Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/fqqTTeIq8NSVgnC0ciwG0POIPmw.roa
File: fqqTTeIq8NSVgnC0ciwG0POIPmw.roa (raw, json)
Hash identifier: woAmwtF7FYMOgqBdWbSLDuPo01wXtrfBbud1bTAnMjM=
Subject key identifier: 7E:AA:93:4D:E2:2A:F0:D4:95:82:70:B4:72:2C:06:D0:F3:88:3E:6C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A6A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fqqTTeIq8NSVgnC0ciwG0POIPmw.roa
Signing time: Sun 01 Dec 2024 07:55:02 +0000
ROA not before: Sun 01 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 1 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7EAA934DE22AF0D4958270B4722C06D0F3883E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:6b:2d:63:fc:f4:b4:4c:0c:64:90:67:b6:
39:89:d4:5b:0f:b3:ea:0e:d3:33:61:28:1d:7c:4f:
41:3f:17:25:07:0a:da:17:e7:03:a9:fe:3f:d9:91:
ba:3e:3a:a4:c0:62:e5:aa:ee:fd:12:a1:fc:fd:75:
25:86:3e:6e:a1:34:a5:fa:08:51:91:e7:d8:a9:b6:
bb:99:d2:f5:7e:d3:5b:cc:9f:0f:14:2c:35:d9:7c:
f7:74:49:b6:d2:c2:23:a5:57:b9:6b:8f:1a:00:8b:
c5:8a:34:16:77:8b:e0:83:e3:c0:1c:32:35:b1:d8:
1b:91:1a:e0:36:b1:ed:56:5d:83:78:82:ca:18:cf:
5c:b5:79:32:d6:c7:f4:32:70:a8:9a:2c:be:14:b1:
80:fe:ef:93:38:46:1c:86:c2:d5:17:cd:ba:2b:17:
00:81:d7:4f:dd:87:aa:44:13:be:91:71:73:0f:51:
0e:35:f7:c7:a8:ef:9b:8f:3f:1c:a5:3a:ba:d4:b9:
36:82:eb:60:1c:45:f0:f5:00:c9:e3:4d:72:af:02:
5b:12:90:52:b5:8c:27:66:b7:65:be:c8:40:a1:dc:
a3:33:ec:3a:7a:90:08:ba:f9:0b:60:b6:e2:3d:82:
87:27:cd:fc:f1:c9:8e:f0:1d:ff:fb:69:81:31:2b:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AA:93:4D:E2:2A:F0:D4:95:82:70:B4:72:2C:06:D0:F3:88:3E:6C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fqqTTeIq8NSVgnC0ciwG0POIPmw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:db:80:5b:4f:e4:5e:d3:e5:bc:77:96:3f:c4:01:14:5e:4e:
18:e7:9e:d3:78:0d:4a:4e:0b:f6:e8:2b:14:97:cc:66:66:4c:
88:f3:00:62:87:91:1c:65:c0:e6:ef:7c:81:da:df:d6:be:4f:
c4:be:ca:98:b4:d7:95:ed:b1:d9:32:ef:9a:9b:f8:03:c5:a1:
ce:79:ee:d9:6e:fd:ba:0c:2a:a7:61:6f:cd:2b:eb:e2:2f:a6:
d2:89:be:99:7c:0b:d5:ed:38:aa:0b:c4:02:32:b5:dd:ab:9c:
e4:ae:fe:c5:1e:e9:1d:1c:b7:9a:38:fe:e3:be:cc:84:81:87:
6c:ec:73:27:e7:94:9a:31:01:d2:57:0d:49:56:ff:60:4b:93:
f9:a2:a6:97:f2:98:f8:32:13:69:90:15:84:2f:19:62:a9:67:
95:f6:67:68:08:0a:a8:be:1d:a1:cf:15:ab:8d:7e:b0:07:7f:
8e:19:e9:bc:dd:fa:df:23:a4:fc:d5:3c:3f:bf:e1:5d:70:5f:
de:b9:3c:52:71:fc:28:f4:68:d7:4f:55:f6:24:02:c9:20:8f:
42:85:5a:d3:df:74:61:e6:12:c5:27:7b:d2:ce:04:c3:52:b1:
18:b3:bc:7a:8a:17:89:1b:0f:a0:95:f5:56:80:4c:01:0a:59:
29:f4:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:37 2025 by rpki-client