Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ppBahlqZFHr8oWynVny9pblIt4o.roa
File: ppBahlqZFHr8oWynVny9pblIt4o.roa (raw, json)
Hash identifier: cDbkfGAP9x7SIR7sFn/jaMz9T6UkUbj6KIWsIlddp08=
Subject key identifier: A6:90:5A:86:5A:99:14:7A:FC:A1:6C:A7:56:7C:BD:A5:B9:48:B7:8A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B97
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ppBahlqZFHr8oWynVny9pblIt4o.roa
Signing time: Fri 03 Jan 2025 15:55:03 +0000
ROA not before: Fri 03 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 3 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A6905A865A99147AFCA16CA7567CBDA5B948B78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:78:5b:9d:07:16:ae:28:8a:9d:14:b1:49:
2a:87:35:a6:5d:0c:e9:c0:17:94:e0:26:86:ad:c5:
45:8b:e2:31:65:fd:2d:48:12:1e:2c:23:cc:11:c7:
20:9a:18:d9:f1:f6:86:3a:5e:06:68:b0:7a:d8:47:
14:34:3c:ec:2d:ce:3b:55:2f:57:0e:b5:08:2f:f6:
56:dc:35:0e:4f:4d:5c:41:ec:0f:0c:a5:0b:20:3e:
ca:cb:73:a6:0a:22:8d:53:ab:ca:0c:68:9d:21:ae:
7a:ff:58:cd:ec:d5:13:02:bd:e9:7d:dc:8c:bf:c1:
93:f7:96:cf:86:13:1a:4e:fe:ab:57:c0:aa:b7:9e:
4f:c8:d6:f5:82:2b:ff:3a:ec:95:14:20:d4:ef:1c:
aa:29:15:78:aa:c9:ce:e7:87:ed:6e:36:e6:6b:e6:
f8:3f:11:ed:81:f0:f7:aa:6f:bd:7f:75:f7:ca:8f:
23:b5:38:29:59:98:58:78:98:1f:40:dd:31:d1:19:
a8:c5:42:e0:05:7b:b7:26:64:26:55:8d:24:0a:57:
8d:e3:58:07:2a:d9:f6:b2:39:24:1f:b4:fd:d3:6b:
ac:80:41:94:b8:d0:60:1c:4f:9e:9f:a0:6a:95:27:
e0:ef:26:17:e9:58:8a:6a:c5:ed:82:81:ad:37:13:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:5A:86:5A:99:14:7A:FC:A1:6C:A7:56:7C:BD:A5:B9:48:B7:8A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ppBahlqZFHr8oWynVny9pblIt4o.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
26:44:8f:78:82:7c:4e:2c:dd:80:d8:34:fb:ff:d1:d6:ec:0e:
ff:b4:dc:f2:5c:c7:d2:2b:22:7b:0f:b9:72:7b:07:9d:e8:c0:
ff:99:b6:60:c7:e3:66:74:ec:90:cb:70:ff:d5:64:52:7b:84:
98:13:c6:14:7b:b7:2a:f6:07:ca:92:af:1d:fe:88:0a:f3:00:
5d:df:cf:73:42:23:9b:0f:14:74:9d:d8:10:d7:7c:7a:0c:2e:
c4:74:91:a4:c8:ac:b6:92:41:34:a9:19:46:3e:04:f4:ea:86:
62:93:a0:77:e3:49:ad:4f:03:6b:f8:84:c7:e3:e2:38:53:1f:
3e:0c:ed:e0:ec:b6:48:17:13:3b:24:da:cc:fc:78:54:a4:85:
64:f5:b4:6e:bd:70:64:af:73:43:f5:a0:c8:6a:c6:71:50:60:
b6:f8:46:39:9a:cb:66:d8:80:f1:b6:11:24:aa:0a:d0:91:e6:
69:77:5e:ff:2a:5e:77:76:6f:59:7d:a8:fb:bf:52:c1:20:df:
9a:fa:91:33:2e:2c:b6:5a:67:82:e8:ee:5c:53:05:a7:ac:52:
d0:81:92:5b:c6:93:96:a4:5e:6a:aa:ce:53:13:5d:93:3f:60:
81:0e:f4:8a:ed:4d:fb:1f:c9:7e:d5:9f:51:15:08:64:12:e6:
24:6e:70:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:59:54 2025 by rpki-client