Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/j4dVBdoH8vK9RiH2K2KeAQEePbg.roa
File: j4dVBdoH8vK9RiH2K2KeAQEePbg.roa (raw, json)
Hash identifier: 9xvVslrKruLxFbBWUt4V8C4ZKh9QgfN85oJAyiTv130=
Subject key identifier: 8F:87:55:05:DA:07:F2:F2:BD:46:21:F6:2B:62:9E:01:01:1E:3D:B8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B45
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/j4dVBdoH8vK9RiH2K2KeAQEePbg.roa
Signing time: Wed 25 Dec 2024 15:55:03 +0000
ROA not before: Wed 25 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 25 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8F875505DA07F2F2BD4621F62B629E01011E3DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:04:d7:f3:6a:4c:f6:2f:d2:bb:ab:48:d4:
c0:02:4e:50:43:ad:80:35:fe:72:d2:12:75:79:84:
e3:92:75:e3:61:35:e2:49:25:ca:4b:2b:06:1e:1d:
77:2d:b2:54:ba:1d:b6:1c:17:06:91:dd:38:c0:55:
1d:71:8c:bf:0f:b4:ea:de:0f:77:3a:bf:e2:73:27:
10:dc:01:ae:96:e6:9c:e3:ee:4a:0b:2f:b9:0a:a2:
07:54:7e:df:1a:d9:2d:4a:8a:1a:2c:28:25:dd:30:
30:3c:8b:74:02:31:69:77:77:c3:cb:ba:52:e6:90:
7f:2c:c2:ad:ff:3d:84:2a:91:12:dd:52:cf:ce:98:
63:89:e9:0f:4a:80:d8:c9:d3:1f:38:6d:cd:6b:47:
e2:f9:98:a6:b0:38:c7:59:53:cc:5b:6c:e5:cf:5e:
d8:3f:6b:3f:90:8c:ea:66:b8:26:58:b5:79:ce:17:
c5:19:3e:a6:71:bc:be:e4:9e:c8:55:7c:fb:53:64:
8b:6c:5c:7e:b5:ad:6b:0f:80:03:aa:50:af:85:a7:
a8:71:41:99:b7:10:56:d2:bd:70:f6:b2:1c:be:1f:
32:a1:0e:78:24:74:76:bb:8f:0e:db:74:13:bd:4c:
9b:0c:ae:8d:f7:b7:66:a6:02:77:e2:78:f9:bf:2b:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:55:05:DA:07:F2:F2:BD:46:21:F6:2B:62:9E:01:01:1E:3D:B8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/j4dVBdoH8vK9RiH2K2KeAQEePbg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d3:0a:c3:e7:7d:f8:b1:4d:98:f3:7d:02:26:dc:3f:44:2a:
04:a1:99:7a:16:72:87:9a:91:18:9f:f4:7f:2e:e7:cc:ed:dc:
4e:75:7f:a3:ea:0e:76:72:9c:d3:92:96:3e:c1:89:48:ef:39:
bf:4d:a7:d1:34:1f:07:11:2e:c5:5a:50:85:56:55:32:4c:00:
bf:d5:5c:84:8b:fc:46:ad:4c:34:ed:30:bc:e3:a0:03:a7:28:
50:6a:d8:ed:6e:ca:07:64:37:77:65:f0:70:36:e1:82:10:b1:
87:a3:71:2c:65:23:68:7e:9e:74:7a:87:16:3e:90:95:dc:dd:
d1:5b:fd:ed:ac:6b:0e:51:f8:94:b3:37:80:20:35:33:f9:3d:
04:a4:4b:ad:af:fd:d8:c8:a0:85:8e:52:75:54:06:3a:79:b9:
f1:5a:40:c1:6d:66:56:5e:a4:5a:c6:67:ea:1f:58:5f:c2:54:
31:2d:8e:5a:e1:9f:d0:04:bf:cd:df:30:c4:a7:48:99:fa:c4:
bb:4d:cd:08:ac:68:28:40:56:ff:a1:ed:13:f2:eb:16:0b:20:
11:29:4f:77:1d:a0:00:b1:81:7d:5f:c0:03:ae:f6:6a:06:17:
5d:df:66:34:94:fe:27:84:1d:74:9a:a2:8e:5a:8f:83:b2:b0:
4b:0e:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:42:53 2025 by rpki-client