Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/npOQjJ8zjzOsmj_3i7dkA7LqBs8.roa
File: npOQjJ8zjzOsmj_3i7dkA7LqBs8.roa (raw, json)
Hash identifier: yuXDYz+yhy9ZfLgRTFpXNBg8RGDYcAgc3UHEFf2l+FM=
Subject key identifier: 9E:93:90:8C:9F:33:8F:33:AC:9A:3F:F7:8B:B7:64:03:B2:EA:06:CF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AC4
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/npOQjJ8zjzOsmj_3i7dkA7LqBs8.roa
Signing time: Wed 11 Dec 2024 07:55:02 +0000
ROA not before: Wed 11 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2756 (0xac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 11 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9E93908C9F338F33AC9A3FF78BB76403B2EA06CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:35:1c:8f:d9:b5:61:d9:36:4f:49:9c:47:
e4:3b:f0:b2:4b:34:30:e6:30:cc:bb:2d:09:a2:d1:
8d:6f:a6:4b:2d:d6:a4:93:b0:08:d5:0a:60:45:08:
7f:d4:fd:65:bc:45:db:04:72:b1:82:e8:33:7c:14:
c6:21:03:00:45:90:02:1a:2a:45:63:d1:c7:61:66:
bf:39:78:50:8f:9d:a7:fc:03:65:c9:10:67:01:00:
a1:72:49:64:dc:a8:cd:54:5b:7f:cd:af:47:2f:52:
a3:52:af:98:7c:55:40:76:3d:92:e0:e8:3a:dd:2f:
54:3e:84:9f:57:51:39:bb:ef:60:39:35:fd:80:01:
46:3d:93:3e:b3:e0:7b:72:b3:40:2c:6e:ca:be:ef:
49:fd:9c:68:32:32:81:a9:ef:23:9c:30:36:00:44:
82:0d:b7:6c:4d:47:49:e7:07:2e:9e:d7:f4:99:e9:
e5:83:2e:ab:53:3e:3b:7a:c7:72:65:d3:a9:45:00:
8d:a4:29:c9:37:39:53:d5:93:4f:9d:94:12:01:27:
88:aa:34:f6:a1:63:0b:71:2e:c6:b1:88:cc:cf:5a:
43:50:82:d8:ab:da:0d:3a:5a:37:46:bf:08:b4:16:
25:26:40:4b:11:2a:5c:33:01:17:f4:6f:eb:19:ed:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:90:8C:9F:33:8F:33:AC:9A:3F:F7:8B:B7:64:03:B2:EA:06:CF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/npOQjJ8zjzOsmj_3i7dkA7LqBs8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f7:35:bc:91:3f:b6:a4:d0:cc:11:2e:b8:e6:7b:19:fa:60:
2b:b7:43:f2:2a:33:78:58:db:87:ed:e9:99:e2:b0:13:c6:72:
ba:a4:d0:ac:3a:2c:78:85:03:c2:df:f3:c9:54:b7:2f:17:fb:
78:23:63:ca:30:65:c8:0d:02:bc:a0:9e:a4:f2:6c:05:65:ab:
44:bf:35:eb:e2:ae:ba:e3:0b:c1:c4:40:4e:b5:d9:54:fc:d2:
66:81:86:a1:3f:19:0a:cd:3e:5c:cb:1c:23:8f:4d:e4:b6:52:
a6:8b:51:5b:4f:bc:aa:26:b8:fb:ab:cb:d6:f5:19:66:bb:ea:
a9:2c:e7:c6:68:0b:66:1c:d1:15:7b:43:ab:6b:f0:c1:6a:70:
c4:bf:fe:0f:20:ba:0c:2b:6a:aa:c1:53:26:de:3b:86:97:a0:
56:3d:9c:d7:53:2b:e2:5f:69:1c:7d:96:46:ff:9d:fc:34:94:
af:79:a6:74:91:6b:5f:43:ad:ec:b6:fc:59:9d:46:8b:b7:e6:
28:e4:de:c2:71:ea:33:40:c1:5b:b4:8d:39:8a:39:c4:1a:80:
5e:11:1c:8a:08:6a:40:60:9b:65:71:da:75:8e:87:af:49:c3:
ee:18:de:c1:b1:2e:58:47:e0:f0:d3:82:d7:b9:54:4b:5d:ff:
d2:f6:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:57 2025 by rpki-client