Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/sMdTpPaXFGmyyw7kgDdVRIEJtIo.roa
File: sMdTpPaXFGmyyw7kgDdVRIEJtIo.roa (raw, json)
Hash identifier: pG0R1N82nBFASOEd+HnfnyTBXllsaslqJImKljQJzgk=
Subject key identifier: B0:C7:53:A4:F6:97:14:69:B2:CB:0E:E4:80:37:55:44:81:09:B4:8A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B6C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/sMdTpPaXFGmyyw7kgDdVRIEJtIo.roa
Signing time: Sun 29 Dec 2024 23:55:03 +0000
ROA not before: Sun 29 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 29 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B0C753A4F6971469B2CB0EE4803755448109B48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:f3:b7:47:1b:bb:1e:e6:f4:43:4a:bd:f1:
d1:fd:c5:9d:4a:a8:1e:3b:67:87:1e:61:f4:f4:cd:
b5:b8:5e:15:c8:a8:51:bb:25:45:f5:57:6f:f9:42:
08:2b:46:b4:62:43:37:40:15:49:17:c0:ce:94:8b:
a0:75:75:c7:5e:2d:1b:1b:94:62:51:5f:1a:b8:c4:
27:c1:98:5c:af:4c:e6:20:ae:a9:d7:85:ac:cb:7f:
88:8e:c8:a4:ce:7c:ff:81:cf:b1:4c:39:26:01:fb:
16:29:28:46:b3:fe:eb:e6:07:95:30:ab:a4:8b:d5:
78:5b:d5:9b:72:e0:c6:38:db:76:f5:df:c8:af:ba:
f7:81:bd:a8:f8:9e:9b:08:e2:cc:38:06:73:7b:72:
3e:08:53:51:18:aa:81:5e:a0:d1:e1:c4:e7:57:5d:
4b:bd:6f:91:c9:2f:70:a9:1f:9d:56:90:69:95:18:
e7:05:e9:d6:30:54:6f:83:23:92:74:56:8e:bd:3a:
74:35:d4:87:05:4e:eb:57:bd:48:59:38:e2:b3:ef:
58:27:3a:d1:48:64:99:09:d5:03:f9:6b:b7:92:01:
8c:91:e9:5e:95:a4:4f:3b:c2:7e:0f:09:da:bb:e3:
98:68:f6:5c:2d:0b:ab:75:83:49:45:f2:ad:ff:ee:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:53:A4:F6:97:14:69:B2:CB:0E:E4:80:37:55:44:81:09:B4:8A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/sMdTpPaXFGmyyw7kgDdVRIEJtIo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:56:15:9f:cc:37:44:a1:33:8f:85:dd:a9:f0:c6:8e:e5:5c:
d7:f0:44:5e:5d:78:ce:bc:71:ee:3b:78:2d:f9:00:ad:08:9c:
da:a6:68:24:fe:fa:c5:0e:d3:a7:03:6b:ef:b5:0d:70:c8:ae:
3b:9f:b8:d4:8d:48:49:f8:1e:6b:ef:ac:1d:38:30:cb:03:94:
0f:a3:b8:47:c5:81:81:f3:d6:ac:e5:6b:f5:e0:95:dc:35:7d:
4b:18:a6:c3:c0:ad:59:37:4b:1a:3c:87:00:f8:f3:9d:44:a8:
04:af:b2:eb:6a:54:7d:0d:be:e9:ac:e1:d4:c6:f1:f1:f4:9e:
0d:24:06:9a:63:3a:53:b2:77:14:fa:8c:93:10:a0:e9:67:ee:
f5:d0:64:47:b1:bf:4b:4d:c9:45:45:82:98:df:6d:50:4d:a2:
0d:2a:d6:0a:02:52:70:68:fd:4a:09:38:8e:e1:fb:2e:12:a5:
6e:ae:ca:32:e0:a7:27:d3:05:d0:20:3d:49:4d:f1:7a:e1:96:
04:80:51:5f:62:57:7c:e1:89:86:85:bb:59:4e:97:8d:56:86:
6c:53:c7:72:94:33:8a:34:38:60:2d:a1:9a:74:0b:d6:ff:c8:
e3:b2:14:df:54:c0:5e:c9:ba:11:a3:52:e5:1a:3a:a1:d9:fb:
31:65:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:10:46 2025 by rpki-client