Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WOprx3I9D0Ok5DryYh6vfL6g9EI.roa
File: WOprx3I9D0Ok5DryYh6vfL6g9EI.roa (raw, json)
Hash identifier: FPPL3ePy3Ty9bUopV7aFRp1TSs7vaBb04aY48t/fqh0=
Subject key identifier: 58:EA:6B:C7:72:3D:0F:43:A4:E4:3A:F2:62:1E:AF:7C:BE:A0:F4:42
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B69
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WOprx3I9D0Ok5DryYh6vfL6g9EI.roa
Signing time: Sun 29 Dec 2024 15:55:02 +0000
ROA not before: Sun 29 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2921 (0xb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 29 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58EA6BC7723D0F43A4E43AF2621EAF7CBEA0F442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:b0:f0:73:0a:99:22:63:16:63:d8:a9:c8:
b6:e9:0e:2e:cb:19:f3:2c:18:9e:e4:90:5a:e5:b6:
20:ae:d6:9e:d4:6f:37:7a:0e:cd:86:ea:a1:b3:50:
d5:41:fa:e2:b4:13:35:34:3a:6d:2d:d8:b4:a1:90:
a4:5d:c8:1c:4c:39:c9:85:5d:e3:0f:28:d4:9e:70:
6c:02:95:81:a9:05:1c:3c:6e:10:57:5d:9b:e5:b2:
da:68:16:81:da:60:05:a9:1e:7d:32:f7:e4:3b:fe:
d2:6e:39:e5:fc:b5:06:8f:c0:08:d8:ef:34:e2:c5:
67:27:1e:51:98:42:bc:b5:09:ea:c8:f0:c6:04:24:
33:38:52:ee:3c:d5:6a:fa:0c:2d:0e:b2:70:a7:a6:
6d:09:a2:2a:12:48:25:28:23:96:c1:3e:81:02:92:
1e:65:21:f1:f9:f1:4a:d6:9e:40:29:ce:10:a2:42:
42:f8:81:b9:ec:47:9a:4f:a5:d9:fc:3e:7d:15:ca:
75:8a:c9:36:59:6a:c3:2e:94:0e:c8:d3:27:09:97:
af:37:9e:b0:a7:16:a0:ff:7e:ff:2b:b1:41:33:1b:
19:cb:69:b8:28:bb:f6:09:ef:85:20:08:14:da:16:
cf:75:98:1d:20:d9:a6:d3:6a:fe:c5:ae:54:02:d4:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:6B:C7:72:3D:0F:43:A4:E4:3A:F2:62:1E:AF:7C:BE:A0:F4:42
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WOprx3I9D0Ok5DryYh6vfL6g9EI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ea:a0:94:68:2e:e7:40:5e:82:a2:fb:a7:15:9d:b7:8b:03:
fc:61:50:73:cc:0d:5d:50:12:f8:b5:b1:22:ba:03:e6:24:7f:
1a:10:22:3d:15:3d:ac:5c:8a:cd:08:3e:4e:40:3b:30:d3:f5:
5a:8f:b8:48:a7:4d:90:ec:4d:80:5c:ba:4e:66:92:29:21:c3:
7c:56:20:ed:97:22:ad:b5:0e:30:3b:30:fb:b1:d8:6f:4b:0d:
1b:94:a4:05:26:b8:2b:bb:ce:cf:21:65:e7:33:bf:42:87:85:
e9:c8:cc:52:4e:80:7f:8e:af:44:13:61:5a:36:07:cc:4f:20:
8d:40:95:8a:3c:28:7f:a8:97:b9:59:84:15:cf:97:14:92:4a:
46:78:f3:50:8d:7f:3f:c6:83:1e:cf:9e:61:b2:95:31:b7:2e:
d2:eb:2f:d3:4d:70:6e:a9:9d:ab:b1:a6:f7:59:d5:b5:8f:f5:
bb:14:fc:91:98:af:00:09:a0:9a:e1:d4:54:a4:81:28:7c:14:
11:dc:47:0e:d4:44:f5:1e:31:4c:b8:11:45:dc:d0:b0:fd:47:
37:7a:fb:3b:71:a6:e0:37:c8:18:6f:4d:b6:ed:fc:78:3c:88:
e2:ee:28:15:1a:8a:dd:33:82:1c:8d:95:8a:6a:36:c0:72:8e:
47:e0:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:17 2025 by rpki-client