Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_X8Eh718bzIsHtNih6H9TIFJDzQ.roa
File: _X8Eh718bzIsHtNih6H9TIFJDzQ.roa (raw, json)
Hash identifier: gdPkuTil9No9lUP+0bQnAEs0fZB99b1sFVN2UTD+LqY=
Subject key identifier: FD:7F:04:87:BD:7C:6F:32:2C:1E:D3:62:87:A1:FD:4C:81:49:0F:34
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A2E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_X8Eh718bzIsHtNih6H9TIFJDzQ.roa
Signing time: Sun 24 Nov 2024 15:55:03 +0000
ROA not before: Sun 24 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2606 (0xa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 24 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=FD7F0487BD7C6F322C1ED36287A1FD4C81490F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:74:df:e2:38:47:c5:42:76:6f:e9:68:be:
8b:6d:f4:d7:94:19:ce:2a:82:b0:c3:de:8d:7f:57:
8a:15:a6:2d:33:b5:42:7c:29:a2:a5:cb:ec:c0:61:
d4:22:cb:2a:9d:2b:d3:74:ab:40:33:b2:26:5d:de:
08:a9:52:33:09:4e:db:da:db:3d:28:df:cb:57:e1:
a2:f3:bb:5f:d5:bd:02:85:cb:db:54:76:2a:f9:89:
83:4c:87:d4:15:ef:01:10:2b:ab:bb:ba:28:30:26:
37:ed:c3:9a:f2:99:ef:37:61:39:8e:7c:13:79:f1:
7d:49:8c:c4:32:08:e8:20:ce:ab:16:ab:16:ad:d2:
2d:18:1c:21:7f:50:8a:eb:b2:23:ea:9b:3e:62:25:
2e:3a:20:0a:75:94:f9:a3:eb:38:d7:ff:89:72:72:
a7:12:46:05:a0:e5:bd:85:9c:90:3c:fc:e6:60:33:
2b:23:c0:83:ba:8e:8d:53:3d:68:43:9d:27:b8:70:
f0:b5:29:43:0f:b8:f4:f7:79:8f:63:b3:c1:89:6f:
c2:7d:66:e4:26:17:30:52:a6:ac:d0:48:39:26:09:
3f:db:16:79:37:5b:d1:6c:9f:36:3a:a4:a2:d9:31:
2d:4f:3d:a2:27:9e:26:96:0b:b8:f8:1b:a1:ec:09:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7F:04:87:BD:7C:6F:32:2C:1E:D3:62:87:A1:FD:4C:81:49:0F:34
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_X8Eh718bzIsHtNih6H9TIFJDzQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:83:54:20:04:73:e9:08:53:da:ae:6d:c4:ba:5c:66:ee:75:
a2:dc:db:9a:a3:c4:08:a1:a1:de:5a:23:df:d5:02:0f:89:f0:
b6:b1:c1:90:7f:c8:cb:7c:14:c3:45:8a:4a:e5:6c:c9:41:c7:
fc:5f:60:53:fd:44:45:93:34:24:f0:11:72:a4:f0:cb:46:a8:
e4:43:79:a4:50:5e:df:c1:5b:ab:4b:c3:f6:96:16:70:7f:4e:
71:f4:ef:ae:90:ae:4a:51:de:de:19:27:65:ea:a8:cf:08:42:
a4:c5:4b:5c:a2:1e:14:1f:b5:0c:0f:18:53:9d:33:35:f1:3e:
7e:e4:6d:5b:76:35:d7:64:51:ea:4b:9c:40:72:bf:b2:22:54:
ee:8b:43:83:25:fe:cf:fe:0b:51:46:20:0d:c8:67:cd:53:eb:
84:a0:8e:14:68:f5:86:54:f0:cd:1f:e3:d9:53:0c:6d:f7:de:
a5:60:ba:49:51:24:7c:0d:ed:11:3e:94:5d:ff:18:3a:0c:d7:
18:23:66:f7:a3:e8:4b:9e:e2:fb:68:f2:ff:ec:80:cc:0b:d4:
d1:b7:44:7e:8c:f6:ed:e4:a8:74:dc:b0:3e:06:20:41:43:2f:
b3:e8:16:07:01:46:fb:bb:ee:60:49:78:5e:72:23:74:39:6f:
5c:48:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:39 2025 by rpki-client