Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/aZNUkIZzKJFgzD_qOd16XeXhoNY.roa
File: aZNUkIZzKJFgzD_qOd16XeXhoNY.roa (raw, json)
Hash identifier: It7zxCk0rUrjNlOD5A0NVkftrKj5wHs8gKUP90kRrSo=
Subject key identifier: 69:93:54:90:86:73:28:91:60:CC:3F:EA:39:DD:7A:5D:E5:E1:A0:D6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C51
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aZNUkIZzKJFgzD_qOd16XeXhoNY.roa
Signing time: Fri 24 Jan 2025 07:55:03 +0000
ROA not before: Fri 24 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3153 (0xc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 24 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699354908673289160CC3FEA39DD7A5DE5E1A0D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:cd:17:03:85:85:48:9e:be:92:85:d5:d9:
ab:fc:e2:eb:1a:37:77:e7:40:bb:12:90:e6:b6:1c:
a1:02:5e:65:7c:28:0b:5c:ad:c8:38:cb:fa:e5:3b:
ae:92:3a:b1:03:a8:d0:40:c0:c9:0a:51:7f:d5:42:
e4:ec:71:9e:69:81:45:39:f1:9f:79:0b:a2:3e:6b:
3b:f5:21:47:57:80:a5:6a:c7:9d:08:51:51:b0:75:
3f:42:55:a6:53:a9:c7:dd:b2:c8:ad:07:be:b1:92:
c7:46:f0:7c:33:65:18:93:51:5f:95:5b:43:e5:e7:
d6:4a:77:53:ec:c7:1c:32:4c:91:61:7b:fc:9e:f7:
f0:71:91:67:5c:2f:94:0a:87:69:be:9a:bd:32:44:
b7:42:5f:cb:f7:6e:43:11:ff:c9:34:f3:3b:9d:55:
6b:ca:9a:5f:ce:7d:57:12:fd:b9:de:d1:fc:3b:76:
e9:8f:2d:88:11:56:c3:82:9d:43:7f:85:a3:9c:84:
24:0d:78:61:f2:fd:5d:fc:3d:32:20:85:25:84:07:
7e:cd:c9:4b:d1:0e:c9:f1:80:bd:99:32:af:d5:e7:
3c:04:f4:62:d5:ab:ad:db:69:3b:2a:a0:87:87:81:
76:66:ab:2d:5c:88:85:cf:b3:8c:1c:3f:84:f0:2f:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:54:90:86:73:28:91:60:CC:3F:EA:39:DD:7A:5D:E5:E1:A0:D6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aZNUkIZzKJFgzD_qOd16XeXhoNY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:e9:56:9d:75:a5:9c:31:83:55:fb:f8:ab:b6:99:5f:c8:c2:
65:6f:bf:0e:40:bb:d3:99:89:09:f8:87:31:71:c9:1f:25:16:
fb:09:ff:6a:25:65:e0:1e:dc:85:52:1d:0e:49:32:87:6b:67:
f3:41:56:92:85:9f:3a:b3:17:f3:c4:40:b5:a3:6d:8e:f9:55:
d4:c9:c8:02:f2:13:13:50:e7:44:c5:72:eb:0a:84:01:0f:1a:
50:fa:94:4c:4f:d3:b7:2e:e5:bc:90:a1:ed:18:37:e1:70:ff:
7b:92:32:fb:e0:2b:83:ac:8a:ff:7a:5e:36:30:eb:59:1c:b2:
67:b4:02:98:8f:c8:13:53:3b:2b:f9:d6:96:1c:a7:71:fa:38:
60:6a:e8:7a:4a:2a:37:17:d9:5a:e6:2d:f4:7d:38:1a:b7:a4:
dd:ca:8a:f0:a6:54:92:da:12:86:5d:58:30:86:8c:d9:b9:07:
f7:ba:b3:05:cc:a3:67:c5:f9:09:01:6a:41:03:a9:fd:b4:e7:
2f:b4:6f:45:2b:4d:c3:15:fe:92:1c:09:63:98:2e:c7:64:84:
c8:69:11:d9:a8:3d:ac:82:d1:af:4e:05:49:16:f0:2f:ac:12:
18:46:c8:68:a1:66:0a:90:44:94:98:9d:1a:f7:22:a5:70:19:
8b:2e:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:42:16 2025 by rpki-client