Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/VxAFnJ2uTNmkNynRlOnrttx9xBs.roa
File: VxAFnJ2uTNmkNynRlOnrttx9xBs.roa (raw, json)
Hash identifier: 2HVsLL6JceiTNraZIylGWLq+JEWu7FgfCPMSOJxv16w=
Subject key identifier: 57:10:05:9C:9D:AE:4C:D9:A4:37:29:D1:94:E9:EB:B6:DC:7D:C4:1B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B00
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VxAFnJ2uTNmkNynRlOnrttx9xBs.roa
Signing time: Tue 17 Dec 2024 23:55:03 +0000
ROA not before: Tue 17 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2816 (0xb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 17 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5710059C9DAE4CD9A43729D194E9EBB6DC7DC41B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7a:0a:79:c4:e6:d7:ff:82:ee:16:64:c6:59:
78:49:85:bd:45:06:d5:a9:ba:65:a4:ad:e6:6f:89:
88:8f:41:b6:c0:49:d9:76:cb:ca:1c:75:68:6a:42:
12:e7:a0:ef:62:0e:43:fa:9a:44:d9:63:32:03:bd:
58:e8:37:99:96:dd:95:b7:3b:4d:a1:f3:56:75:94:
59:ef:23:1c:8d:f1:9c:5e:af:2b:ea:28:b5:9c:a9:
48:db:6c:f9:24:0c:f9:72:22:98:ab:81:b5:dc:94:
9f:2b:78:de:69:f8:16:f4:3b:df:20:3b:8c:03:37:
b2:77:ba:e2:39:f2:d9:33:7d:01:76:6d:7c:e9:ba:
d9:92:08:6b:e5:41:b1:8a:fe:ba:9e:aa:d3:04:63:
d6:d4:90:c9:09:e5:13:97:57:03:27:7a:93:d7:51:
5a:8d:9b:b6:c6:1a:4f:5d:0f:f0:c1:9f:12:7f:8a:
2a:1e:db:7c:47:4f:19:33:41:0f:99:b1:79:59:2a:
c8:c6:3e:c2:f1:e9:7a:77:26:05:22:d8:06:64:fc:
cc:e9:c3:45:04:ac:2e:8b:8a:07:4e:a6:dc:df:e2:
5e:c5:63:8f:a7:95:50:0e:06:57:10:f9:10:df:3f:
c2:ce:77:25:b5:9a:48:76:dd:10:fd:39:89:90:73:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:05:9C:9D:AE:4C:D9:A4:37:29:D1:94:E9:EB:B6:DC:7D:C4:1B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/VxAFnJ2uTNmkNynRlOnrttx9xBs.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0b:2f:56:94:16:3b:14:a3:b0:c6:9d:2a:5e:c4:b2:4b:7e:
39:e5:62:b1:40:cf:2b:9e:14:40:3a:b8:63:42:fa:f4:07:5e:
43:93:e8:5b:8e:db:6d:23:e1:06:4b:37:ab:43:84:fa:07:dc:
93:74:f4:72:ac:c7:dc:72:78:15:c1:8d:f7:ff:0c:dc:e2:dd:
2c:5c:ea:95:26:89:f7:5e:fb:ca:14:a2:9f:39:bb:94:57:79:
78:6e:53:35:49:84:d1:2f:bb:de:61:4a:28:a3:80:ed:db:a7:
27:b9:bc:b4:ec:88:6e:ee:56:f0:e3:ca:ef:53:12:6a:a6:55:
af:94:3d:9b:b3:0f:4c:d1:db:da:fb:20:3c:12:8b:df:b5:fd:
ec:85:b8:62:e1:72:dd:47:de:fc:28:3c:9b:8b:9f:81:76:d3:
13:d0:27:58:11:4f:e3:d6:46:e5:d8:a6:73:95:72:06:a3:95:
f6:a4:d4:82:8f:9c:0b:8b:44:d1:64:48:59:85:ee:c5:66:9d:
be:04:12:98:92:eb:e6:c4:aa:5e:fa:54:22:c8:36:c0:aa:bc:
ed:32:5c:39:19:e9:38:64:37:ef:c6:20:0d:41:8e:a9:1f:48:
fd:55:24:12:de:bb:9c:26:07:0d:f1:73:c1:f0:5d:41:0f:b9:
20:fc:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:44:54 2025 by rpki-client