Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/YGYdON5riBq0hqXu0nYSxeG_Erk.roa
File: YGYdON5riBq0hqXu0nYSxeG_Erk.roa (raw, json)
Hash identifier: Q0L42WL3eoda1hUzt/xYKhBfVTzWexK7pxLAWBuFLDs=
Subject key identifier: 60:66:1D:38:DE:6B:88:1A:B4:86:A5:EE:D2:76:12:C5:E1:BF:12:B9
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B7E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/YGYdON5riBq0hqXu0nYSxeG_Erk.roa
Signing time: Tue 31 Dec 2024 23:55:02 +0000
ROA not before: Tue 31 Dec 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2942 (0xb7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 31 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60661D38DE6B881AB486A5EED27612C5E1BF12B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:11:34:dc:1a:47:4a:cd:ec:04:2a:98:64:
72:68:db:d2:3b:b4:35:02:f5:4a:aa:0b:fd:1c:3c:
ea:a4:0b:b8:2d:fa:34:07:10:1f:3f:c5:c0:a0:bd:
69:bc:bb:45:d4:6b:a6:57:4e:2c:fb:d9:79:8d:b1:
21:9a:1a:b3:35:4b:c3:83:1a:d0:9d:02:2b:9f:47:
f0:6b:e7:da:17:d3:a9:2b:f2:77:6c:f8:92:e7:23:
6c:9c:8a:88:08:93:55:01:c5:55:b0:05:52:c1:78:
cd:c1:d8:23:e9:93:6b:3a:2b:c0:ee:65:e0:a7:07:
68:26:03:89:4e:e5:1a:98:b2:ea:5d:14:6a:91:39:
56:3e:2d:d1:d9:9d:88:7c:29:f7:8e:b5:5e:14:55:
9a:2e:f6:6a:be:45:42:f1:29:f1:69:6f:f1:ba:67:
6d:0e:59:67:bb:d7:df:b9:08:c5:3f:f8:7b:50:9a:
ac:fd:54:9d:9d:9c:f1:49:46:64:27:14:ba:fc:1f:
f3:c0:9e:7e:8e:1d:c5:f0:82:ea:7d:1f:46:38:f7:
c8:6b:dd:f3:20:89:ba:a5:84:b6:8f:65:e9:3f:17:
9a:42:ea:fb:c8:86:16:f7:01:18:46:d2:25:55:73:
ca:8a:c7:e0:01:d2:61:ff:dc:d3:3b:39:2d:65:84:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:1D:38:DE:6B:88:1A:B4:86:A5:EE:D2:76:12:C5:E1:BF:12:B9
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/YGYdON5riBq0hqXu0nYSxeG_Erk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:24:34:bb:f5:de:12:32:f4:c3:9d:10:c8:0b:4d:8e:28:31:
7f:b9:bd:6f:14:df:89:ba:ba:0a:14:42:b2:b1:dd:76:37:bd:
e8:28:78:87:01:8e:1c:e9:a8:c3:f0:6b:33:ce:13:ff:02:cc:
fe:eb:87:89:18:39:23:ba:6f:ed:a8:5c:b5:e4:56:32:d2:04:
a4:97:3f:78:20:c6:9c:78:00:7d:c0:58:05:84:7f:9a:18:03:
28:83:51:0e:f7:7a:65:57:71:13:36:24:b8:18:b4:ca:27:0c:
fd:e9:67:4a:6a:c0:76:26:36:a3:81:60:01:5d:64:be:62:76:
1a:da:eb:e2:2c:b7:8b:de:55:40:dd:1d:20:81:a3:f3:f9:6b:
b2:41:4b:54:26:b1:f9:ea:de:37:b3:69:02:26:0f:68:b0:0e:
7e:52:40:46:02:79:51:bc:8d:45:34:b6:59:eb:91:a9:c4:53:
90:6b:8b:fe:3f:27:81:12:fd:39:d3:c3:f4:e3:ae:f8:98:a6:
5c:8a:96:b2:78:e8:ca:15:3d:8c:20:71:6f:4c:cc:6d:f3:86:
d5:45:c7:53:5d:58:0a:59:16:40:13:e0:32:f7:59:70:9d:47:
8e:6e:17:b8:ce:d7:35:37:b2:2d:97:02:a7:5d:7a:b4:0d:35:
b2:ca:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:24:31 2025 by rpki-client