Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hutbUez4dabG_nz7znA4mnu29ro.roa
File: hutbUez4dabG_nz7znA4mnu29ro.roa (raw, json)
Hash identifier: L5ErzYBRc/T1SMqOP0NfF64uwFwki4zqlmuvg/eGXI0=
Subject key identifier: 86:EB:5B:51:EC:F8:75:A6:C6:FE:7C:FB:CE:70:38:9A:7B:B6:F6:BA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BFD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hutbUez4dabG_nz7znA4mnu29ro.roa
Signing time: Tue 14 Jan 2025 23:55:03 +0000
ROA not before: Tue 14 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 14 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86EB5B51ECF875A6C6FE7CFBCE70389A7BB6F6BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:b7:4e:2c:1f:d0:c7:ad:13:bb:d6:59:57:
7a:e9:12:e5:03:fd:4f:06:47:1d:26:4f:1b:4d:ef:
54:b6:22:d3:c7:43:9e:93:75:3c:4b:92:23:0e:44:
40:65:be:04:bb:87:46:09:be:0f:23:92:c3:ba:e3:
40:ed:64:e8:6d:eb:b4:54:67:6e:8b:10:39:da:b2:
55:8d:e0:9a:20:f1:e0:ea:a0:14:d9:a1:0e:6d:19:
8d:78:47:48:72:ba:be:8f:42:76:86:ca:f0:64:16:
63:00:ff:6f:f4:80:9d:76:48:bc:03:a4:c4:c3:ae:
2d:bb:94:6c:61:37:ee:46:23:8d:43:2c:79:f2:f6:
86:69:e6:80:aa:10:aa:e5:57:f4:71:76:67:41:d2:
02:64:f4:f9:d7:ae:88:d4:2a:f1:16:e9:ad:95:70:
2a:2a:b9:6d:92:66:a5:bf:15:af:1f:fa:3c:a3:da:
20:9b:a2:0f:93:d9:ce:ab:eb:59:98:05:87:1c:2c:
e5:28:e8:f1:2c:aa:e2:51:68:32:cc:a1:04:7f:55:
49:9c:cc:f8:25:42:8a:85:39:e7:3c:75:a8:c1:48:
b4:a8:0a:a8:77:7a:79:ce:54:59:aa:c2:0f:21:30:
ed:97:f9:6a:f1:b5:f6:8e:96:16:ba:c4:4f:79:44:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:5B:51:EC:F8:75:A6:C6:FE:7C:FB:CE:70:38:9A:7B:B6:F6:BA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hutbUez4dabG_nz7znA4mnu29ro.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
88:be:c4:6c:58:a5:c0:22:0a:68:bc:ce:d7:dc:bf:9c:8a:1b:
ce:b2:e0:f6:60:98:57:86:8e:55:01:c7:8c:07:01:13:3c:2e:
25:e8:35:3f:e6:2d:5e:7a:d7:2a:53:aa:ca:6a:9d:33:0c:33:
25:1d:c0:6b:07:2d:14:7e:10:6e:f1:bf:ca:14:59:ab:48:d3:
94:2d:61:25:7c:4e:42:a6:16:ed:03:df:b5:d9:2e:76:84:6e:
9b:56:bb:1b:c0:82:4d:d7:5d:8d:2e:7f:fa:ac:8a:33:dc:5a:
1d:10:9e:fe:a2:d0:2b:00:cd:f0:c0:5a:a3:72:57:df:eb:b2:
df:75:b9:0b:6e:b6:1d:aa:bb:5d:eb:86:a6:5c:59:fc:81:3a:
2f:e9:46:4f:90:c8:ed:fe:07:42:a3:11:9c:c9:9e:48:43:71:
33:87:8e:de:2d:fb:5e:24:93:df:83:58:8d:8b:cc:0d:28:b1:
1a:06:27:88:fb:80:2d:2d:1e:81:83:b4:77:99:31:e2:c2:02:
5e:78:e5:a7:88:03:95:60:13:b0:c3:a2:ea:78:6b:e9:48:6a:
c2:fa:ae:4b:b0:30:a9:4c:f7:d8:ea:28:98:d5:34:a2:9c:d7:
2c:da:d8:c9:6a:84:68:1a:da:57:71:3a:58:5c:62:71:f9:21:
92:a8:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:11:16 2025 by rpki-client