Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/s-zAVkfjMHqoRc1UNLriroaN15M.roa
File: s-zAVkfjMHqoRc1UNLriroaN15M.roa (raw, json)
Hash identifier: NnLeM2AruBdaCi/ARAY+lNA4E0CtZv2NWUKnETrxwsc=
Subject key identifier: B3:EC:C0:56:47:E3:30:7A:A8:45:CD:54:34:BA:E2:AE:86:8D:D7:93
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AA6
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/s-zAVkfjMHqoRc1UNLriroaN15M.roa
Signing time: Sat 07 Dec 2024 23:55:03 +0000
ROA not before: Sat 07 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 7 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B3ECC05647E3307AA845CD5434BAE2AE868DD793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:9e:0a:e2:a9:0c:9c:cb:41:29:c0:ec:3c:
98:8c:29:b2:d4:0b:0e:ff:ed:f7:f8:9e:08:cc:2a:
dc:9c:c6:3e:b9:bf:0e:56:1d:73:3d:43:8a:ec:4b:
15:24:78:f6:d6:63:4b:4c:66:e1:16:50:11:93:41:
3c:d7:67:6e:5d:0e:73:05:85:0d:3c:f1:b1:25:50:
b5:fe:23:5b:9e:3a:a4:ab:ec:74:51:13:50:1d:09:
19:58:1b:ac:89:46:5a:80:c6:69:a2:bf:c7:1e:34:
49:3b:18:36:d2:0a:b9:db:ef:71:d9:db:ff:90:03:
da:29:8c:a7:67:5f:e4:03:86:4c:fc:8e:4f:e2:2e:
1e:ba:9d:fa:09:00:eb:c3:a4:e0:ef:4d:de:56:37:
11:cf:3f:59:92:4e:b7:41:d4:c5:ba:38:a6:5b:e9:
ca:49:2c:e4:d7:3e:41:2d:04:01:f6:9e:8d:fc:9b:
e2:ec:34:70:ce:97:80:78:c0:38:ae:62:67:fa:d9:
e2:b8:b9:d8:98:e1:b8:6a:d4:07:da:a3:01:c7:9a:
f9:aa:f8:75:a2:f6:92:80:70:7d:30:a6:a8:b6:9b:
9c:50:67:6c:d1:44:82:a1:f0:e7:9f:8b:4a:58:9b:
87:10:c4:0b:cd:a6:2f:79:50:95:62:02:36:20:31:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:C0:56:47:E3:30:7A:A8:45:CD:54:34:BA:E2:AE:86:8D:D7:93
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/s-zAVkfjMHqoRc1UNLriroaN15M.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4e:4d:54:bf:7d:e8:10:92:23:1a:6e:93:c1:b4:d9:f9:36:
bf:da:a3:e4:3a:51:52:33:a1:79:eb:b7:cd:e2:a5:ff:a6:10:
a0:01:00:f9:69:50:d0:88:b9:e6:ed:39:ce:07:7c:9a:29:c7:
f0:ca:41:7c:87:f4:0d:19:a6:e5:9f:51:94:52:15:e4:a2:b1:
55:ab:18:f0:bf:a8:a0:e9:c3:3d:57:55:f3:34:09:1c:82:32:
97:2c:1b:e9:5c:44:c4:a4:dc:e6:49:cc:d4:b2:4a:fb:2f:53:
7b:06:3a:b6:ba:1f:9e:8f:07:aa:05:89:e8:56:d6:22:7c:42:
2d:91:e0:d2:9f:3b:d9:d4:81:e3:bd:4c:3a:90:05:b7:c4:b4:
3b:ea:ce:37:b4:72:b6:0e:7a:6c:f0:11:d8:39:6b:7f:84:21:
5f:55:d1:c7:b1:97:e8:36:2d:f2:99:4f:bd:ba:42:a2:56:ee:
b6:b5:d2:db:13:07:e7:cf:a4:ff:d4:c7:82:41:68:9c:9a:62:
b2:24:3d:67:7a:16:90:25:1a:02:d6:b1:2c:fc:7e:1b:90:34:
d2:ee:cb:ea:1f:08:35:72:01:70:fc:e3:6b:4a:23:e4:fd:60:
cc:a4:ec:13:fb:3b:76:15:bf:76:c6:10:69:57:61:97:b9:4f:
b7:65:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:19:11 2025 by rpki-client