Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/dXHoaqKkIIH-qO_MY_9WItMJFvU.roa
File: dXHoaqKkIIH-qO_MY_9WItMJFvU.roa (raw, json)
Hash identifier: TBX05Tua7Amv8aE5a7yfCLw+TN9dnTDZFmUOh/eJS9I=
Subject key identifier: 75:71:E8:6A:A2:A4:20:81:FE:A8:EF:CC:63:FF:56:22:D3:09:16:F5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A9A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dXHoaqKkIIH-qO_MY_9WItMJFvU.roa
Signing time: Fri 06 Dec 2024 15:55:04 +0000
ROA not before: Fri 06 Dec 2024 15:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 6 15:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7571E86AA2A42081FEA8EFCC63FF5622D30916F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:5b:b9:b0:0c:10:9a:81:d6:98:60:94:cd:
4a:fd:48:19:8b:4d:0b:9c:ad:18:b5:88:ce:99:01:
aa:68:c6:60:9e:4f:68:e3:df:25:21:59:74:27:7f:
11:0a:49:7c:54:0a:bf:6b:ed:17:aa:59:c1:29:9a:
10:a3:fe:d9:26:19:8b:fd:ec:29:43:52:1e:7f:1c:
67:75:57:f8:2e:dc:b1:2a:72:98:3d:9a:bb:5a:7f:
98:08:50:11:33:1d:a2:e0:ae:58:23:84:8e:15:1c:
23:e9:74:02:cd:5e:d4:3b:4f:f0:da:9a:66:ea:67:
46:60:40:76:6e:f3:0f:81:e7:6b:0b:d1:a2:cc:99:
b4:57:90:ba:fe:9e:ef:37:48:9b:83:8a:91:80:40:
a7:77:a1:bb:de:7f:1f:84:9b:bc:7a:ce:6b:18:22:
12:47:b3:48:0e:40:4a:64:af:54:6c:51:f6:15:f8:
c7:f3:ca:b9:9f:f0:5c:d1:13:5c:95:75:66:53:7e:
9c:a8:a7:63:f8:c6:9e:27:8b:f7:f0:85:ac:b7:2f:
f3:1c:38:13:94:52:3c:21:43:60:e8:59:92:2a:21:
b9:cb:ad:86:ba:f6:b9:62:fb:9d:df:8f:5a:b0:65:
94:fd:62:e5:02:d2:1b:1b:b3:b9:55:45:73:42:89:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:E8:6A:A2:A4:20:81:FE:A8:EF:CC:63:FF:56:22:D3:09:16:F5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/dXHoaqKkIIH-qO_MY_9WItMJFvU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1a:83:64:4b:b0:de:99:b1:a6:88:c1:7f:35:17:1f:d5:61:
65:29:a4:bc:96:5d:6c:75:65:bd:de:17:0c:67:ca:03:e3:15:
83:08:b7:49:21:56:c6:3f:c7:36:77:a9:d0:66:fe:6c:cb:f0:
7a:d6:5d:9a:ac:61:98:eb:29:32:96:da:50:7f:05:51:ee:f0:
8d:8a:c4:38:50:b8:fb:41:91:59:8a:bd:bc:4d:e4:10:9e:f1:
5b:20:0a:34:7e:cf:82:51:17:40:3f:f7:98:b9:cb:e8:7d:04:
07:32:7a:8e:ec:52:0f:ce:7d:7d:fb:36:b6:bd:fa:58:78:a9:
1a:30:95:0e:7c:10:16:d8:cf:a6:32:55:46:5b:fc:2a:ab:5d:
26:19:01:aa:29:66:1e:e2:6a:46:c3:ef:23:31:96:c0:e9:c3:
62:fc:76:13:ea:8e:c9:13:a4:54:87:90:68:6b:f2:b3:63:ff:
39:3d:03:30:9b:73:59:68:67:8e:f0:07:25:72:33:9b:36:43:
5d:dc:fb:93:9d:50:bf:af:34:77:bd:67:49:9e:61:ac:80:ff:
85:dd:b4:72:8e:44:5a:82:df:e3:6d:63:40:79:58:42:3c:85:
12:ba:0d:77:73:fd:82:c0:b3:e9:92:9f:d7:5f:e3:7d:96:b8:
02:be:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:37:47 2025 by rpki-client