Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/r2tBvVG2ln4WV2Kxppsl6GAY2L4.roa
File: r2tBvVG2ln4WV2Kxppsl6GAY2L4.roa (raw, json)
Hash identifier: vwNoXRMos6ryiNyIbkLBxtkzffAZoOBFQbl4DWsC+Gc=
Subject key identifier: AF:6B:41:BD:51:B6:96:7E:16:57:62:B1:A6:9B:25:E8:60:18:D8:BE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AB5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/r2tBvVG2ln4WV2Kxppsl6GAY2L4.roa
Signing time: Mon 09 Dec 2024 15:55:02 +0000
ROA not before: Mon 09 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2741 (0xab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 9 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=AF6B41BD51B6967E165762B1A69B25E86018D8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:51:1c:e9:c7:bc:ab:88:01:9e:6d:d8:be:
57:ea:6a:8b:e2:1b:49:95:d5:58:0b:4a:9c:0d:72:
1d:46:11:08:3b:fc:5d:89:ac:02:c5:e0:5c:73:7a:
d8:6f:2d:01:c3:85:0b:fe:93:93:e4:6f:80:7a:95:
28:d6:4a:5d:62:99:08:cc:3c:37:a5:d2:a1:cd:f1:
a3:cc:ff:fc:6c:dc:24:7b:d6:e7:3e:e3:1e:12:ec:
94:5e:4a:a3:6c:73:7a:14:3e:87:2a:0e:fd:68:8f:
96:a2:41:69:cb:a2:22:74:cb:20:ad:e9:dc:d0:3e:
70:26:0b:0e:8c:12:ab:a5:53:16:9c:57:f8:35:70:
b7:58:c8:1c:68:b1:f5:8e:12:2f:5f:11:90:30:a7:
45:42:ea:da:3d:cc:6c:34:fb:5c:64:c9:bc:32:04:
33:97:a7:66:8c:5f:62:e5:b1:f0:cf:ab:8e:bb:a4:
92:a3:8c:cc:f8:90:4e:43:ef:46:4f:6c:0d:bc:2a:
79:0c:d4:6c:d4:f4:5a:18:10:1b:8a:0f:a6:23:07:
18:89:61:b8:46:8f:fd:44:c1:13:3d:fc:52:ca:9d:
93:b0:c3:e0:30:1f:6f:3f:37:69:93:93:94:22:9f:
69:59:40:d6:2b:65:9f:dc:35:74:6e:98:65:1a:44:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:41:BD:51:B6:96:7E:16:57:62:B1:A6:9B:25:E8:60:18:D8:BE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/r2tBvVG2ln4WV2Kxppsl6GAY2L4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d9:26:22:fa:27:fa:4e:68:0c:2f:e1:9c:d1:e0:b0:ca:a7:
2c:17:62:1f:51:22:4b:7f:cc:89:5e:bd:d7:03:78:28:0b:92:
9f:ab:c1:cf:04:62:1d:a7:33:51:ed:2c:0d:7a:55:05:3d:16:
d8:ad:f5:1d:49:c0:d2:49:00:57:ad:27:01:42:60:c1:a4:b4:
5b:7e:6b:50:7a:40:4f:9d:b0:2b:c2:0d:45:a0:1f:f9:35:52:
b6:14:a1:4e:9a:95:37:cd:37:41:c0:d1:50:ba:f8:87:3c:66:
9f:95:68:79:d1:84:fc:33:7f:0e:5b:5d:85:ff:ca:fe:69:cd:
bb:59:bb:9c:46:21:5f:25:a6:29:01:53:de:e2:07:af:5b:67:
92:a0:fc:b4:1b:51:0f:17:c6:fc:cc:3c:86:f4:32:3e:76:d5:
6d:09:8d:91:55:b3:f2:2d:63:d7:b8:7d:79:26:e9:0e:92:c4:
2a:3c:07:80:e6:58:43:99:6f:8b:00:73:cf:00:41:81:68:c3:
70:f1:3b:cb:82:20:60:c9:ed:d0:a1:ff:b8:99:96:09:51:37:
ce:77:c9:c8:1f:02:1b:a0:fb:49:12:18:41:f8:fb:3d:87:90:
2b:78:48:bb:d2:e3:76:3c:32:3a:8f:34:51:82:bb:92:70:c8:
f5:94:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:59:15 2025 by rpki-client