Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/e6IYndKfxGvUJsVGVDFuGReBpzQ.roa
File: e6IYndKfxGvUJsVGVDFuGReBpzQ.roa (raw, json)
Hash identifier: yTWkFwvWtMzkhH6RgLTBKTmKSxqF0Zz00GjlQ5+Y1Hc=
Subject key identifier: 7B:A2:18:9D:D2:9F:C4:6B:D4:26:C5:46:54:31:6E:19:17:81:A7:34
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0CA5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/e6IYndKfxGvUJsVGVDFuGReBpzQ.roa
Signing time: Sun 02 Feb 2025 15:55:03 +0000
ROA not before: Sun 02 Feb 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 2 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7BA2189DD29FC46BD426C54654316E191781A734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:0a:70:d2:15:7d:94:bd:2d:ea:04:c1:57:
25:90:8a:b2:d2:05:98:60:ee:1b:d3:d0:59:30:31:
2e:5d:b3:7d:cc:41:12:40:b6:84:6b:81:68:b7:d5:
8e:a3:07:fb:c3:1d:1e:36:17:20:72:30:b2:ef:3e:
50:b6:ec:08:47:3b:d1:43:10:12:dd:8b:f8:36:09:
11:24:4a:c2:a5:ae:a8:f3:82:43:8c:b7:cf:f4:22:
37:dc:f5:c7:cc:4f:d5:6d:5e:fb:31:e9:45:dc:83:
28:55:3f:ea:e4:6b:0b:3d:91:08:11:0d:93:75:89:
a2:8c:11:92:3f:e9:7a:ba:61:7f:3d:bd:7f:f0:30:
2d:28:5a:05:22:d2:7d:ff:ec:2e:0d:27:1a:e6:5d:
ec:18:c4:fe:94:41:85:81:a5:3f:a5:a8:f3:f0:ef:
b9:99:99:66:d4:ca:46:21:98:c4:3f:6a:f6:47:98:
70:f5:9c:c2:a4:03:3f:11:71:7a:15:ea:06:b2:1c:
cb:c1:1c:71:23:3f:ea:fb:02:37:ba:8f:78:bd:f9:
62:70:42:5e:29:9f:29:38:8c:30:03:08:b8:d7:12:
6e:0f:c4:52:9c:1d:8d:c7:d9:e1:8c:a9:f8:0b:43:
8c:bd:79:81:a7:07:e7:31:2e:11:2d:c8:92:b5:98:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:18:9D:D2:9F:C4:6B:D4:26:C5:46:54:31:6E:19:17:81:A7:34
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/e6IYndKfxGvUJsVGVDFuGReBpzQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2e:d7:af:f1:29:8c:21:38:d1:db:2c:d7:61:61:f1:5b:dc:
8f:cc:40:5b:4f:31:99:63:8f:17:9c:01:52:bf:71:97:33:67:
e4:11:30:25:d0:57:00:0c:39:76:b4:d7:55:0e:23:66:76:de:
9f:8d:3b:fb:b9:ed:68:49:ad:08:59:4f:65:40:7e:bc:4b:23:
17:63:4a:86:20:95:07:28:7a:4b:6d:62:2b:03:5b:5e:12:3e:
c0:3b:b3:c6:f0:05:8e:24:ca:1c:f1:08:56:a3:d2:ad:b5:0f:
12:c5:53:8f:1d:97:9d:63:ef:11:28:d3:e2:2b:44:0b:43:18:
f5:41:0c:b5:dd:0c:8b:b4:4c:7e:82:99:1a:e4:99:18:1c:89:
98:52:87:64:b2:a2:81:e3:79:86:3e:83:11:b9:0a:9a:cf:af:
ad:8e:eb:7d:4e:2f:84:a1:7e:e7:1b:79:32:8d:98:3a:24:76:
53:9f:04:fe:85:5d:c0:da:e1:a1:24:d6:72:91:30:b2:70:a1:
d6:2f:b2:36:4f:97:d8:ea:db:7d:3a:4d:5a:6f:d7:39:ef:1d:
33:43:d9:8c:40:d6:59:3f:be:3f:16:0d:ac:9a:48:80:e5:35:
8c:66:42:8e:ad:fd:1d:c1:97:90:2f:c2:99:fa:b9:b9:0e:5f:
50:14:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:22:34 2025 by rpki-client