Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WNe2RxNVx6fG0jbkO2-VqGt--64.roa
File: WNe2RxNVx6fG0jbkO2-VqGt--64.roa (raw, json)
Hash identifier: 9gkMv7MbIosKQ7hGZJtxTrO4F6ZMx3ORaRdV3FG5evw=
Subject key identifier: 58:D7:B6:47:13:55:C7:A7:C6:D2:36:E4:3B:6F:95:A8:6B:7E:FB:AE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B82
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WNe2RxNVx6fG0jbkO2-VqGt--64.roa
Signing time: Wed 01 Jan 2025 07:55:03 +0000
ROA not before: Wed 01 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2946 (0xb82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 1 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58D7B6471355C7A7C6D236E43B6F95A86B7EFBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:5f:cb:d3:6e:6a:b8:86:07:06:f2:c3:eb:
dd:bd:68:0b:d4:aa:b4:c4:c2:8c:03:14:d5:1b:37:
71:9b:a7:b2:7a:91:e1:c4:01:d6:fb:0c:19:e2:dc:
db:59:7d:07:c7:ca:21:5f:4a:59:ce:5f:f6:4e:99:
e9:82:a7:0f:07:fb:5c:23:60:52:50:54:7d:5e:56:
3a:07:1a:9c:1e:29:92:45:cc:cf:62:79:a8:a8:5f:
3c:43:0f:a2:f0:4b:d2:ee:be:0a:1f:af:a3:f3:1d:
ec:71:be:99:09:3f:b1:48:52:c4:d3:f9:ee:b4:9b:
59:72:3d:cd:e0:4a:05:9f:3a:9f:c2:32:78:7c:d7:
51:af:4d:b5:3c:c3:c1:a7:94:62:53:45:1b:ee:e9:
a4:b0:36:f0:8c:4b:d4:91:b7:07:85:b4:b1:d9:28:
67:4b:b6:63:49:9a:94:ac:0a:30:75:d5:92:3b:39:
57:0d:78:e7:1a:a7:a6:f3:6b:c5:a4:83:f6:96:c3:
2c:a4:fd:8d:6a:14:b9:68:41:24:6e:30:72:3a:7f:
1b:98:96:a2:f9:0c:30:f7:45:45:6a:4e:2a:be:91:
07:6c:04:61:b5:4c:6d:80:a1:cb:38:bc:d8:50:7d:
5f:19:1d:db:3e:c7:78:fb:6f:d5:81:24:3d:a2:79:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:B6:47:13:55:C7:A7:C6:D2:36:E4:3B:6F:95:A8:6B:7E:FB:AE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WNe2RxNVx6fG0jbkO2-VqGt--64.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fb:37:e2:61:6c:00:35:60:31:2a:b5:63:d2:46:81:81:82:
00:2c:9b:22:c9:b7:c9:1c:f4:81:75:d4:79:a9:db:35:83:87:
67:e1:85:4a:78:3a:5e:2d:88:b1:5e:c7:5f:6a:b4:e2:d1:ac:
3c:5a:3a:91:e2:09:5d:95:ec:2d:c9:01:19:03:4a:28:9c:70:
c7:79:1a:52:2c:9b:d3:51:c3:f4:8d:12:f2:b8:04:e9:cd:3a:
10:66:84:a5:63:fe:f4:d7:f3:ac:9c:89:26:70:c4:98:af:bf:
90:4d:c1:fa:64:fe:ba:75:d2:d4:69:e0:9b:06:0a:c3:02:7b:
7f:96:08:10:1a:30:6c:28:a1:ef:f8:cc:2c:34:57:89:46:3a:
90:86:7e:72:0e:5d:cc:ad:78:19:38:de:68:b5:f8:90:aa:6c:
5e:19:85:cf:66:14:11:bf:58:af:05:3e:f5:ae:de:a7:7b:33:
48:8d:9e:21:2b:bb:74:49:98:46:6c:32:6b:dc:7a:be:6f:eb:
33:92:e4:bf:99:17:1e:75:6a:b0:af:f7:ca:f6:c4:64:b7:47:
89:fe:68:3e:6d:4f:21:b4:b4:ea:de:51:97:09:94:df:c3:7a:
b1:bf:8d:d9:ff:ee:57:cc:fe:bb:54:cd:f3:99:52:04:b4:4a:
2f:24:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:47:40 2025 by rpki-client