Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hw0iUbG18_ohv1j5NFLh5Zya9Xo.roa
File: hw0iUbG18_ohv1j5NFLh5Zya9Xo.roa (raw, json)
Hash identifier: EWek5YEGjhSdxzSvkC0jvpnO9ySN7gHpGx5UizfiUnE=
Subject key identifier: 87:0D:22:51:B1:B5:F3:FA:21:BF:58:F9:34:52:E1:E5:9C:9A:F5:7A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A94
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hw0iUbG18_ohv1j5NFLh5Zya9Xo.roa
Signing time: Thu 05 Dec 2024 23:55:03 +0000
ROA not before: Thu 05 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 5 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=870D2251B1B5F3FA21BF58F93452E1E59C9AF57A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:97:99:53:49:68:2e:93:4a:a8:6d:f1:08:56:
76:32:60:ec:2d:50:97:8b:e8:35:4b:61:2a:f7:92:
98:46:73:ad:e1:ee:a7:d4:74:5f:fc:c5:05:e8:8f:
d0:e0:d0:9f:dd:75:49:f2:88:ab:f3:c3:3f:fb:1a:
e0:c6:bf:ce:59:5c:2d:02:3c:cc:44:3a:47:fd:f2:
c0:51:7b:e4:15:5d:c3:cd:77:dc:35:8a:45:0b:96:
50:52:dd:c7:8f:f9:c5:cb:c3:f1:60:d4:b1:a9:c4:
93:09:b5:be:16:38:4d:96:17:d4:ae:98:e6:f2:81:
22:e5:4b:30:12:ea:b9:93:1b:b0:e7:69:bb:b4:dc:
c5:b6:27:ab:1b:12:68:8b:aa:b2:64:8a:ab:df:62:
e9:a6:d6:b5:ac:3c:9a:6b:9e:07:08:0c:2b:98:fe:
cc:51:88:bd:e6:ef:c3:96:be:ea:a2:a1:64:68:c4:
6a:23:e0:a5:83:c4:03:62:a7:f9:1c:6e:86:ed:74:
9a:20:a4:37:64:f3:02:d1:06:64:a4:0a:bd:89:b7:
82:54:81:8f:5b:f2:93:76:92:48:42:5c:1a:13:fd:
22:5d:4c:34:c7:c8:cf:a4:4e:3a:29:ce:20:d3:53:
78:cb:df:10:f0:f6:b6:e4:4a:21:e9:c1:d0:9e:81:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:22:51:B1:B5:F3:FA:21:BF:58:F9:34:52:E1:E5:9C:9A:F5:7A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hw0iUbG18_ohv1j5NFLh5Zya9Xo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
49:77:5a:ae:fd:1e:42:bb:e6:fd:69:fa:a2:d0:ed:9e:f6:92:
6c:31:47:d8:be:99:ac:17:4f:9d:5e:89:af:af:cd:2c:5e:81:
2d:f2:79:18:b0:8a:d6:30:9b:24:5c:46:c9:44:62:ea:ee:7a:
e2:00:5f:8e:01:be:3a:e0:b3:85:26:10:d3:bd:0d:9b:4b:d2:
35:d1:84:56:03:b6:e4:31:65:0f:bc:46:2e:83:7a:13:92:fa:
a6:af:96:23:b3:6e:66:aa:ef:fe:cf:5d:a9:5d:78:c4:56:2c:
88:2c:d5:9b:3e:5a:d3:5e:f9:9f:b7:da:bd:16:e6:a2:e4:30:
05:25:03:16:b1:2b:df:21:da:b4:81:fb:e9:1f:54:42:d6:43:
44:bf:06:fa:df:c2:51:2c:92:3d:1b:0b:82:3e:b3:57:e6:6a:
da:45:36:1b:1b:ef:98:5e:56:5f:1c:77:4f:00:a4:a4:f5:fc:
72:d7:0b:88:b6:09:f4:b2:60:a3:3b:ca:d6:73:74:8e:a8:86:
3c:70:4f:29:b8:de:e4:eb:44:56:c7:ad:6d:e3:62:76:bd:ae:
b6:7b:ad:50:a2:56:fc:2e:41:d8:29:af:03:b3:be:ce:e8:c9:
ee:b0:a6:56:87:bd:1b:e3:66:d5:ab:9f:9d:e3:9c:bf:8a:78:
c6:22:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:41 2025 by rpki-client