c7:f7:
d7:f3:ed:14:e0:39:ef:57:ab:60:e9:5d:88:a3:93:
c4:c1:b6:89:6f:3c:39:1c:3e:98:ee:de:fa:3d:db:
7d:0e:d5:dc:18:4a:06:e3:97:dc:23:bf:bb:12:51:
af:d9:7f:50:6e:02:e9:bf:ba:a7:93:04:39:50:7a:
ba:ce:5c:5b:65:3d:dc:48:b1:95:86:7a:32:69:aa:
8e:17:52:23:91:e1:d3:fd:d9:03:e4:be:38:90:47:
c9:aa:42:92:64:d2:a4:ca:83:17:2b:06:bc:30:62:
20:c3:e2:81:08:0c:31:1d:dd:b1:04:75:ff:45:d6:
63:f3:ca:d0:80:d6:97:1a:73:78:fb:8e:d6:25:e4:
6b:5e:0c:ee:1b:1a:a3:de:fe:04:4c:e0:79:54:59:
0e:6a:1d:e5:38:cf:31:d9:83:a9:2a:e9:be:c3:fb:
a4:16:c5:61:1b:78:2c:09:30:29:80:d5:b1:52:be:
cd:34:dd:2a:fc:70:eb:e3:ee:0e:70:85:ab:b0:a2:
d2:51:d2:61:59:c7:90:84:b4:99:1a:4d:30:31:c8:
e4:2d:24:aa:fb:ab:b3:a3:48:1e:62:cb:0d:e1:b9:
d8:97:cb:cf:f5:e5:42:93:ad:22:e3:cb:f0:c2:f5:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:82:51:B4:FE:8B:A8:D5:C5:B7:71:BB:AA:EF:DD:0D:7E:33:F1
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/V76CUbT-i6jVxbdxu6rv3Q1-M_E.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:c2:9e:f0:a6:8c:1f:26:db:af:7b:6c:ca:9d:c0:22:76:28:
15:59:13:9c:52:17:60:32:0b:bc:a4:f1:51:50:9f:5b:bd:58:
34:2b:15:e9:4e:9c:e2:5b:0f:86:27:0c:17:15:ca:03:48:87:
13:f4:be:2d:99:37:c4:08:b8:e4:17:f4:bb:b9:63:53:f3:77:
39:34:7f:68:d7:87:58:c5:ab:50:d9:60:34:08:50:2f:a0:38:
e0:14:49:86:56:d3:5b:34:68:77:63:1f:0b:ad:c0:66:e2:37:
3c:51:4c:36:7f:be:c6:c3:54:a0:40:da:67:33:74:2c:1e:da:
90:a8:81:8b:2e:4e:d2:29:98:ef:42:22:84:cf:b6:ce:57:bd:
6d:5b:7e:e7:b0:6e:33:79:d6:97:76:d8:f0:19:4e:be:56:0a:
d1:f7:88:89:a7:f0:f6:7e:02:53:6c:9d:e1:cb:50:c0:2e:fd:
a9:ec:ee:f9:a5:1c:b5:95:99:7e:b5:6d:02:bc:49:21:98:ee:
84:57:60:2c:e3:33:e5:0e:d9:11:e4:74:32:cd:74:62:4e:2e:
1d:6d:c1:7d:9e:df:05:d4:89:05:d6:ab:21:86:55:74:0c:44:
a4:eb:b5:00:1a:2d:43:e5:96:a9:0c:d9:ea:62:9c:67:9e:d4:
a6:1a:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:39 2025 by rpki-client