Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_PshbKUbJ-6SfOuNPWy4aSxwsxI.roa
File: _PshbKUbJ-6SfOuNPWy4aSxwsxI.roa (raw, json)
Hash identifier: xggB9ueMLJzG2lF51wXa7gtzgDNFGPmKaNDx4TboT0Q=
Subject key identifier: FC:FB:21:6C:A5:1B:27:EE:92:7C:EB:8D:3D:6C:B8:69:2C:70:B3:12
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C7E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_PshbKUbJ-6SfOuNPWy4aSxwsxI.roa
Signing time: Wed 29 Jan 2025 07:55:03 +0000
ROA not before: Wed 29 Jan 2025 07:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 29 07:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=FCFB216CA51B27EE927CEB8D3D6CB8692C70B312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:a2:fc:ee:34:86:a2:61:22:4a:ea:0c:a4:
36:18:2a:50:f0:c5:a4:62:01:a3:02:eb:e2:75:64:
b2:a8:ff:49:c8:c8:3c:d1:2f:10:a8:59:f7:7f:d5:
0e:01:37:a6:b9:45:04:e8:d3:7c:74:c5:d7:61:5b:
6a:da:53:2b:e4:82:a3:21:4a:f9:e3:3a:f4:c2:fe:
51:79:9e:35:bf:bb:0a:41:c7:af:f6:db:b9:d9:ef:
41:e1:4d:34:06:10:60:0d:b5:51:1e:d7:86:f1:8d:
3e:81:50:b0:e7:4c:5e:03:22:ee:3d:71:e0:99:ed:
5c:50:2b:db:f8:74:50:2c:0e:1d:a6:ed:a9:1e:69:
60:46:38:53:9f:d7:3b:76:a5:ec:2d:60:83:ad:76:
78:41:73:14:21:d3:44:19:56:df:70:56:a3:21:50:
c5:7d:31:fa:60:46:cd:76:b3:8f:9d:31:f3:76:1a:
eb:b6:39:bd:35:84:04:5b:c7:cf:b6:37:45:42:31:
98:56:f2:8f:9c:a4:10:c5:e3:22:8a:92:e5:e4:11:
75:b3:09:30:4a:44:cd:9b:fc:f5:31:c8:be:48:b3:
9e:26:80:49:43:10:ef:e1:3e:08:1e:38:73:85:ce:
3d:2d:f4:f2:b7:14:59:ee:e9:89:7c:2f:77:2a:cf:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:21:6C:A5:1B:27:EE:92:7C:EB:8D:3D:6C:B8:69:2C:70:B3:12
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_PshbKUbJ-6SfOuNPWy4aSxwsxI.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e2:7c:c6:73:5a:09:48:98:67:1d:58:c3:62:86:71:85:9c:
07:29:f4:73:41:89:46:40:f9:34:14:bf:31:5e:c8:44:1c:1f:
a8:98:41:1d:96:16:9f:b7:48:39:f5:4b:98:9f:39:ae:e6:15:
7c:43:8a:f7:3a:ac:ea:a9:24:0b:07:40:d8:3b:cb:89:0b:44:
0f:b4:8c:a9:27:28:8c:8a:59:0b:43:81:4b:19:be:1f:f6:d7:
7b:02:ac:33:74:bb:2d:b6:87:b2:6f:c6:b1:52:b9:fb:ef:c3:
22:d8:3c:76:a3:aa:b5:e6:95:ce:c5:c7:84:76:ae:b9:3a:64:
fd:a5:80:26:ae:c4:a5:55:03:b8:b6:e9:75:01:b5:82:74:ce:
76:24:b8:ac:c2:f3:b3:ce:4f:d1:2b:4c:0a:08:9d:5f:ee:96:
4c:a0:f2:d1:9f:84:80:4f:6f:60:64:b1:2f:2d:d0:79:50:58:
4f:20:c2:4d:ba:da:e1:3b:83:43:6d:4b:23:27:84:3a:70:d6:
5a:30:a3:ba:71:90:8f:e9:74:c8:4b:40:31:ad:54:18:d3:79:
6a:7d:70:44:d5:06:57:18:98:f1:73:c7:21:a8:f8:cf:62:e0:
50:18:8e:1f:c8:4e:e8:37:c7:3a:31:a8:c2:c7:43:20:2f:d5:
01:34:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:13 2025 by rpki-client