Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_Kf7Rtkkaj4BW-29m9YFPDSrcwA.roa
File: _Kf7Rtkkaj4BW-29m9YFPDSrcwA.roa (raw, json)
Hash identifier: 5PPn4zg7Nd6PVmjzTZyvJMsxKs3j0TYHt8YtkmR5+ZQ=
Subject key identifier: FC:A7:FB:46:D9:24:6A:3E:01:5B:ED:BD:9B:D6:05:3C:34:AB:73:00
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A37
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_Kf7Rtkkaj4BW-29m9YFPDSrcwA.roa
Signing time: Mon 25 Nov 2024 15:55:03 +0000
ROA not before: Mon 25 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 25 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FCA7FB46D9246A3E015BEDBD9BD6053C34AB7300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:84:e5:13:6f:f8:63:10:11:73:d3:64:ba:
ac:37:3a:fa:b8:7c:19:05:a9:40:90:30:a9:3c:bd:
7c:f1:fd:34:eb:ca:55:94:2d:23:82:61:93:ac:32:
03:e9:2d:1f:f8:49:3c:dd:54:2f:fb:f6:57:d4:68:
8d:ed:93:44:2c:40:81:50:19:b0:eb:8f:67:d9:bd:
b2:ee:dc:6e:00:31:52:33:75:19:ae:42:1b:05:68:
02:ee:0e:5a:ca:eb:d7:7f:10:61:2d:8c:d4:a5:85:
51:c6:e3:84:68:e3:ac:6c:3f:18:9e:f7:7f:61:0f:
c9:84:00:c0:74:fa:2a:ce:b1:fa:05:32:eb:c1:b8:
0b:2a:be:5e:5e:9d:89:9b:8f:7f:4e:ad:b7:c5:e9:
f0:81:38:00:7c:11:08:ef:d5:10:c5:eb:9b:aa:1f:
cb:87:99:03:02:a8:6c:1c:b0:19:e5:39:28:69:2f:
d2:e7:83:71:23:6b:6f:f6:0d:85:eb:b4:8f:f6:a3:
73:a7:70:44:e3:1c:a7:9b:f7:64:b7:5e:f1:ec:e0:
da:ec:97:ed:fe:fc:89:14:3a:88:a7:ef:60:38:86:
af:43:aa:dd:b9:9e:c6:10:57:74:e7:20:2b:5d:56:
3d:78:11:9c:49:ac:4f:ba:36:93:85:81:6f:05:d6:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:FB:46:D9:24:6A:3E:01:5B:ED:BD:9B:D6:05:3C:34:AB:73:00
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_Kf7Rtkkaj4BW-29m9YFPDSrcwA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
df:01:c0:93:96:5e:76:79:c2:12:b4:22:cc:8e:69:29:92:3e:
79:6c:8a:9c:df:19:a7:50:1b:9a:5f:09:72:42:1e:7a:d5:7e:
74:1e:a4:9a:13:93:dc:69:2f:ed:9e:13:31:1b:c6:e6:75:18:
d5:98:50:2b:11:50:04:92:fe:e2:5a:01:b0:86:f8:72:81:39:
84:d0:21:ad:51:5e:84:34:b1:84:10:44:fe:15:b4:b9:2a:cb:
9b:2e:b0:5d:15:64:c0:0d:73:cf:e8:7e:96:64:98:fd:a1:57:
1e:07:5e:ff:d2:c5:34:4c:a9:ab:63:2f:e9:b4:bb:33:9f:78:
e7:25:e8:b2:ed:6c:83:83:7c:b4:3b:5c:fb:a5:08:5f:42:aa:
60:6e:24:6f:de:96:fd:fa:4f:e4:ac:94:18:16:74:d1:2e:b5:
78:eb:2b:7e:65:b1:ad:d2:8d:65:02:00:de:ed:0e:58:30:ce:
cd:c4:33:3b:62:bb:1c:ef:c3:bb:05:33:cf:50:e2:fd:92:60:
11:a5:5f:13:9d:e2:31:15:28:e5:76:c8:f8:9f:46:cd:ca:21:
56:0d:f4:10:16:09:00:46:59:33:14:27:46:1d:22:1d:43:40:
67:33:04:9e:b0:0d:c4:1b:f6:ff:d4:77:99:a2:74:b8:21:a4:
bb:5c:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:15 2025 by rpki-client