Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/gpaR78uPOok6iKatCwSmus8Cq9Y.roa
File: gpaR78uPOok6iKatCwSmus8Cq9Y.roa (raw, json)
Hash identifier: uTCzYtKTNYYKMw3afkDHkdgyib7IjoV1r5W1kzxeszA=
Subject key identifier: 82:96:91:EF:CB:8F:3A:89:3A:88:A6:AD:0B:04:A6:BA:CF:02:AB:D6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AD0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gpaR78uPOok6iKatCwSmus8Cq9Y.roa
Signing time: Thu 12 Dec 2024 15:55:02 +0000
ROA not before: Thu 12 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 12 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829691EFCB8F3A893A88A6AD0B04A6BACF02ABD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:70:f9:e5:c3:21:fb:ec:10:b2:f4:c7:b6:
42:d3:c7:8e:d4:aa:1e:fd:b4:39:e8:d9:93:cc:b5:
e0:fd:4a:dd:1b:d9:22:02:39:d0:a0:e6:3d:3e:7d:
1c:3c:d8:93:b1:ec:55:0d:3e:df:9b:94:4f:c2:35:
eb:48:b6:0e:23:9e:7f:66:5b:5e:2e:79:f1:2c:8e:
0e:69:8a:a8:8f:48:b5:23:e5:d9:3d:e2:28:46:60:
18:7f:88:40:c1:41:e1:db:b8:b2:8b:fd:db:c8:14:
91:aa:e1:0b:a4:8d:e9:e4:d1:b0:ec:d3:ee:f8:43:
32:06:44:67:10:8f:22:89:39:2a:4a:20:5b:22:13:
d3:cf:ce:2b:cf:b1:12:82:a2:aa:6d:5c:f9:b2:a4:
89:6b:43:3f:8f:ec:c9:77:6a:98:44:6d:13:15:13:
17:82:97:be:f6:b0:55:02:e1:81:75:6f:8c:4c:e9:
67:11:87:16:6f:8a:75:ce:0d:16:0c:f8:e7:b5:5e:
ae:68:64:07:e7:3e:5d:83:e9:68:e9:c2:5f:ff:02:
95:21:cc:69:25:95:64:6e:56:4e:4f:b3:86:53:a5:
1d:b3:19:de:30:17:e4:b4:b0:ad:77:25:8b:71:ea:
38:d4:bc:24:c0:43:6b:40:31:7c:a9:7f:73:25:b9:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:91:EF:CB:8F:3A:89:3A:88:A6:AD:0B:04:A6:BA:CF:02:AB:D6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gpaR78uPOok6iKatCwSmus8Cq9Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b4:88:9a:bd:0a:4e:a8:01:52:76:74:f9:8e:61:a3:11:74:
42:73:9a:3b:e8:d3:d1:65:6d:39:df:3e:fa:48:52:58:9e:ab:
44:f3:bc:a1:5e:0f:c9:a0:9c:c0:1f:fc:16:67:70:d5:a6:d3:
70:bb:3f:bc:58:b3:55:d1:75:f3:fe:f5:ab:fe:1f:15:fa:d1:
c8:ff:4b:fa:20:01:41:27:34:65:26:49:21:b7:94:d7:6c:a4:
ea:9f:9a:9b:f8:8a:a8:eb:64:bf:77:3e:48:b9:8b:6a:9f:fa:
da:74:10:62:d7:07:54:1c:4a:6d:3d:83:69:b7:be:96:86:68:
94:58:c4:01:31:b7:cf:bd:cc:f5:20:15:24:98:64:34:8b:51:
09:45:71:2d:f2:83:b1:a0:f4:3b:43:c4:c4:87:f2:49:f2:1a:
40:42:60:28:86:8f:59:1b:e4:84:f1:9d:a1:f6:b7:cf:09:94:
06:67:8c:2e:f9:ed:37:a0:f5:ca:9d:2d:55:92:8d:4c:6f:73:
cb:dc:36:2a:c0:39:e2:83:04:6d:64:90:3d:19:40:fd:ca:60:
4f:f1:d3:de:0f:cc:b7:50:b9:65:ff:30:b3:4d:18:0a:ad:76:
80:8f:95:06:21:f5:d7:4c:e7:5b:e3:a0:5f:35:36:ce:8e:8b:
83:91:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:01:22 2025 by rpki-client