Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/e7ZxU6hByCltp9D6yPKCeyqAURc.roa
File: e7ZxU6hByCltp9D6yPKCeyqAURc.roa (raw, json)
Hash identifier: AcUhnjh9IIzNHToHQR8q3RAE7Fszt9CECzGUzdiyT1U=
Subject key identifier: 7B:B6:71:53:A8:41:C8:29:6D:A7:D0:FA:C8:F2:82:7B:2A:80:51:17
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A91
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/e7ZxU6hByCltp9D6yPKCeyqAURc.roa
Signing time: Thu 05 Dec 2024 15:55:03 +0000
ROA not before: Thu 05 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2705 (0xa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 5 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7BB67153A841C8296DA7D0FAC8F2827B2A805117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:15:63:a2:f3:f8:80:26:24:0f:44:05:a9:
a1:e2:d9:e5:42:8b:b2:65:d6:85:7e:d7:73:6a:30:
e9:5a:66:a0:ef:4f:eb:68:26:3b:97:c1:26:23:a0:
fd:a5:e1:09:78:06:a3:97:a2:76:81:17:b0:ee:6e:
f5:ed:78:3d:7c:2e:03:02:06:38:51:e1:d0:4e:af:
ae:3c:d3:f5:23:f1:63:d0:d5:ab:62:62:1d:57:10:
b2:c4:12:48:ac:49:4a:cd:32:10:c2:a5:5c:ab:ed:
52:35:d3:66:b7:1b:de:7a:ac:41:1d:e1:87:ec:a8:
ea:5f:3c:3b:47:95:b6:50:ff:4d:c0:cb:d7:f7:7f:
ab:65:90:aa:5f:b6:71:7a:32:08:f2:7a:19:9f:76:
09:58:41:e7:9f:9e:89:ce:14:a3:94:0f:fc:73:1b:
57:1e:88:9c:1c:aa:31:88:b1:04:d2:0d:21:fd:47:
fe:75:31:7c:3e:4d:1b:ab:e1:10:a3:fa:2f:1f:36:
df:27:8d:e2:c6:5d:f1:1f:41:89:66:92:60:2b:8b:
2f:3d:88:fb:1c:8e:a7:fa:9b:4b:21:3d:96:7d:8e:
77:b7:1f:ee:a3:a6:b0:bf:92:05:bd:44:60:7a:43:
14:68:13:8e:93:11:06:9f:ca:fc:fe:58:70:af:e6:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:71:53:A8:41:C8:29:6D:A7:D0:FA:C8:F2:82:7B:2A:80:51:17
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/e7ZxU6hByCltp9D6yPKCeyqAURc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:59:09:51:06:f6:4b:78:d6:0c:d9:9a:65:fd:55:36:f3:fd:
90:a9:8c:ab:5f:ff:0a:0a:ce:40:d9:45:7f:bc:e7:2a:8d:75:
21:44:db:58:c3:9f:a1:9a:96:08:79:35:eb:28:16:23:54:9f:
eb:24:a1:e0:1c:19:7b:ac:00:0c:3b:87:62:73:3b:1c:76:76:
c7:96:a9:1b:72:1b:d2:ab:aa:43:c5:05:2e:74:24:1c:f8:be:
23:00:7f:07:9f:dc:36:55:ff:74:81:6d:32:29:b7:2d:1e:d9:
8f:d7:b3:4a:93:72:23:9a:2c:50:79:01:79:bc:21:a6:44:c7:
d9:78:b0:ce:dc:60:6a:1e:4d:3a:2c:37:4d:94:9d:3e:b6:e0:
9d:85:4a:32:7d:a8:64:f8:eb:5a:a1:3f:ab:8f:93:29:8d:7f:
ea:d6:92:b5:33:b4:27:e1:25:7f:41:a9:b2:44:ce:68:ae:0e:
a3:69:9a:42:50:c4:3f:f7:8f:f2:da:03:d2:ad:98:70:1b:df:
5b:dd:72:df:69:00:59:e6:61:94:a9:e0:63:73:2d:5b:a5:3a:
1a:97:7c:42:bc:aa:b8:e5:1d:b0:2f:ea:47:84:c1:f5:cf:b1:
7a:09:c5:87:a4:10:6a:01:19:8d:48:20:2a:d8:94:90:ef:ea:
2b:5d:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:18:13 2025 by rpki-client