Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/m2pGxJ5kouGNAZ_Kdq17Vg5xU5I.roa
File: m2pGxJ5kouGNAZ_Kdq17Vg5xU5I.roa (raw, json)
Hash identifier: KO/j6PQaxVbZzvgp7Qi7w0/9ov1PqXGn4qaOk87Xl8o=
Subject key identifier: 9B:6A:46:C4:9E:64:A2:E1:8D:01:9F:CA:76:AD:7B:56:0E:71:53:92
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A73
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/m2pGxJ5kouGNAZ_Kdq17Vg5xU5I.roa
Signing time: Mon 02 Dec 2024 07:55:02 +0000
ROA not before: Mon 02 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 2 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9B6A46C49E64A2E18D019FCA76AD7B560E715392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:a3:92:8a:8b:83:ce:ca:ad:5b:d2:49:39:
59:83:ef:5c:d9:66:cc:45:f6:63:b0:99:af:f7:6e:
90:8f:50:20:b9:df:c3:42:8a:37:f1:c5:95:2a:94:
41:39:17:51:0e:74:45:95:69:69:f3:05:2a:4d:9c:
7e:73:8f:eb:b5:69:82:97:72:ce:0a:48:5d:f0:a2:
2f:8b:60:ee:30:d5:34:54:2f:dd:10:73:ae:49:2b:
f8:d0:6a:57:0c:77:a4:fa:90:8c:ed:4e:6f:6d:6f:
1b:4f:65:32:85:c1:0e:56:88:0b:00:8c:c4:71:3d:
d8:37:f7:fe:89:7b:5b:4c:c7:f3:5b:07:c8:24:3f:
26:2a:40:c6:23:45:97:c1:56:b1:61:df:a3:b4:82:
f7:51:86:f3:27:f2:10:28:fc:a4:b2:1a:d7:8e:51:
d0:2f:99:d5:2c:85:fa:15:23:18:66:a4:c6:2d:4c:
d3:b9:17:1b:93:8e:8a:05:71:1e:a4:6d:11:d4:17:
ed:e9:9d:79:3b:94:1f:4f:44:27:c6:b7:0c:86:02:
97:59:82:d4:94:52:0d:b3:29:0a:7e:a5:87:73:52:
eb:e4:1a:00:6a:74:e4:39:e0:79:23:17:9a:c2:35:
56:62:23:4f:98:ed:4e:31:2c:77:54:73:6d:b6:33:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:46:C4:9E:64:A2:E1:8D:01:9F:CA:76:AD:7B:56:0E:71:53:92
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/m2pGxJ5kouGNAZ_Kdq17Vg5xU5I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ca:ab:76:4f:7e:32:a2:8c:ed:37:51:e1:ed:b7:35:fa:ff:
bc:e8:7b:0b:83:fa:58:68:49:6f:70:f1:61:9b:c5:ec:4d:49:
8f:5c:a8:6d:d3:7b:a7:c9:52:62:12:6d:08:78:95:10:4f:7e:
c1:2d:fb:f3:6d:04:db:65:16:d5:e0:c5:29:0e:8d:92:34:8a:
5c:c9:3e:27:f4:45:3e:51:8c:8b:df:87:00:1f:fa:20:2b:64:
1e:da:cf:87:58:e2:cb:68:c6:57:46:9a:1c:19:b5:f4:2c:4a:
bb:82:72:3d:11:14:8f:ab:a2:82:83:34:cd:da:f2:81:85:1a:
93:85:33:49:28:38:f9:aa:51:f2:d0:2b:c1:ae:dc:70:75:73:
6c:aa:67:98:2b:84:6a:1e:88:b1:62:ed:36:1a:04:83:4f:fb:
15:53:5b:48:c8:68:c9:66:7e:5c:1c:8e:23:51:49:b5:ad:58:
a7:05:9d:ea:63:e3:d8:8c:45:37:da:c9:2d:11:7d:c7:3c:f7:
c0:69:42:36:0a:d8:bc:68:2b:38:d7:67:65:6c:c8:cb:5d:7d:
a2:ad:12:50:c0:26:22:2d:97:d3:f5:a4:93:ae:85:5e:a9:6a:
43:74:4c:6a:0f:12:bd:be:31:89:77:7a:89:6c:2b:c5:c6:47:
b1:ff:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:21 2025 by rpki-client