Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/grK1hAz2JlXe42TT7u-s-1A5U5g.roa
File: grK1hAz2JlXe42TT7u-s-1A5U5g.roa (raw, json)
Hash identifier: /xD6+E51L25BiHijdwB4l7fOBk+y0meXFkWWpFtzzaY=
Subject key identifier: 82:B2:B5:84:0C:F6:26:55:DE:E3:64:D3:EE:EF:AC:FB:50:39:53:98
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A76
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/grK1hAz2JlXe42TT7u-s-1A5U5g.roa
Signing time: Mon 02 Dec 2024 15:55:02 +0000
ROA not before: Mon 02 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678 (0xa76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 2 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82B2B5840CF62655DEE364D3EEEFACFB50395398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:b7:90:c6:92:99:82:07:04:7b:f5:01:4e:
3f:b1:64:09:ac:85:8f:f2:22:e2:dc:34:ac:cf:85:
0c:bf:c5:6c:a0:df:31:b4:67:4e:e5:24:9a:1f:75:
5b:e4:c3:f0:b9:aa:72:3a:03:f9:0d:e4:3a:4f:05:
da:c0:d2:2b:46:dc:23:33:32:61:4c:09:51:32:7f:
b0:1b:d3:e8:f9:4d:9d:10:d9:b3:e7:10:4b:28:44:
37:da:3f:32:7d:b1:f1:a7:30:86:37:eb:54:5e:c4:
e3:c5:9c:a9:ee:5d:92:4f:0c:0f:34:20:77:b3:9d:
88:4b:d7:04:ad:ab:a7:33:61:f8:98:29:c9:8f:92:
95:b2:ce:57:8d:b4:dd:38:73:01:30:98:8d:ac:b8:
5e:13:b1:36:fe:ee:d0:32:6f:e7:cf:67:85:7f:f2:
40:ff:42:2f:34:d6:b6:ed:6e:38:5d:cd:9c:5b:ea:
37:4a:6f:ca:c6:77:d7:06:a6:73:1b:a0:b2:f4:e6:
5e:ab:56:3c:6e:ea:e0:32:60:63:52:42:8f:23:75:
01:d5:d5:54:78:c3:44:b9:f0:f1:2f:b5:87:82:19:
6d:ef:7d:bb:c2:28:51:d0:e4:67:1a:e0:af:46:02:
47:ca:f9:90:2a:f0:86:f4:b9:d8:a9:15:53:dd:7f:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:B5:84:0C:F6:26:55:DE:E3:64:D3:EE:EF:AC:FB:50:39:53:98
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/grK1hAz2JlXe42TT7u-s-1A5U5g.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:05:e8:37:b6:5f:1b:7b:6e:bc:0c:09:f0:36:6f:ae:38:b3:
3f:d2:b1:1d:61:5f:df:71:30:2b:16:f6:3e:e5:97:87:01:19:
8d:53:41:7b:b0:b4:e9:bc:3b:1f:e5:a8:8c:40:d6:b1:56:5b:
04:bf:51:8b:76:fa:3d:35:9d:7b:68:5c:ca:6a:c0:e9:19:1b:
18:e4:d7:43:7d:e3:23:6c:ad:a3:91:62:fa:ee:8f:38:8c:b2:
f1:4c:77:b5:5e:1f:05:c4:a7:9b:8f:6b:28:38:a8:8c:8d:95:
80:f8:0d:d2:d0:7d:4f:8a:4a:8a:19:76:e3:d2:97:2b:ef:48:
f9:11:5b:1c:0c:d1:6a:ee:0d:ed:a7:75:ee:6f:91:04:68:2b:
94:fc:b2:fb:a9:97:5a:21:57:2a:51:ac:d3:40:f8:54:6f:f7:
a8:1f:0f:19:b9:0e:f3:ec:2e:d0:94:30:07:7c:7b:96:8a:08:
5b:b3:b5:ff:84:3e:46:91:aa:43:ca:8e:d8:bd:1a:b5:f9:4c:
18:c3:61:a6:71:20:41:6d:cc:ec:a9:e1:f8:60:2d:32:77:c7:
3f:0d:c4:db:ab:c0:b5:bb:90:90:42:0d:9e:e8:82:f4:0d:23:
23:1a:74:24:7e:b2:f3:bf:8d:8d:59:79:30:73:29:ad:b9:dd:
e8:d7:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:43:52 2025 by rpki-client