Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ppv250_3JVOUigT7RvZZP2U7sLo.roa
File: ppv250_3JVOUigT7RvZZP2U7sLo.roa (raw, json)
Hash identifier: jYf+bQh21M9l+iXk0xWw4UTo8/CJjuni3P7u1xQ8+D0=
Subject key identifier: A6:9B:F6:E7:4F:F7:25:53:94:8A:04:FB:46:F6:59:3F:65:3B:B0:BA
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C00
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ppv250_3JVOUigT7RvZZP2U7sLo.roa
Signing time: Wed 15 Jan 2025 07:55:03 +0000
ROA not before: Wed 15 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 15 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A69BF6E74FF72553948A04FB46F6593F653BB0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:cb:be:e1:1a:9b:60:f1:cc:58:86:8a:d8:
45:34:8c:41:71:ac:d0:1c:94:f4:cd:1a:d3:d9:8c:
bc:a6:fd:ac:5a:1d:81:a2:c2:fb:99:99:58:bb:5d:
c9:95:d2:9d:11:52:65:f2:e3:3a:85:af:fa:c8:92:
c5:8a:0e:ff:d2:c5:5d:69:df:ac:0b:68:64:74:aa:
f6:a7:dd:5d:b9:1c:01:4f:e7:e4:d3:8a:d2:1d:9f:
8b:a0:67:e5:24:3a:c0:99:c0:7a:aa:7a:35:10:27:
ca:3d:a9:9c:cd:13:ca:ac:c3:7a:c8:ad:96:2c:12:
97:07:34:1d:cd:67:29:ca:62:fa:af:76:95:c0:14:
d4:14:57:95:8d:4a:7a:b6:89:4e:a9:e6:55:11:07:
00:23:7f:02:60:b4:fb:91:83:e5:1f:b0:18:f6:87:
09:56:ef:9b:81:d0:e8:43:4e:65:ba:a6:8d:65:9d:
0c:3f:3d:b4:70:5f:42:5d:f8:ab:fc:36:0b:7b:08:
ee:a3:8c:c0:5e:1b:dc:29:ce:0c:75:c7:79:e5:c7:
04:6a:72:c7:d1:bb:e8:2f:01:e2:22:e9:ff:53:be:
cc:c2:75:2c:0d:6c:c8:8c:e8:d9:43:4a:74:4a:a4:
25:91:23:cf:ad:32:e6:28:76:21:8c:70:f8:96:91:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:F6:E7:4F:F7:25:53:94:8A:04:FB:46:F6:59:3F:65:3B:B0:BA
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ppv250_3JVOUigT7RvZZP2U7sLo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d4:4b:78:b0:32:63:69:f8:bd:98:cb:3a:df:00:2f:ab:9e:
47:86:00:17:39:ee:41:1c:31:aa:6f:1e:b7:f0:26:1e:80:2f:
8a:7c:eb:ed:76:32:55:da:4a:6e:70:89:63:9f:aa:16:69:a7:
73:1f:56:08:78:d1:62:0d:02:49:18:8d:74:de:41:da:04:2a:
52:3b:7b:fd:7f:45:96:05:0e:73:28:51:22:88:3e:8c:88:1c:
4d:ab:cd:9d:fb:1d:b8:29:2a:9c:de:35:bb:31:99:b9:ff:cc:
42:36:0c:5e:61:05:44:d1:e0:4a:2e:ec:f4:60:a3:f3:2d:f6:
06:08:8a:07:10:a4:f8:43:53:81:dc:52:4e:d2:ca:f0:58:db:
c9:02:45:de:2c:f9:42:f6:12:b7:62:f3:43:9e:b4:8e:83:69:
55:a9:97:fd:ee:21:4f:4d:b5:33:b8:6f:6c:4c:2e:ec:20:9c:
ea:b4:19:59:e2:0e:52:a6:b8:c5:60:f7:03:22:cb:91:68:44:
17:c2:10:02:d5:de:b6:18:53:69:38:0f:2c:f4:ea:bb:19:62:
8e:31:80:5f:bb:66:44:3e:3f:70:72:0f:ee:80:26:2f:49:73:
c1:ce:51:c7:93:98:8b:3e:07:10:10:fe:12:96:cc:ea:1e:5d:
b1:83:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:01:18 2025 by rpki-client