Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/msA6jlwDz1dQUGZBhe0hoDbsiGY.roa
File: msA6jlwDz1dQUGZBhe0hoDbsiGY.roa (raw, json)
Hash identifier: AjURGXl7AJ0ZgCmpppa6597exXJMZCkd1NqUn0Xd1z4=
Subject key identifier: 9A:C0:3A:8E:5C:03:CF:57:50:50:66:41:85:ED:21:A0:36:EC:88:66
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B21
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/msA6jlwDz1dQUGZBhe0hoDbsiGY.roa
Signing time: Sat 21 Dec 2024 15:55:02 +0000
ROA not before: Sat 21 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 21 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9AC03A8E5C03CF575050664185ED21A036EC8866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:dc:28:ea:06:64:74:04:70:8e:dd:51:4b:
10:8d:60:70:26:09:fb:4b:59:d9:4d:74:a8:90:7e:
7f:71:6f:b4:9f:dc:c9:2e:9c:4b:17:bc:9d:82:78:
d3:de:72:2f:38:46:8b:6e:01:d6:ba:51:0b:4b:27:
08:64:71:f6:9a:46:a5:c3:ff:37:cd:23:57:9a:85:
8f:d4:aa:43:0c:6e:6e:40:9a:08:13:0d:c1:46:d1:
c6:3a:e8:27:0c:63:c5:76:70:8e:38:07:20:c3:72:
1c:cc:0d:60:ba:f8:5f:64:e1:e4:fb:91:69:fa:12:
4a:ce:9d:14:4b:b4:3a:97:1c:d6:71:d0:af:2c:b1:
16:89:81:28:4e:5d:2e:44:96:a1:f5:ac:0b:98:64:
a9:4f:36:8f:7b:b1:25:bb:ca:77:ca:55:3a:bc:a4:
ea:81:41:14:72:45:a7:77:f7:2e:d3:99:0b:07:f2:
50:a5:2e:ee:1e:97:5f:77:89:07:82:53:ac:f6:4b:
6c:a2:fc:8f:00:57:f5:70:27:c7:f0:a0:14:b6:e9:
de:24:ae:68:b6:1d:ae:f2:27:97:bc:29:09:5b:db:
2e:6d:5f:69:2b:78:d0:d1:a2:71:72:2b:16:19:96:
b3:3b:c7:44:f5:5c:be:56:1b:1f:55:1d:80:c4:a5:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:3A:8E:5C:03:CF:57:50:50:66:41:85:ED:21:A0:36:EC:88:66
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/msA6jlwDz1dQUGZBhe0hoDbsiGY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:de:8d:bd:04:a2:30:7a:35:43:ed:9e:f9:e9:84:16:bc:ca:
c3:99:6e:27:4f:78:f1:e8:eb:d5:d9:a8:c9:02:28:e0:ec:d2:
d8:01:c8:a1:25:5f:bf:61:0e:e1:aa:b7:fe:fa:ae:1b:33:a8:
76:48:36:a7:34:67:e8:5d:7b:e8:a6:fa:5c:ce:da:e3:97:72:
ea:5d:aa:54:c1:d8:8e:0f:04:09:fd:ee:c3:7f:79:2b:1f:83:
48:97:cd:93:1f:f5:90:0d:d4:6f:fb:91:56:50:2b:7f:69:39:
2d:88:61:7b:0c:2c:8f:05:9f:60:7f:26:5c:aa:4b:e2:40:b3:
01:8d:7e:c2:36:17:6d:6e:d5:31:d0:82:dd:87:c5:4e:2d:1d:
23:6c:60:fb:ca:87:70:ca:f9:e0:6a:1a:48:39:15:75:a8:71:
ac:e6:f7:24:02:81:87:f0:7a:2c:95:ee:16:48:7c:b5:0f:d4:
cc:9e:26:b2:06:f6:7a:4d:24:c3:d8:02:0c:43:19:21:75:7c:
61:d2:7e:be:8c:23:61:90:82:73:93:88:3b:ba:63:3a:8f:93:
7c:7d:2b:3a:16:72:a8:a0:32:1e:56:4c:6c:ee:4b:e4:ab:80:
c3:48:ca:43:59:31:d2:59:8e:15:b3:fc:27:46:f7:c2:b5:d0:
54:a1:ee:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:15:28 2025 by rpki-client