Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VZdQrAPtjmzZL3ciBKDWHbLlcZ0.roa
File: VZdQrAPtjmzZL3ciBKDWHbLlcZ0.roa (raw, json)
Hash identifier: jslsOEz9PGXnp81+z2+sCWpvyuFWkeURDpfdMtvWCD8=
Subject key identifier: 55:97:50:AC:03:ED:8E:6C:D9:2F:77:22:04:A0:D6:1D:B2:E5:71:9D
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BCD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VZdQrAPtjmzZL3ciBKDWHbLlcZ0.roa
Signing time: Thu 09 Jan 2025 15:55:03 +0000
ROA not before: Thu 09 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 9 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=559750AC03ED8E6CD92F772204A0D61DB2E5719D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:2c:e2:57:47:d7:5f:b0:40:03:5b:6d:3c:
45:12:4b:52:ae:84:60:44:a7:63:1c:c8:40:64:77:
1e:10:82:26:4a:4f:db:24:65:d6:47:54:f1:b2:b0:
28:a5:83:9c:1c:db:ec:2a:91:e0:e3:20:48:15:6c:
4e:2e:8c:90:d6:b0:c5:d6:b2:8d:b5:01:9b:e6:e0:
7d:30:85:14:f0:7c:df:b1:95:85:1c:2b:79:fc:e4:
e4:23:c9:d3:55:4f:e3:17:b1:f4:66:76:ff:09:ad:
95:98:1e:aa:50:48:e7:9e:17:de:99:fa:d7:5f:67:
b0:03:88:15:af:34:99:33:ca:fe:65:82:4e:a5:2b:
00:50:00:79:99:b5:98:71:26:e9:73:df:91:7f:3b:
8b:36:9e:29:5f:22:97:7d:02:73:bb:53:ff:c0:17:
c8:29:07:64:98:ae:d5:85:4a:3d:45:c0:d4:9c:80:
9f:79:51:94:c1:79:3e:07:d8:6c:9a:75:55:36:e6:
49:37:1c:af:1a:9e:a5:9d:5c:a7:bb:9a:8c:34:4b:
74:de:9f:6d:3d:3b:8d:81:49:7d:36:a3:58:c1:35:
a6:48:f6:d7:d6:d0:21:e8:0a:68:49:2c:bc:41:5a:
0b:95:37:7c:ac:f2:2e:c8:74:38:ed:10:e1:38:31:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:50:AC:03:ED:8E:6C:D9:2F:77:22:04:A0:D6:1D:B2:E5:71:9D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VZdQrAPtjmzZL3ciBKDWHbLlcZ0.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6f:a1:50:18:98:27:8e:da:62:58:07:cd:99:b0:4b:3e:b3:
44:25:d4:cf:52:6f:29:97:d7:aa:70:bb:15:ce:a9:7a:92:a0:
1c:fc:fd:d3:84:76:e3:93:40:95:31:aa:5e:1b:d4:6f:60:c3:
4d:4b:60:ae:e3:97:3f:d9:e2:0e:1f:f9:a3:ad:76:c1:d1:db:
d6:b7:a4:80:5b:ea:e5:22:d0:6d:26:d9:da:e9:93:04:a7:ae:
fb:75:2a:27:5e:ca:40:59:8c:5c:4a:53:22:76:a2:7d:f8:b7:
b9:2c:d0:d1:7d:3f:af:e8:5a:b8:8a:28:fb:37:62:8c:70:54:
ac:8f:7f:86:82:bb:a0:e8:08:3b:5c:fd:4b:3e:0e:08:0a:c8:
46:63:2a:24:a0:63:d8:0e:4c:be:70:f1:ac:2f:00:bf:95:67:
95:0b:23:cb:1d:ae:fc:be:ff:ce:a1:2e:fc:46:db:66:8a:b9:
d5:a6:54:64:07:5f:f6:79:e8:64:da:2d:03:7c:4c:e0:bd:70:
f8:f3:61:32:eb:1e:7f:9e:34:4e:22:b4:31:44:5e:ce:86:31:
98:94:32:04:8d:28:12:71:d8:bf:c0:b4:8e:35:60:05:35:09:
bb:55:32:fc:76:fe:70:5f:2c:33:f4:d2:7e:b2:90:cb:b8:21:
c0:cf:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:45 2025 by rpki-client