Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/n2VQEoE4vehzhNL4Xehi9qM2q8s.roa
File: n2VQEoE4vehzhNL4Xehi9qM2q8s.roa (raw, json)
Hash identifier: tnJTVcfqs+mv0FitUlpyZcKuo8dJSgujScF4EkhjWS4=
Subject key identifier: 9F:65:50:12:81:38:BD:E8:73:84:D2:F8:5D:E8:62:F6:A3:36:AB:CB
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AEB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n2VQEoE4vehzhNL4Xehi9qM2q8s.roa
Signing time: Sun 15 Dec 2024 15:55:03 +0000
ROA not before: Sun 15 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 15 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9F6550128138BDE87384D2F85DE862F6A336ABCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:80:33:36:3f:58:8e:f8:61:f4:86:01:af:
a0:f5:65:0f:0c:f3:20:99:08:99:b0:3b:87:18:4e:
cf:9a:2f:69:16:74:ea:b0:49:ed:26:89:32:76:d1:
05:ae:27:7c:59:14:74:6e:a3:e6:01:f9:33:dd:1d:
24:2b:7a:95:c2:85:15:f1:e5:da:d9:7c:c0:02:62:
8a:b1:88:ed:c6:68:20:f2:51:eb:8c:d5:9c:f0:0f:
38:08:40:cf:da:16:60:24:0b:a1:46:04:dd:b9:13:
69:91:f6:1e:9a:70:3b:5d:d6:73:de:5e:9d:33:a9:
e4:4c:76:23:35:35:3d:9e:09:ee:ae:9b:8f:bf:61:
86:a9:2a:ba:b3:79:6c:88:11:eb:ac:fb:c3:41:df:
c5:7f:81:33:2f:33:6e:fb:a3:d7:8a:0f:a9:7b:60:
6d:5c:28:4a:37:b0:c9:48:66:38:b5:d9:3f:5e:63:
c9:70:78:5d:f6:fc:16:25:70:1e:03:24:75:ae:24:
5a:97:37:4e:21:5d:f4:f4:47:4d:2d:4d:ad:25:cb:
a1:19:2d:73:2d:67:53:a2:fa:cd:9a:1c:d2:7d:48:
5a:e9:cb:63:31:c8:06:b4:21:51:44:c8:58:59:48:
08:21:ac:c4:d7:2b:df:4f:ab:2d:fd:e2:1b:d8:c4:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:65:50:12:81:38:BD:E8:73:84:D2:F8:5D:E8:62:F6:A3:36:AB:CB
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n2VQEoE4vehzhNL4Xehi9qM2q8s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:38:95:c4:6f:d6:ce:38:69:12:93:c7:e0:fa:15:06:b7:78:
20:f8:df:92:8e:16:64:aa:2d:74:87:c5:dc:66:42:98:11:75:
5f:48:3b:e5:35:a5:ea:e5:7a:65:98:fc:d9:20:33:b3:fd:1f:
57:67:84:31:94:ec:72:74:5c:0c:f1:5a:51:08:d3:5f:d1:2e:
e2:3d:f0:5b:ae:62:73:56:98:da:86:37:67:37:b2:fe:d2:5d:
48:29:93:85:a7:fe:31:7f:1a:81:c9:5d:c6:4f:aa:bd:14:c9:
38:89:51:91:2d:d0:22:7a:c7:21:4f:bd:fc:fa:b8:d9:5d:18:
8c:0b:db:9c:b4:1c:a1:16:dc:b8:13:5f:aa:fe:80:4a:b0:d0:
96:30:23:a3:3c:32:5a:cb:46:a7:a2:ad:4e:12:1b:e3:aa:d7:
7d:7e:19:79:69:66:94:f6:76:45:16:e9:b2:05:79:0b:c2:52:
de:9b:ec:7a:14:5b:c7:e4:55:e6:3b:78:b4:30:e6:fb:3f:fc:
0e:b0:32:c6:dc:fe:6f:b4:c9:21:95:00:35:94:24:10:93:72:
d9:02:10:fd:7e:44:f3:9a:48:b1:92:41:a2:0f:d2:d3:04:e7:
0c:85:39:e7:e6:2d:31:b6:da:d5:cc:3c:9a:33:fe:5a:c1:45:
e7:3c:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:45 2025 by rpki-client