Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eXufV879vJZf_S73VwpKRjRtVHY.roa
File: eXufV879vJZf_S73VwpKRjRtVHY.roa (raw, json)
Hash identifier: B5PtpVu1MlmPsjc4qZobbBK7fO3kmwOOhaX1qiZd6Us=
Subject key identifier: 79:7B:9F:57:CE:FD:BC:96:5F:FD:2E:F7:57:0A:4A:46:34:6D:54:76
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BA6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eXufV879vJZf_S73VwpKRjRtVHY.roa
Signing time: Sun 05 Jan 2025 07:55:03 +0000
ROA not before: Sun 05 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 5 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=797B9F57CEFDBC965FFD2EF7570A4A46346D5476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:97:69:ab:41:f6:ab:7d:0e:37:5e:ee:49:
fe:a5:b7:39:0e:51:b8:63:0b:a9:b8:85:e3:ed:1b:
18:40:ef:ff:ae:97:a9:31:1a:bf:92:c9:8d:a4:95:
b8:dc:30:16:e9:8f:b2:87:41:1c:5b:2a:9c:3e:5d:
83:a7:ef:14:cf:c6:fb:54:e5:cf:02:18:48:aa:06:
a3:ec:11:88:3a:6c:f9:bb:13:d2:05:d6:a7:c1:31:
74:67:92:8c:43:a0:5c:64:16:ea:72:62:b3:6f:22:
ce:23:33:a7:d1:8c:4e:b8:fb:8a:9f:c6:cc:75:17:
c3:34:ee:bf:9e:ea:63:d6:24:29:20:5d:a3:c5:9a:
86:04:a2:5a:73:8a:3e:1f:bc:25:d5:07:9c:dd:12:
91:65:2a:ea:e8:b8:be:10:62:85:08:08:70:9a:8e:
73:00:72:5f:c1:2a:21:cb:04:f9:c6:91:4a:ff:4f:
97:18:db:e6:9d:3a:aa:8e:ea:d7:91:87:e2:eb:d5:
ce:5d:61:37:26:66:c0:3e:b6:39:f4:2e:d0:ee:93:
b3:3f:15:88:39:b5:e0:36:a0:95:32:7d:f6:05:0e:
fb:3c:53:5c:b2:d8:c4:07:de:3d:24:26:d5:51:d4:
d4:75:49:9f:b7:f5:6e:f2:5e:da:e7:c8:b7:f3:48:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:9F:57:CE:FD:BC:96:5F:FD:2E:F7:57:0A:4A:46:34:6D:54:76
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eXufV879vJZf_S73VwpKRjRtVHY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0e:b1:6e:32:01:72:f6:16:6f:d2:0d:2b:be:bd:7e:6b:f8:
27:b3:5f:a7:16:f4:82:f4:5a:4b:7b:aa:1b:85:ca:87:8f:a8:
07:93:1a:56:22:bd:ec:4b:46:62:47:47:4c:4a:0d:76:89:ec:
bd:c5:c4:e0:ac:cc:08:ec:3f:98:3b:1c:01:a0:6b:4c:c4:5e:
67:e7:d8:d6:3b:23:5c:f2:2b:a9:b0:5c:42:a8:0b:21:65:d6:
ed:ed:b3:2d:b0:e2:3c:c4:e7:cb:0d:f3:62:18:fe:a2:90:e1:
f6:4f:63:4c:84:b8:3d:02:74:7f:53:3d:d4:66:b2:c4:af:fc:
91:06:14:22:9c:66:5d:d6:90:cc:f3:25:25:db:89:4c:0b:f0:
6f:ca:51:9a:25:63:d7:35:66:04:86:1a:3f:c9:63:14:03:db:
fb:15:32:54:da:d4:cb:aa:b4:d2:2b:db:86:9d:91:61:2c:07:
85:4d:cc:6d:fd:65:f9:4a:2e:b2:75:9a:fe:92:75:f8:fa:94:
f2:d1:ac:d1:e8:dc:d1:2a:ab:9b:4a:cf:c8:94:64:e2:1b:65:
95:fe:9b:e3:0e:0c:b9:c9:74:b8:bf:19:13:a5:f6:86:65:8b:
71:6b:c3:e7:47:89:69:47:3b:d3:6a:c5:87:61:53:e2:05:08:
99:bd:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:32 2025 by rpki-client