Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WnxcbiZpPsGZJLJvMyrT86QsY-A.roa
File: WnxcbiZpPsGZJLJvMyrT86QsY-A.roa (raw, json)
Hash identifier: VDh/s6Ur9NrCGpW3psPrnS3oG8Gl0jdK0A2SkyJ72CM=
Subject key identifier: 5A:7C:5C:6E:26:69:3E:C1:99:24:B2:6F:33:2A:D3:F3:A4:2C:63:E0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A49
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WnxcbiZpPsGZJLJvMyrT86QsY-A.roa
Signing time: Wed 27 Nov 2024 15:55:04 +0000
ROA not before: Wed 27 Nov 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 27 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5A7C5C6E26693EC19924B26F332AD3F3A42C63E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:12:59:88:24:db:95:7f:85:94:dd:4a:d0:
95:38:b7:f9:5d:56:03:26:0f:03:70:b8:aa:47:b8:
bd:08:50:03:e3:7d:ba:cc:4f:2e:9f:d0:80:28:ba:
e6:70:35:f4:c7:80:85:83:92:21:dd:12:a3:f5:01:
0c:04:60:99:44:8b:05:67:e0:83:7a:3e:ef:bd:ab:
ae:23:03:b8:1b:27:b4:71:43:69:04:9e:ed:a6:45:
dc:78:3b:ab:cc:2e:da:e3:23:7e:77:56:fc:f4:b1:
66:d4:9c:71:16:98:7a:29:5f:bc:17:9a:94:49:af:
22:87:32:3a:a6:42:d8:8e:73:78:64:ca:bb:c6:58:
61:74:72:bc:bc:40:5a:02:e7:90:df:9d:93:d5:11:
6a:e3:ea:99:cf:68:09:45:38:9e:b7:5f:df:e9:52:
ff:5b:e0:f2:ce:a1:f5:af:3f:18:fc:3b:0e:79:39:
35:69:63:0e:5f:65:42:f7:a3:d7:c9:02:1c:43:4f:
af:48:c8:9a:a2:a9:8e:4e:e2:16:30:13:2c:b0:b7:
d0:77:e1:04:65:aa:e2:1e:18:23:74:a7:5c:3e:02:
e6:8e:6f:d3:c0:35:86:fe:22:d9:f9:df:7d:c6:03:
cd:4a:2f:33:21:37:4e:a3:c8:0d:be:b5:30:26:db:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:5C:6E:26:69:3E:C1:99:24:B2:6F:33:2A:D3:F3:A4:2C:63:E0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WnxcbiZpPsGZJLJvMyrT86QsY-A.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8f:c7:22:87:1d:2c:6f:6d:f2:de:bb:3b:a6:54:ad:12:41:
3c:f5:4f:ab:0e:94:b6:ff:e1:dd:93:f0:40:3f:cc:8f:47:ce:
ab:75:a1:8b:07:c6:0f:e6:c9:e1:68:3d:cf:fd:b0:d4:c6:55:
cc:13:d6:36:2c:df:80:99:02:19:d8:a6:fe:d4:4e:a3:a0:c9:
ba:a7:05:f8:3d:e0:5e:db:24:01:de:66:9c:16:31:36:e8:49:
ee:55:60:e0:ac:df:63:1e:c6:8e:ac:3f:56:c4:4f:0c:ef:b9:
01:46:9c:dc:71:06:5e:1d:19:f5:51:71:08:d6:00:f2:60:fa:
41:f6:31:38:98:4d:cc:37:2a:1e:97:b0:8d:38:05:65:12:9c:
ff:d2:52:c9:3f:5d:1c:05:6a:3a:25:c7:f8:98:ad:92:74:85:
96:ee:20:ac:ef:3f:71:17:e6:30:63:36:10:d8:bb:a7:ae:39:
02:d9:4c:ed:0a:c2:ae:17:05:a8:a6:c9:23:40:e6:f6:0c:5a:
8b:d0:e6:fd:95:42:12:40:74:fb:fe:4c:d7:4e:34:04:36:11:
84:d2:2b:62:53:ee:20:f2:81:63:5e:d0:5a:9e:4c:33:4a:f1:
06:ad:71:8c:6c:0c:93:81:52:13:da:3c:df:a1:64:e3:6d:91:
04:7a:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:27 2025 by rpki-client