Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lGF-ygmj-WZczb49MYYmyPrk3WE.roa
File: lGF-ygmj-WZczb49MYYmyPrk3WE.roa (raw, json)
Hash identifier: VWlxzxXl9nC8IFWBD5nWedg/e+nxSd8C0QoWshA5zBQ=
Subject key identifier: 94:61:7E:CA:09:A3:F9:66:5C:CD:BE:3D:31:86:26:C8:FA:E4:DD:61
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C8D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lGF-ygmj-WZczb49MYYmyPrk3WE.roa
Signing time: Thu 30 Jan 2025 23:55:03 +0000
ROA not before: Thu 30 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 30 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94617ECA09A3F9665CCDBE3D318626C8FAE4DD61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:4c:8a:30:20:56:41:cc:ae:f9:af:85:dc:
cc:70:52:c9:d5:f3:7c:81:96:92:50:ec:d9:fc:ac:
77:70:c6:48:2a:1e:0b:80:d7:a4:36:75:a8:b8:e8:
39:ed:ac:37:de:37:bc:cd:64:f2:e8:0b:18:ae:94:
0c:3c:f1:7e:d8:39:34:06:c8:af:bc:4c:d7:8a:db:
15:f3:9b:28:20:bf:4f:9e:bc:04:6d:72:aa:0c:00:
f4:cb:1d:57:93:ed:e8:6c:21:9e:22:c2:83:b1:ac:
c4:02:a4:dd:72:63:77:52:54:8c:26:0a:b8:3a:a3:
0c:54:f8:bd:af:58:5f:ea:68:d0:e9:da:14:65:ca:
ee:81:16:6c:66:d5:f2:c0:3c:2c:92:21:a4:2f:21:
af:9a:69:f2:3e:f3:46:f8:75:50:65:0e:77:c0:1a:
47:2e:7c:74:e2:c3:2d:8c:3d:3c:cf:36:8c:cc:41:
be:f3:bf:a2:6e:fe:46:36:e2:c4:b4:b1:2e:09:11:
98:bf:ee:43:a0:8a:f7:b1:9a:02:8c:2a:b7:ea:2c:
ca:4f:ba:c0:bf:ab:45:d3:70:be:f0:88:fe:89:f1:
84:79:54:40:73:27:e3:fc:4e:fd:7b:c6:23:55:b1:
ad:06:db:ab:ec:eb:9d:4a:ea:74:ee:62:14:e8:a9:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:7E:CA:09:A3:F9:66:5C:CD:BE:3D:31:86:26:C8:FA:E4:DD:61
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lGF-ygmj-WZczb49MYYmyPrk3WE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:11:a4:63:c7:63:30:ca:bc:43:f3:e2:40:59:80:26:34:d8:
bc:b2:78:ee:e8:f4:bf:ca:a5:3b:4e:91:c4:61:b3:53:e9:f0:
13:21:10:c3:32:4c:f2:43:f3:b6:40:85:d2:9e:b2:83:8c:bd:
f5:8d:52:b6:b0:42:c1:d8:c2:50:8e:21:bf:d5:d2:cc:18:a7:
73:96:37:83:5f:28:4c:89:77:e5:05:62:18:60:65:9e:80:97:
e9:41:a3:92:b2:50:5b:80:15:51:02:08:14:cf:7a:1b:d5:c2:
17:fe:a0:7e:01:d2:06:86:f2:bf:cc:f5:ea:78:ce:2f:11:42:
ea:0d:93:ad:22:56:da:14:f5:46:27:7f:da:8e:c1:9a:f5:e5:
d3:73:d1:62:bf:2d:0d:f5:68:85:b3:06:0c:3e:6f:91:c5:50:
bb:d7:c2:b2:e6:58:e7:4b:ae:92:d6:c7:94:66:95:9f:d6:7a:
06:4b:b7:49:58:04:a7:45:02:0d:01:ee:71:84:93:87:b4:18:
43:87:0c:a2:05:5c:3d:23:8c:e3:ab:16:3b:63:27:b2:00:d9:
bf:09:a5:d2:4b:fd:3c:a7:bc:ef:9e:e4:97:0b:31:30:9f:b4:
59:90:07:4e:cc:04:06:f3:3e:cb:0e:d8:3e:d6:33:74:24:3f:
07:46:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:25 2025 by rpki-client