Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/W7zF_NJ42DKcIAQ6p4ZR4PV-cO4.roa
File: W7zF_NJ42DKcIAQ6p4ZR4PV-cO4.roa (raw, json)
Hash identifier: QtuZREZJS2jqTlB/W6KmFm9bczxZ43wp8EfG9oeRNLo=
Subject key identifier: 5B:BC:C5:FC:D2:78:D8:32:9C:20:04:3A:A7:86:51:E0:F5:7E:70:EE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B75
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W7zF_NJ42DKcIAQ6p4ZR4PV-cO4.roa
Signing time: Mon 30 Dec 2024 23:55:02 +0000
ROA not before: Mon 30 Dec 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2933 (0xb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 30 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5BBCC5FCD278D8329C20043AA78651E0F57E70EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:3b:49:ba:b4:f1:d8:85:61:4f:37:e9:d5:
e7:2d:3a:1b:06:c8:bf:0e:2f:25:bf:fb:27:8e:4d:
7c:55:57:c8:10:ff:36:01:d8:a9:1f:e7:36:17:6c:
21:c4:0f:4f:82:24:3a:16:6c:3b:8d:61:f0:52:56:
b1:db:58:b4:41:1c:d0:cf:f6:df:24:16:5d:2d:47:
4c:24:2b:f9:59:11:c1:f1:4e:ef:ed:d9:19:ae:22:
b2:48:1f:1a:03:d3:50:8d:36:7a:04:6a:e6:02:60:
b8:5e:87:2b:a8:1e:88:51:0d:02:2d:4a:a6:54:d1:
83:f7:13:54:9e:e9:a5:6a:cf:d2:a8:55:83:ec:77:
0a:ed:20:4a:1e:d2:d1:a7:1e:9d:13:9d:89:66:aa:
9a:23:c1:b9:cc:f8:4d:5b:95:7e:49:cb:e4:94:7d:
2b:1f:f2:8a:91:44:72:8b:a9:2a:e7:37:75:70:e3:
6f:32:f5:ed:23:83:74:bc:ed:82:43:f9:01:f8:ef:
4b:18:73:9b:5a:a0:65:a2:08:17:b0:a7:4c:bc:a0:
aa:21:68:c7:37:94:1c:29:42:2f:1a:a4:1b:aa:39:
51:9b:24:74:fa:3a:00:65:2a:4c:02:61:7f:62:14:
24:b0:a2:d1:35:90:5e:99:b9:7a:12:ce:a2:ba:14:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:C5:FC:D2:78:D8:32:9C:20:04:3A:A7:86:51:E0:F5:7E:70:EE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W7zF_NJ42DKcIAQ6p4ZR4PV-cO4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6a:b8:44:83:ca:9b:d1:55:16:7a:eb:b2:2c:60:ac:26:f1:
f4:6c:50:96:13:07:f7:21:ee:10:4c:93:ea:8b:81:ea:f7:25:
20:81:73:bb:2d:ec:de:b5:37:a8:a7:04:2f:ab:16:f9:61:ea:
9b:d2:aa:1d:44:05:36:fb:e1:c0:25:c5:20:bf:6b:84:7a:65:
de:78:af:a0:80:d1:fb:8c:59:89:ea:72:1f:f3:95:b0:6f:42:
60:49:b1:f9:68:29:11:8f:3f:95:23:34:35:08:db:55:6f:f0:
d8:1b:e3:c1:44:f9:2b:ba:eb:53:24:4a:6b:67:87:a7:68:ed:
57:e7:f0:0b:99:10:3a:ff:80:63:a8:45:3d:21:ce:8d:e3:3e:
e8:b9:ca:bd:2c:2e:26:4d:25:ea:33:a3:c8:34:6a:e8:03:a5:
2f:91:ce:be:29:98:62:12:3d:83:59:64:74:20:8e:b3:9e:8d:
a0:bb:b3:4d:a8:7c:b5:ae:58:6c:ab:60:d4:bc:95:44:df:7c:
af:d8:f1:a4:b2:4b:96:42:c0:2c:6c:c4:1d:ae:1f:41:92:c1:
1a:c1:36:7b:3d:0c:27:43:29:26:1f:42:e1:be:39:d2:36:34:
f4:19:c5:35:45:cd:13:54:01:97:20:16:b8:9a:24:c7:db:da:
2c:04:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:55:39 2025 by rpki-client