Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VvAR9yV9XmnpSjdzZDHFHFIGz6s.roa
File: VvAR9yV9XmnpSjdzZDHFHFIGz6s.roa (raw, json)
Hash identifier: y6E3+CgGxtpLKCzOpNsJUR+9QxnkEM+In0mLMTKfwfU=
Subject key identifier: 56:F0:11:F7:25:7D:5E:69:E9:4A:37:73:64:31:C5:1C:52:06:CF:AB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B7B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VvAR9yV9XmnpSjdzZDHFHFIGz6s.roa
Signing time: Tue 31 Dec 2024 15:55:03 +0000
ROA not before: Tue 31 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2939 (0xb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 31 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56F011F7257D5E69E94A37736431C51C5206CFAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:48:b1:62:d3:11:43:3a:34:85:09:fe:9f:
ae:0d:ce:21:cc:33:90:8a:50:0f:5c:40:ae:05:e2:
7d:90:e4:d5:d1:d5:93:29:8f:cf:9a:98:86:b0:02:
e1:87:5e:cc:13:a5:00:ea:be:26:67:79:1a:7c:49:
e7:bd:f5:81:8c:3a:ad:c0:b2:f3:b4:4f:a9:77:60:
fc:1b:57:49:eb:02:35:9c:a5:49:c6:27:43:ad:ca:
9d:02:36:20:da:21:7c:6c:b6:48:c2:df:fe:e7:89:
2c:77:39:e3:3c:be:67:89:ce:5a:b8:67:1a:57:15:
81:f7:59:1b:b9:0f:43:a2:41:ba:e8:4f:48:a9:1c:
c9:36:f5:03:1e:c2:11:95:c3:80:93:11:76:d2:75:
27:46:cb:4f:dd:26:da:3b:39:9d:64:13:36:be:c9:
2a:de:ca:9a:24:47:aa:97:fd:bc:ca:90:af:69:a9:
82:63:07:7e:8e:7a:7d:c3:01:e5:e1:24:08:3e:61:
35:7c:a8:49:9a:d7:58:01:af:e5:c1:ad:c6:63:97:
33:84:91:6d:18:21:0f:dc:b4:b5:e4:c3:04:27:a9:
fd:5a:99:71:06:52:ad:16:ba:78:db:87:92:83:5e:
91:b0:34:a2:10:96:79:4e:40:93:c2:b0:92:f0:b5:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F0:11:F7:25:7D:5E:69:E9:4A:37:73:64:31:C5:1C:52:06:CF:AB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VvAR9yV9XmnpSjdzZDHFHFIGz6s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3b:3d:2f:ea:6c:72:f9:b7:b6:f4:3d:7c:69:57:76:5f:c6:
65:dd:2a:a5:dc:9d:15:58:b7:f2:3e:fa:66:3e:81:12:a4:5c:
66:e5:e0:59:c9:9f:2b:8f:57:f3:0a:a0:d1:39:35:ad:72:e7:
17:83:84:8b:4e:a5:92:2c:dd:89:b7:2c:c2:c4:9f:4a:c7:bf:
6b:4d:15:fd:dc:13:9b:11:6f:2f:44:81:51:ca:3d:04:22:77:
c8:31:06:f1:b6:2d:2a:5c:ca:ca:3b:86:26:0b:7e:53:91:57:
d3:c8:df:55:c3:86:32:57:a5:72:10:a7:5f:7d:94:16:36:1f:
f3:b4:f5:eb:76:92:d0:3a:cf:38:6d:82:ff:40:51:2a:55:ea:
ab:da:92:3e:9c:fd:21:cb:cf:e4:16:78:f8:86:9d:2c:87:b1:
e4:dc:9c:13:ce:7f:35:d8:8e:1f:86:f8:4d:43:cb:ab:86:f7:
49:22:b3:5e:84:d7:0e:9e:54:db:3b:8e:ac:33:a4:08:a0:ae:
99:2e:f7:74:1b:e7:98:fb:33:b7:18:64:07:77:6b:bd:53:de:
f3:7e:ec:ef:70:b7:2a:50:4e:3e:88:ab:bc:3e:36:3d:3d:0b:
1b:1a:d8:67:ea:3a:16:3a:40:01:a0:7d:fb:58:f4:a1:f3:c3:
20:c0:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:10:57 2025 by rpki-client