Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/W1v3YY8dXYlH9qOhcnNZATMZXJI.roa
File: W1v3YY8dXYlH9qOhcnNZATMZXJI.roa (raw, json)
Hash identifier: kpflN2sy9HI3zhXeJuAv8K8fkHjDxbxJB3uOyqf2f7w=
Subject key identifier: 5B:5B:F7:61:8F:1D:5D:89:47:F6:A3:A1:72:73:59:01:33:19:5C:92
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C57
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W1v3YY8dXYlH9qOhcnNZATMZXJI.roa
Signing time: Fri 24 Jan 2025 23:55:03 +0000
ROA not before: Fri 24 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3159 (0xc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 24 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5B5BF7618F1D5D8947F6A3A17273590133195C92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:ce:3e:75:c1:1b:30:db:ff:67:18:c5:b4:
1f:f1:b6:ba:d9:d9:37:41:44:e6:41:50:aa:5f:54:
b5:8f:02:47:22:bc:03:8f:f9:a4:21:22:77:9b:6d:
ba:7b:23:8d:ea:3f:13:76:e4:f8:27:c1:e5:ba:2f:
ca:54:57:b2:60:7f:83:cd:5e:3d:0a:33:15:aa:f7:
19:13:2b:da:95:b5:db:4a:53:dc:ce:9d:0f:6d:aa:
9d:9f:7d:f6:46:a2:04:67:69:d1:22:5b:16:fb:3f:
c7:41:29:c0:c4:b1:9a:22:62:69:15:e9:2c:2e:11:
4f:35:a3:ff:c7:ac:60:71:3a:c9:23:7f:9f:91:cb:
f9:c0:75:ba:a2:71:60:9e:8b:bc:5b:6f:af:06:52:
7e:f0:22:e9:ec:0c:f3:91:e5:6e:05:f6:c2:70:16:
0d:e1:b1:d7:b8:93:97:84:41:c6:a8:c5:51:60:b6:
15:de:fb:52:bb:e4:89:1f:07:ef:57:48:35:32:71:
fb:15:53:d2:ec:0f:2c:0a:f0:7f:9a:3c:98:e4:14:
68:ce:be:4a:7e:96:3f:bc:94:53:94:cb:bf:22:31:
c6:db:75:0d:8d:0a:91:b6:70:65:3d:c2:22:aa:cc:
0a:f5:88:4e:11:e5:c4:e6:0e:62:26:b6:54:3c:b6:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:F7:61:8F:1D:5D:89:47:F6:A3:A1:72:73:59:01:33:19:5C:92
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W1v3YY8dXYlH9qOhcnNZATMZXJI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b6:63:2a:79:a7:6a:82:be:a9:5d:4e:2a:d0:0b:16:41:fb:
14:2b:ca:d8:31:45:2b:7c:7f:d0:9c:6f:94:d9:e4:19:f3:14:
94:01:e2:0f:6c:5a:df:43:ed:c3:f9:c1:4c:7d:c8:e6:f1:a9:
a3:ac:8c:d2:70:02:88:68:f5:e3:b0:99:62:15:18:33:7a:bf:
ae:6a:67:64:cf:52:16:16:b5:72:0c:35:77:5f:06:07:a4:11:
85:9e:9e:70:37:d2:58:79:b0:08:d5:ec:a8:03:af:16:7c:69:
06:81:73:96:12:e8:7f:4f:63:40:c3:ae:fc:f5:0b:b7:4a:9e:
05:68:7a:21:d1:1f:71:a3:a7:0b:0a:01:6b:a0:c7:28:57:94:
7b:ed:7b:eb:7e:c0:13:d3:c5:52:2d:5c:b0:fd:c2:75:e9:49:
45:59:a3:cc:f4:c4:bb:21:9f:f8:5c:51:4e:73:88:d3:5e:69:
d9:33:4f:8f:79:7e:db:1d:c5:ac:38:fe:d9:ad:42:5d:b2:13:
c7:2f:0e:fd:74:ab:32:4c:44:a7:51:aa:e3:08:b0:c6:28:a5:
88:8c:fc:eb:c6:8f:b8:d8:bf:50:c7:b7:a9:53:eb:da:73:14:
a0:6f:d6:ad:80:f6:f5:6e:1e:62:e0:da:47:3b:1c:e3:3b:5f:
3c:ee:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:42:58 2025 by rpki-client