Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/iSRPVCoHw9m4vop54oQ-0MiWbbU.roa
File: iSRPVCoHw9m4vop54oQ-0MiWbbU.roa (raw, json)
Hash identifier: stUmRQDGea5S11elY45QA9zKy6n0x9WkGDlGu9lesm8=
Subject key identifier: 89:24:4F:54:2A:07:C3:D9:B8:BE:8A:79:E2:84:3E:D0:C8:96:6D:B5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BEB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iSRPVCoHw9m4vop54oQ-0MiWbbU.roa
Signing time: Sun 12 Jan 2025 23:55:03 +0000
ROA not before: Sun 12 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 12 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89244F542A07C3D9B8BE8A79E2843ED0C8966DB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:a2:1c:cb:1d:01:03:a4:f1:74:cb:8d:b1:
74:94:c6:c8:d6:c9:1f:c9:7a:4c:c1:23:12:f3:9c:
04:da:41:96:17:84:37:0d:b4:95:bf:2f:d4:79:3a:
cd:1d:94:e2:27:b8:70:ce:86:04:f9:16:1a:20:41:
9b:6a:7b:a2:28:46:bd:08:03:cb:3b:30:e0:da:93:
68:03:b3:3c:3e:27:89:7a:da:f2:a4:26:bb:f0:95:
e2:8d:99:78:c4:1a:5b:db:3e:41:b5:03:f3:03:20:
5e:73:1c:38:ee:44:94:6c:a8:d7:8a:d6:7f:65:4f:
44:41:d7:b6:59:17:81:c8:45:6c:97:8a:9b:cf:43:
f7:3a:75:e7:04:7a:ee:ba:78:09:71:17:15:fe:20:
2d:56:7b:54:d3:45:ee:86:06:20:8d:ab:b5:42:5d:
53:a9:9f:3f:02:96:8b:67:cc:b2:d2:50:10:f8:08:
f1:c8:fe:e6:23:d4:24:59:f6:78:bd:5d:1b:86:13:
fe:ed:70:5c:77:37:02:10:49:d5:5b:36:6e:10:a4:
8b:42:6e:cd:5b:dc:7c:cc:f6:b9:97:33:1e:db:2c:
60:3b:50:cf:12:0a:8f:e8:43:8d:3a:01:7e:40:c5:
a4:52:21:fd:67:6e:16:1d:4f:17:ab:d0:a5:90:25:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:4F:54:2A:07:C3:D9:B8:BE:8A:79:E2:84:3E:D0:C8:96:6D:B5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/iSRPVCoHw9m4vop54oQ-0MiWbbU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ce:35:92:52:08:35:7d:ed:a0:79:8c:08:a8:9c:e7:dd:b9:
43:24:6d:dd:55:25:76:e6:88:26:ea:a7:0a:c3:82:65:0d:5e:
5c:ce:48:33:de:d2:64:a4:7b:15:50:c2:7f:68:22:8a:70:cd:
ac:61:d8:06:8d:1d:fe:43:f8:02:28:2b:5d:4e:4a:65:00:ca:
ff:0a:fb:b7:03:24:52:27:f1:74:9c:ef:dc:96:14:e3:44:9f:
2f:e2:23:67:68:dd:85:7d:fa:92:31:4f:e9:f1:01:4c:e8:06:
b1:ea:f8:1e:c4:86:5a:a8:df:b5:46:59:21:f2:6b:0b:97:cc:
9e:8e:0a:ef:e7:67:c9:45:18:54:b6:4e:7a:60:1b:f1:bd:1c:
03:fb:83:5c:35:12:4d:56:38:32:8d:62:3f:65:33:98:4c:af:
29:fb:0a:01:e5:2d:ec:4f:7f:f2:19:a1:e3:4b:66:c5:75:62:
c9:2f:b9:39:7e:7f:a2:35:cf:15:d9:36:b1:fd:c9:f7:8b:2d:
98:4b:8d:39:4d:79:cb:dc:d2:55:30:8d:fb:6e:c5:7c:d1:1a:
c0:e7:00:a3:a7:20:68:66:67:90:91:04:aa:80:43:d5:ac:43:
d2:9a:b3:cc:2b:33:bc:69:96:7f:fc:c1:a8:35:c6:2f:3f:f7:
0c:57:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:37:58 2025 by rpki-client