Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ZJwKQhz2i0d97f_iOLVqPGaY4-c.roa
File: ZJwKQhz2i0d97f_iOLVqPGaY4-c.roa (raw, json)
Hash identifier: +WTmyVU9NnRtV+1Poys6rBREwkdM3y22B176pPdDAkU=
Subject key identifier: 64:9C:0A:42:1C:F6:8B:47:7D:ED:FF:E2:38:B5:6A:3C:66:98:E3:E7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0286
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZJwKQhz2i0d97f_iOLVqPGaY4-c.roa
Signing time: Sat 20 Apr 2024 23:55:04 +0000
ROA not before: Sat 20 Apr 2024 23:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 05:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 20 23:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=649C0A421CF68B477DEDFFE238B56A3C6698E3E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:5b:76:37:1b:99:4e:2e:4e:29:41:8f:bf:
b4:45:9a:02:36:ea:fc:68:4f:22:eb:f4:f4:87:c3:
51:a7:b6:98:b8:ab:f0:3c:ac:81:ba:41:89:63:75:
00:e0:11:14:c6:a7:10:18:eb:10:02:56:72:59:f9:
c3:15:c0:eb:c1:0f:25:96:26:e9:d4:f0:37:bb:8f:
4c:09:81:03:39:f3:fa:6b:24:51:b3:95:f7:7f:8c:
19:1b:ef:06:7a:e6:f0:cc:cc:4e:1b:5c:34:70:84:
b4:5c:60:78:ac:aa:1f:61:8f:81:38:3b:ad:bd:46:
b5:db:2a:29:e9:af:38:75:06:79:1e:87:08:79:a5:
94:34:be:8d:a8:f4:d0:8e:06:c0:a0:eb:b3:01:78:
a9:56:1f:f7:2f:52:59:5f:1d:54:02:f2:6d:01:bd:
f9:af:3b:b4:35:e0:a3:7e:6e:e0:4e:26:fe:e6:7e:
59:dd:ca:9d:3c:60:76:1c:b8:70:c5:c8:e8:46:e5:
c5:d6:dd:7c:83:f8:2f:27:4f:02:9b:d3:be:f5:03:
58:f1:64:d4:87:ab:a4:7c:9a:c8:ec:00:bd:66:ab:
87:72:d6:fa:cb:9b:10:82:58:fb:f3:62:72:75:05:
7d:27:19:f8:3e:67:9f:cb:d5:7b:43:fa:fa:07:cc:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:0A:42:1C:F6:8B:47:7D:ED:FF:E2:38:B5:6A:3C:66:98:E3:E7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ZJwKQhz2i0d97f_iOLVqPGaY4-c.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:33:ec:d3:26:85:bd:a6:2b:b1:63:03:50:14:7a:24:19:cd:
5b:32:52:0a:60:35:66:71:47:a3:c5:c0:62:f1:08:7d:dc:4b:
2d:90:f1:df:06:a6:50:41:79:93:31:d3:10:b6:6b:97:6a:e1:
8c:00:c2:1c:bb:73:9c:2d:18:43:cf:d9:dc:22:b9:f1:6b:d0:
06:f3:b1:76:29:69:88:e4:d9:12:04:e8:46:a9:fa:02:53:6f:
5e:c0:e2:24:47:b4:d9:51:19:18:56:36:8b:10:ba:2a:8e:ea:
08:8b:01:1f:08:78:01:bc:ef:95:69:7b:39:6f:7c:a2:81:13:
75:9e:c6:f1:58:17:2e:72:fc:b1:be:37:17:47:46:46:6d:86:
cc:c8:cf:b0:d9:c5:8a:7d:ab:20:bd:1d:72:14:8a:e2:ea:ab:
12:a6:49:00:ca:a7:48:93:7d:fe:74:db:d3:03:3b:71:b7:71:
1e:1e:5c:d8:12:82:89:8e:f3:59:c2:63:63:9b:3a:1b:d2:26:
0c:35:0f:eb:94:1f:6e:2f:cf:2c:2c:29:8a:85:09:09:5d:5b:
fd:f1:b4:ab:7e:d6:8b:a8:30:49:72:e6:fa:09:92:99:41:1d:
df:fd:7b:27:a3:3d:08:d8:a4:18:35:a1:26:53:c8:fe:be:cc:
3c:45:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:01:08 2024 by rpki-client on console-ams.rpki-client.org