Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/iS-hVRUW-IKKeE-cQmoVlQ5Vfdw.roa
File: iS-hVRUW-IKKeE-cQmoVlQ5Vfdw.roa (raw, json)
Hash identifier: kp0l4mDT8iQWMk1JoYxoF6Xnnu7POOnBuIItGqub7yI=
Subject key identifier: 89:2F:A1:55:15:16:F8:82:8A:78:4F:9C:42:6A:15:95:0E:55:7D:DC
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BBE
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iS-hVRUW-IKKeE-cQmoVlQ5Vfdw.roa
Signing time: Tue 07 Jan 2025 23:55:03 +0000
ROA not before: Tue 07 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3006 (0xbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 7 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=892FA1551516F8828A784F9C426A15950E557DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:fd:8e:30:59:03:e4:c5:c2:c3:bb:f6:35:
0f:8d:43:4f:93:93:92:a5:88:ad:53:35:66:4d:bc:
27:8d:26:43:50:56:d7:f5:e0:dc:d6:1b:ed:52:47:
5b:bb:58:76:99:5d:ae:2f:e1:03:3b:e7:9e:60:f6:
c8:40:56:b9:1d:d8:c4:9f:18:83:38:36:1e:76:1c:
8a:a4:71:eb:75:9b:15:fd:e0:63:b2:b1:b1:1a:4c:
64:2a:b9:05:98:64:8d:08:db:d1:eb:ab:06:e0:24:
ab:5d:78:95:f0:8e:36:8e:c2:0a:cf:9c:5e:60:18:
81:02:0b:e2:a0:28:4e:46:c1:82:4d:28:e1:a4:8e:
4e:26:42:28:ff:d2:08:a6:2b:9a:27:09:89:c1:1c:
d3:d2:bf:39:5b:51:11:63:cd:98:a9:62:6b:a3:9b:
64:ff:d0:57:0b:ce:18:64:78:a2:4a:d8:3a:45:4b:
88:78:ba:5b:10:1c:57:06:aa:85:77:bd:b8:82:a8:
98:50:66:2a:29:1f:e5:ee:c1:30:f5:18:67:1a:df:
04:17:03:d0:1d:77:3f:14:a9:45:85:df:bb:61:4d:
82:be:c8:f6:f6:d4:3b:a8:3e:91:bc:92:9c:58:93:
db:43:4d:c1:b5:e9:08:81:c8:32:40:4a:d6:61:f9:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2F:A1:55:15:16:F8:82:8A:78:4F:9C:42:6A:15:95:0E:55:7D:DC
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iS-hVRUW-IKKeE-cQmoVlQ5Vfdw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:4a:1f:8a:16:ec:07:ca:93:57:bd:c6:7d:94:0d:51:38:18:
40:ef:f3:26:01:5f:54:d0:32:79:3a:d6:93:24:79:f7:11:ef:
e1:32:b7:2a:9d:51:16:b9:20:59:c3:ee:f8:25:43:cc:2f:68:
90:27:58:48:18:dc:20:42:6a:5d:f2:19:3c:d6:25:fa:94:c4:
92:3a:84:15:6a:fb:87:27:4a:9e:d8:0a:6e:ca:8b:d4:e8:a8:
8f:1e:26:c8:cb:28:ae:8b:db:4c:eb:ee:53:1b:24:7a:14:a0:
42:e0:df:26:3f:9f:19:bb:99:aa:e7:a0:5c:f8:89:e3:67:d4:
e0:36:0e:20:1a:85:3d:1d:48:d2:07:56:ff:9e:05:48:35:d4:
0f:37:91:05:f1:88:a6:fd:e0:b9:94:87:26:b7:55:22:5e:1d:
da:db:e5:b3:b0:31:6d:4e:b4:18:a9:94:a6:64:11:87:41:19:
5a:e8:49:37:a5:8f:d5:c2:d1:f6:e4:76:58:c2:70:ea:d6:bd:
c0:37:18:40:13:95:ac:ee:65:75:37:d0:90:37:97:16:e5:81:
36:b7:10:14:88:ed:1a:b2:a9:4a:fb:56:bd:41:20:78:07:e8:
4d:cb:79:5c:bb:c9:ef:19:8f:df:24:5b:05:45:a6:fa:5b:93:
80:1a:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:50:03 2025 by rpki-client