Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_VuicrAQ7cUMJA4bUyFeurcPRnM.roa
File: _VuicrAQ7cUMJA4bUyFeurcPRnM.roa (raw, json)
Hash identifier: sZPBa9GM1JcbZmXRgVgUrkow2SnHxRjmJSiWxr/6rOU=
Subject key identifier: FD:5B:A2:72:B0:10:ED:C5:0C:24:0E:1B:53:21:5E:BA:B7:0F:46:73
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C45
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_VuicrAQ7cUMJA4bUyFeurcPRnM.roa
Signing time: Wed 22 Jan 2025 23:55:03 +0000
ROA not before: Wed 22 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 22 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=FD5BA272B010EDC50C240E1B53215EBAB70F4673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:1e:ce:41:35:e0:41:3f:e9:e5:0f:e7:53:
76:e1:f4:e9:f3:d6:6e:6e:d9:05:ce:a1:27:a1:5b:
ed:72:af:83:f6:b1:14:68:28:00:9a:ed:25:d2:47:
ef:f7:d7:f9:3d:4e:bd:21:2f:8b:8f:22:6a:2e:d7:
aa:88:de:dc:72:6a:cd:ea:a0:4d:6e:ce:c3:f2:43:
d9:32:d6:2c:f0:0c:e2:dd:8f:2f:fc:23:0f:f1:a8:
16:9e:02:76:ef:11:0d:d0:f2:c5:93:cb:ab:9d:4e:
2b:ed:5c:ef:d9:2c:62:f7:ee:6f:43:50:33:d4:24:
7e:7b:cb:3c:ea:cb:45:52:b1:a3:d4:37:20:62:9a:
52:ae:2f:84:2a:53:9c:62:20:07:e1:7a:ea:b1:d4:
ed:50:4f:27:cc:ef:ca:bb:d1:a4:88:73:b2:2c:72:
53:02:04:76:1f:81:71:6d:8a:6b:52:3f:a9:c3:7a:
97:72:40:dc:e0:b7:db:24:29:e3:36:a3:00:aa:1c:
fd:59:43:f0:f3:bd:c2:9c:29:b9:45:17:22:d1:80:
89:2e:b6:d0:d4:b1:89:71:4a:93:21:89:63:4e:e4:
f8:6a:80:ae:7d:5e:9e:64:09:c8:59:8d:c2:5d:52:
16:03:e5:ce:22:fd:99:94:f5:77:66:07:f8:37:f5:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:A2:72:B0:10:ED:C5:0C:24:0E:1B:53:21:5E:BA:B7:0F:46:73
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_VuicrAQ7cUMJA4bUyFeurcPRnM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e6:5a:da:e1:28:44:84:d1:3d:39:15:a1:2d:73:27:f3:66:
d3:c7:7c:64:99:03:93:34:f4:39:c4:8b:72:53:bc:93:43:a9:
5e:9b:85:fc:ce:5b:ea:0e:cc:f8:83:27:80:51:f2:bc:00:c0:
73:19:83:b6:36:f3:9f:40:82:0e:c3:92:93:fc:37:b8:c5:5d:
2b:95:19:a8:ac:66:99:4c:61:c7:c4:3a:53:c5:2e:bd:e2:7c:
98:0d:3f:ca:c7:3d:0c:c0:0b:7a:cf:12:78:59:2a:b3:77:14:
c6:4e:34:11:a4:bc:10:35:7a:f2:01:99:e4:10:0b:dd:2a:dd:
3d:89:6c:0f:27:46:38:17:92:77:0c:da:4a:7a:fa:74:75:fd:
2a:6f:33:6b:86:ee:c3:30:31:70:97:84:3c:e4:7e:6a:de:b8:
0a:9d:1f:50:2e:69:27:7e:d3:cf:1d:37:6b:80:52:bd:fd:2c:
3c:b8:ee:79:78:c0:f5:be:9c:2a:b5:56:88:c7:a3:41:95:ef:
07:48:b4:cb:73:c4:c7:4e:23:09:d0:45:3d:b0:22:e9:e9:9a:
9c:b3:92:fb:ad:9f:de:21:65:78:72:f9:5f:73:14:a0:98:9f:
f9:8b:d1:38:e5:a0:8f:e6:4d:23:26:95:44:e4:45:30:62:77:
ae:79:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:27:15 2025 by rpki-client