Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/rlKicjWwgdlrbjwt3fJGBVf4V5M.roa
File: rlKicjWwgdlrbjwt3fJGBVf4V5M.roa (raw, json)
Hash identifier: 8SAxlvwZGJmOXD9Wvbl6z1IoUJJWSVK6SeIeBMgDBXE=
Subject key identifier: AE:52:A2:72:35:B0:81:D9:6B:6E:3C:2D:DD:F2:46:05:57:F8:57:93
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C39
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rlKicjWwgdlrbjwt3fJGBVf4V5M.roa
Signing time: Tue 21 Jan 2025 15:55:03 +0000
ROA not before: Tue 21 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 21 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=AE52A27235B081D96B6E3C2DDDF2460557F85793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:12:e0:52:70:52:48:b6:23:21:c3:e6:4c:
25:1d:61:e1:c7:65:02:23:7a:7a:4c:73:96:0b:55:
19:84:d0:7b:03:92:aa:9f:b0:e9:75:a9:09:24:5d:
c3:fb:10:14:cd:ef:c1:61:82:2d:53:ac:a0:3d:f3:
9e:e7:07:c0:c5:5a:45:9f:53:36:c9:8c:11:59:45:
42:fb:5e:2b:3b:c2:d2:38:89:13:29:6e:76:20:ca:
36:5b:ab:08:95:f1:d2:36:99:20:5a:9e:3e:ab:43:
00:c1:c8:48:12:4b:c3:9b:3d:e4:aa:bf:ac:fe:1c:
23:82:9d:dd:c3:2a:57:7a:7b:83:ab:cd:97:19:e7:
71:b4:b5:85:53:55:8b:b9:d9:5a:1c:fc:a0:3b:88:
66:5a:eb:cc:39:98:9b:ac:78:08:8e:86:15:8d:8c:
42:81:59:c5:dc:52:a9:f7:56:37:8c:71:34:64:83:
fb:53:22:58:5f:c1:b8:a8:e7:b2:9b:5b:d3:96:1e:
68:d1:88:1c:c2:8a:15:7b:a6:96:ed:16:34:26:96:
d7:00:93:29:80:66:36:89:c4:09:e9:24:22:e3:73:
92:8c:80:29:5d:7b:76:e0:be:c9:b2:91:98:3e:0f:
3e:71:58:e3:89:7e:cf:17:ca:2f:2e:55:b3:7f:35:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:A2:72:35:B0:81:D9:6B:6E:3C:2D:DD:F2:46:05:57:F8:57:93
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/rlKicjWwgdlrbjwt3fJGBVf4V5M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:74:26:7e:68:55:85:13:3c:8b:4e:cc:96:5e:64:20:0c:89:
d0:40:a6:be:73:7a:91:1f:bd:b9:3c:80:df:41:8d:e6:37:e1:
e4:b9:0c:a5:77:4b:70:ca:82:88:66:79:e2:65:75:c7:c7:73:
a4:a2:8f:bc:81:ba:8a:b9:80:7a:51:21:6a:42:b9:91:4c:48:
df:a0:98:ad:ac:e8:c3:ff:cd:d1:35:5b:eb:44:45:42:7b:45:
ec:d9:2d:82:aa:da:77:73:ad:3f:76:43:ff:29:b0:68:22:31:
9d:b2:8a:bc:a4:0a:94:87:56:5a:19:58:fe:8e:71:ff:f6:d7:
01:6e:22:d8:10:ee:c5:e1:f3:04:21:e5:20:56:c1:a3:86:56:
40:2c:33:d9:22:73:cd:bb:9f:56:70:26:46:3e:a5:b1:ad:d7:
79:3b:42:0b:e7:e3:c4:05:97:c6:63:dd:ae:92:c5:1e:03:a1:
6d:7c:0b:75:ce:11:34:4e:56:05:22:13:02:25:37:a6:22:8c:
9d:61:cc:33:db:d2:2e:ff:06:8a:75:89:26:c9:21:c9:a8:08:
e2:6b:13:5e:b6:6a:b6:e7:70:f1:09:73:64:04:b8:56:b3:74:
01:19:da:0b:bf:49:2a:0c:0b:40:77:64:cf:32:af:f2:b0:e4:
81:1f:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:51 2025 by rpki-client