Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/tUR2WKriKYT_dXzGxcZ1F-f6j5o.roa
File: tUR2WKriKYT_dXzGxcZ1F-f6j5o.roa (raw, json)
Hash identifier: cLbRq033uVu5HG4aaQkFVIXWeaUe79m1q4UFLvO6/rk=
Subject key identifier: B5:44:76:58:AA:E2:29:84:FF:75:7C:C6:C5:C6:75:17:E7:FA:8F:9A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AE5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tUR2WKriKYT_dXzGxcZ1F-f6j5o.roa
Signing time: Sat 14 Dec 2024 23:55:03 +0000
ROA not before: Sat 14 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 14 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B5447658AAE22984FF757CC6C5C67517E7FA8F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:3b:8e:91:01:c7:de:de:78:c7:d6:6d:f6:
aa:2e:d8:54:44:14:83:fc:20:f2:8a:89:c2:8a:f6:
19:25:8b:c5:9f:6a:a7:30:29:64:71:c5:c3:7e:fc:
1a:aa:d8:09:81:92:e7:49:9c:67:9d:a5:05:09:c5:
64:16:5f:9a:cc:b4:27:5f:36:06:c5:3a:3b:4f:c0:
5d:17:1a:91:5b:1e:3c:7d:54:92:ea:a2:dd:a2:60:
99:65:56:78:cf:0e:c0:26:3a:94:a1:2d:5d:48:5a:
7a:cb:41:7f:97:b8:40:2c:50:e0:0a:ac:67:65:46:
2f:5c:fc:37:6d:0e:7e:ab:f7:66:5e:f7:95:09:d1:
6f:e0:ee:b1:8d:e8:81:cd:be:c5:ab:9b:1e:4c:f0:
8e:60:48:e5:14:8e:9b:23:f8:86:c1:7e:cb:44:8b:
75:b0:57:c0:60:ac:55:b8:f0:a2:1c:ad:ea:35:66:
ca:c8:f7:0b:6f:71:12:61:f9:5f:3e:62:70:b7:34:
60:64:b0:ec:7c:1b:3a:c9:a8:6b:45:3a:2c:20:f7:
3b:2c:a0:e0:6b:c6:b8:f1:a2:fc:6f:96:32:8b:07:
d2:8a:70:55:98:15:b7:3d:11:18:36:a4:fa:46:74:
83:f6:42:4a:99:dd:f2:bf:e6:46:69:9e:45:18:2b:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:76:58:AA:E2:29:84:FF:75:7C:C6:C5:C6:75:17:E7:FA:8F:9A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/tUR2WKriKYT_dXzGxcZ1F-f6j5o.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
58:29:ed:51:4f:3a:59:2a:e3:28:90:63:50:6e:17:08:14:70:
86:ae:9c:94:c5:a7:15:9e:b6:16:72:c1:f6:8f:19:83:73:54:
a2:c9:6a:ab:de:a6:35:b4:10:99:18:76:37:47:93:4e:c8:16:
ca:9c:66:2f:8c:63:aa:f1:60:0e:fd:47:6b:4c:c3:b9:86:b9:
2d:84:17:95:7b:30:b7:d2:72:09:82:0c:59:7d:26:97:f6:37:
ef:9a:48:5f:28:c7:89:ad:45:06:e5:c3:74:0d:70:99:2a:1f:
83:ce:0a:93:84:ec:3b:9e:6f:84:22:6e:65:94:a1:4f:ee:f1:
b0:be:58:7c:43:2e:ab:2c:26:78:b8:6f:ad:2b:c1:12:9b:e5:
8f:ad:58:04:e4:5f:fb:37:4b:8b:ca:68:d9:55:8d:ac:04:76:
df:43:2e:e4:30:07:08:8c:7f:fd:e1:b6:ca:5f:6f:10:70:3d:
27:f7:dd:0f:a8:89:0c:17:23:79:f9:66:dd:cf:b8:93:42:cc:
25:80:31:b0:79:7b:b3:21:a5:91:81:f0:3b:32:90:5d:9e:ac:
a5:23:24:bf:74:00:ed:6e:84:be:5f:80:ec:19:55:cb:d4:76:
38:cb:56:76:be:d5:89:81:d2:6c:f8:cd:8f:74:b6:b9:dc:79:
3c:65:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:50:14 2025 by rpki-client