Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rciq2YVgM-U79Pxy0JYu8A5U1CQ.roa
File: rciq2YVgM-U79Pxy0JYu8A5U1CQ.roa (raw, json)
Hash identifier: vawmfiT8yLNocnS3Q0vFp1AXqVTbOL3PJS3iqYw74Jk=
Subject key identifier: AD:C8:AA:D9:85:60:33:E5:3B:F4:FC:72:D0:96:2E:F0:0E:54:D4:24
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AC7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rciq2YVgM-U79Pxy0JYu8A5U1CQ.roa
Signing time: Wed 11 Dec 2024 15:55:02 +0000
ROA not before: Wed 11 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2759 (0xac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 11 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ADC8AAD9856033E53BF4FC72D0962EF00E54D424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:d8:90:7a:37:39:96:ef:4b:ed:bf:af:fa:
37:7f:3b:52:8c:2e:e9:42:24:bd:da:b8:df:84:7e:
ef:76:5f:06:3d:44:9f:e9:98:9f:8a:c7:6b:0c:f6:
14:20:a7:9c:0a:30:4e:47:26:55:ec:82:95:0b:d7:
e6:21:86:0b:f9:74:46:e8:64:b9:74:55:cb:2d:c1:
41:46:bf:31:75:df:2a:51:d9:5c:8e:91:28:6b:e3:
5f:5e:58:e1:21:69:1d:17:e4:9d:f7:04:37:31:fa:
94:2b:05:b7:9b:6b:41:74:ae:69:80:cb:97:09:71:
d8:87:58:25:3a:d8:e1:2a:5c:75:29:63:af:34:4f:
fc:53:f1:0b:33:d3:a1:58:e7:ec:8e:fa:78:15:87:
2b:93:30:7d:8f:56:13:0e:97:8b:72:d6:9c:68:dc:
8a:e5:1f:b2:95:d4:94:d9:32:c0:ba:17:89:76:09:
d8:93:08:fa:5d:4e:4a:d1:1e:3c:04:ef:13:59:69:
65:ef:2f:e7:3d:75:6b:21:1e:c4:aa:d2:5d:9f:04:
6a:12:77:5d:6c:a9:32:bc:14:68:72:9e:3f:b5:6c:
ee:eb:45:41:4c:41:8e:63:84:5b:24:58:1b:12:fc:
fa:79:28:9d:df:11:c2:1c:ef:ed:f1:38:f3:0e:95:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C8:AA:D9:85:60:33:E5:3B:F4:FC:72:D0:96:2E:F0:0E:54:D4:24
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rciq2YVgM-U79Pxy0JYu8A5U1CQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:82:70:ac:17:e6:bd:e7:07:f1:04:31:9a:83:0a:28:1e:7f:
a5:7f:67:91:cb:9a:f3:bb:db:fa:8e:9b:32:81:f3:d5:f6:2d:
ac:fb:1e:05:da:e6:16:97:5a:c3:66:e5:1e:fe:b9:ed:cb:93:
01:d3:c9:92:20:22:5a:67:24:d9:b5:f4:4e:9e:46:32:01:90:
ac:02:26:51:12:f1:57:32:8c:99:a7:07:68:1b:c6:33:9a:9c:
c5:f0:66:d6:16:9f:d0:81:6d:17:75:76:8b:c6:5e:c4:f8:cf:
5b:bf:55:8c:c9:6c:0b:92:2b:b3:50:8c:2d:27:3a:6a:6f:4a:
a7:64:7c:60:59:bc:1d:67:88:cb:44:64:09:4b:8d:65:69:35:
39:1b:2f:fe:6c:84:8a:fc:86:6d:a4:1a:ce:de:01:01:93:d2:
06:db:d4:fa:cc:94:9b:2b:d5:74:ba:53:e4:f6:cd:6d:76:54:
56:3f:2f:37:ac:26:62:86:5b:d6:50:f2:29:40:2a:b2:66:3f:
a2:2c:8d:06:c7:63:03:53:7f:2a:9e:cd:49:26:ee:8a:5f:a8:
7b:df:b1:be:14:f7:2a:72:b5:da:fb:95:4c:31:02:80:10:81:
16:cf:b0:32:53:c4:3d:00:61:bd:9f:06:36:a5:21:61:87:8d:
21:d3:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:12:03 2025 by rpki-client