Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/drd5b1YvqEpGOz4Z7uAA9eakmVE.roa
File: drd5b1YvqEpGOz4Z7uAA9eakmVE.roa (raw, json)
Hash identifier: ExAI3nwycFoxrs2OCwihknLh7W70bz+r7At4+WXnBsE=
Subject key identifier: 76:B7:79:6F:56:2F:A8:4A:46:3B:3E:19:EE:E0:00:F5:E6:A4:99:51
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BCA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/drd5b1YvqEpGOz4Z7uAA9eakmVE.roa
Signing time: Thu 09 Jan 2025 07:55:03 +0000
ROA not before: Thu 09 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 9 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76B7796F562FA84A463B3E19EEE000F5E6A49951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:53:84:f0:74:c8:89:bb:61:b0:45:65:c1:
6b:38:09:a1:00:d3:3b:cb:f8:cf:b3:af:74:67:9e:
5f:f9:e2:67:d2:48:ac:23:ca:40:f2:61:38:70:8f:
07:b9:5b:60:2a:95:76:03:c1:06:e8:bf:70:c9:70:
9b:ac:b4:49:ac:41:c9:5b:f6:b2:41:54:bc:38:f4:
cb:b1:fa:a3:24:bb:5c:4a:63:9b:13:7b:c8:d2:b5:
7f:30:00:47:f4:5f:5a:8a:2f:07:d1:6b:90:14:ea:
d1:c3:1b:f9:f3:49:a2:ec:66:09:f6:d3:a2:40:15:
43:3e:0a:8b:a1:1d:e8:ac:2c:71:22:92:bf:46:ef:
d4:6c:3b:5a:65:d4:16:45:4c:a0:1a:fe:2b:db:9d:
35:03:8e:29:13:51:19:25:91:33:57:52:d0:b9:22:
87:64:74:68:f3:34:4d:b7:1c:e0:7a:c5:36:27:ac:
db:1e:86:4b:8b:a5:fc:d3:fc:67:8f:3c:65:31:f1:
21:51:05:6f:64:12:dd:b5:cb:e1:c7:65:86:50:d3:
c7:2c:3a:ed:36:7c:2c:e2:20:27:0a:86:6d:60:4b:
48:29:64:be:a5:70:34:56:99:6a:10:ab:f9:38:b3:
d4:c0:f6:d7:e9:9f:18:14:ee:58:0d:b2:a2:50:ab:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:79:6F:56:2F:A8:4A:46:3B:3E:19:EE:E0:00:F5:E6:A4:99:51
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/drd5b1YvqEpGOz4Z7uAA9eakmVE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a8:2a:3e:7f:02:7c:9f:aa:a2:04:23:b4:b4:e3:9e:26:d9:
9d:c1:59:8b:c3:d0:e9:fb:8b:5b:7c:25:b9:0e:04:d5:9d:3d:
e8:c8:3a:20:14:e8:58:e7:90:bb:7b:df:26:d5:c6:81:92:64:
6f:a0:e0:15:39:f8:ec:1a:dd:96:94:a0:29:7e:07:55:4a:57:
9a:1d:86:0f:15:f3:e0:52:dc:6e:bc:af:27:5f:77:fb:0f:93:
78:37:64:ec:36:30:e7:6c:a6:b3:a3:a3:b0:ae:a9:7a:d5:ac:
71:e3:43:c7:e5:54:de:1b:4b:d5:a3:8e:44:d8:99:f3:c5:eb:
ee:d0:62:3f:3b:b9:e6:21:21:47:b6:b2:79:8d:bf:90:29:22:
6b:74:01:26:a9:02:93:c2:54:b6:6a:5f:a0:39:1d:9f:99:5d:
bd:00:7a:5a:b7:e7:e1:5d:95:88:b3:94:30:de:fd:99:c1:46:
20:27:70:dc:cb:0d:43:9d:59:4f:02:b7:65:b7:25:63:3f:6f:
7f:d0:d3:8c:8e:ad:5c:eb:73:29:7a:95:e2:89:11:9e:f8:99:
9f:e4:a4:6b:91:ad:54:ac:b8:5d:6f:33:68:68:2d:56:73:95:
0b:7c:64:1a:87:7b:69:26:42:11:ce:5f:79:a1:28:69:22:37:
f1:0b:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:46 2025 by rpki-client