Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/cyz23u-MlWF3I0sE0S7_eC3tXVY.roa
File: cyz23u-MlWF3I0sE0S7_eC3tXVY.roa (raw, json)
Hash identifier: E8O7WqWkI7XubGyrV7AB2cZ9WVPMhiMBDiXlTM5PQUA=
Subject key identifier: 73:2C:F6:DE:EF:8C:95:61:77:23:4B:04:D1:2E:FF:78:2D:ED:5D:56
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A70
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cyz23u-MlWF3I0sE0S7_eC3tXVY.roa
Signing time: Sun 01 Dec 2024 23:55:03 +0000
ROA not before: Sun 01 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2672 (0xa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 1 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=732CF6DEEF8C956177234B04D12EFF782DED5D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:19:0e:95:f8:e3:8f:5b:e4:98:18:ab:9f:
cf:a2:03:87:17:29:5c:9d:a4:8d:70:3b:83:30:f0:
3c:85:75:0e:1d:ac:40:df:94:f2:03:9c:70:ef:68:
7d:44:11:75:f5:b3:65:f3:5b:96:15:e6:96:0e:80:
91:45:3f:61:fc:d1:ec:87:aa:e2:0a:54:75:8c:42:
58:76:d7:ed:66:bc:ba:33:1b:73:7c:fe:7f:65:2a:
39:92:c9:86:59:14:0a:c0:bf:56:c1:db:50:51:8a:
dd:bd:b7:cf:4a:19:24:4c:3b:c1:e6:cb:76:2f:c3:
6c:1f:6a:ae:37:15:ca:35:46:f5:0e:27:ab:e4:55:
be:0a:78:e4:0b:fe:9d:c8:9e:b6:94:4b:7b:eb:79:
e0:83:f9:3d:d6:5b:57:20:0b:43:58:4c:62:60:23:
12:95:80:1f:8b:c2:b2:95:45:52:00:55:cf:7d:8d:
d0:f1:e7:cf:20:f2:ce:8e:5d:d6:33:bc:98:73:9a:
15:4b:c3:9a:e9:7b:13:e8:dd:35:e0:b7:4a:c7:e9:
17:ae:27:f6:0c:94:da:14:2e:4a:95:6c:52:44:06:
22:e8:42:e8:2b:90:3d:06:9d:98:cc:35:96:33:fc:
e0:84:9b:4a:19:f9:b9:c3:2b:12:27:c0:d1:8e:f8:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2C:F6:DE:EF:8C:95:61:77:23:4B:04:D1:2E:FF:78:2D:ED:5D:56
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cyz23u-MlWF3I0sE0S7_eC3tXVY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
06:73:70:ae:27:02:f9:51:87:6e:33:fb:a0:9d:79:5a:92:19:
92:90:8f:4f:4a:f2:78:4d:77:11:5c:bd:79:aa:94:fc:c8:ef:
ac:54:6a:97:82:51:20:2c:22:2a:18:07:1d:12:c0:df:7c:b8:
8e:1a:d8:7a:5f:33:29:52:6a:91:6f:ab:f9:2d:2e:61:d9:3f:
25:11:6f:fc:93:ad:f8:f3:75:1d:78:9d:60:a4:03:56:a1:bf:
6b:26:eb:0a:57:36:2a:51:1b:05:bd:fd:a5:d6:66:47:10:e7:
55:a1:c8:0e:8c:0c:fd:ef:1e:07:68:c5:a7:16:f0:4f:37:98:
7d:15:7c:5a:4e:6e:b3:09:14:b8:cc:5b:4b:19:02:3c:f3:e7:
5f:93:7a:96:fe:57:8e:2a:e5:51:b2:ad:b0:04:7f:fd:40:be:
b2:8b:db:1e:11:49:be:73:25:01:e6:91:1c:9c:dc:bb:93:6d:
6f:d3:21:c9:13:5c:c6:af:fe:3c:4e:30:4c:97:4f:04:5f:af:
08:59:5d:b6:bf:3a:ff:79:01:33:02:43:5e:89:5b:9f:26:75:
9a:92:30:7a:b4:8d:d0:42:cb:7e:e2:a5:9b:ec:1d:cb:2e:18:
54:a3:2b:7c:54:62:b7:4b:96:01:d5:19:c5:45:ee:c3:fd:7c:
e8:0f:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:14 2025 by rpki-client