Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/uIcWVMecJOQimguyOD58D-gQV14.roa
File: uIcWVMecJOQimguyOD58D-gQV14.roa (raw, json)
Hash identifier: tnS+bB5WWiXCXWVoy8DQMDcKFwYXWUMFAediY7ZvWcg=
Subject key identifier: B8:87:16:54:C7:9C:24:E4:22:9A:0B:B2:38:3E:7C:0F:E8:10:57:5E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02B3
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uIcWVMecJOQimguyOD58D-gQV14.roa
Signing time: Thu 25 Apr 2024 23:55:03 +0000
ROA not before: Thu 25 Apr 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 05:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 25 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=B8871654C79C24E4229A0BB2383E7C0FE810575E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:a0:fe:f3:ed:9e:9c:b4:4a:59:ff:74:14:
c0:a7:f0:3c:be:f7:c2:c4:79:e4:f8:d2:d4:51:6f:
54:1c:c1:a8:5e:d8:ac:7a:f9:c4:03:75:4f:9d:5a:
0a:f2:a6:01:bd:4d:b6:c8:e4:1d:f0:e4:45:b2:5e:
23:fa:fb:d5:a5:39:c3:08:55:d5:e2:1c:06:1c:07:
10:ac:14:27:fb:af:30:93:74:e7:eb:9b:74:27:c2:
00:d2:b9:c5:65:79:a8:dd:9d:e8:4e:e5:9a:99:40:
28:4e:57:e6:e9:7b:e1:c8:e5:ab:c8:ee:62:6a:ad:
da:77:9c:e3:78:da:bd:09:ca:a0:1a:b1:f7:d4:b7:
06:e5:f7:3c:fc:8c:79:03:7d:41:b8:f0:96:52:99:
ff:5a:a7:64:c0:55:a0:dd:53:1b:e2:65:7a:ec:c2:
fd:8b:bf:9f:9b:a6:c3:fe:fc:96:25:74:02:3e:f3:
58:ae:91:d5:9c:ed:9d:56:14:39:53:f2:8c:d7:3f:
f7:76:55:ba:43:48:8f:c4:77:bb:3a:87:99:d7:68:
2b:55:3a:93:7b:7b:79:78:ef:1e:7b:bc:c9:6a:46:
3c:59:a6:c5:fe:9f:37:48:11:66:f5:97:1c:98:2e:
30:a8:72:aa:49:14:98:ad:f9:d0:7f:2c:ac:2d:5f:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:16:54:C7:9C:24:E4:22:9A:0B:B2:38:3E:7C:0F:E8:10:57:5E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/uIcWVMecJOQimguyOD58D-gQV14.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d7:f7:80:a6:24:a5:6d:60:be:0c:ce:ad:6e:66:b5:db:00:
bf:ae:67:6c:28:55:73:17:ff:21:e8:0a:52:e6:f1:60:5a:25:
b5:72:36:ed:6b:a1:47:3e:ec:c8:7e:f9:19:c3:b9:3c:e4:ce:
df:cb:9f:6c:b6:1f:8c:14:a1:14:b7:82:22:85:07:ee:ba:95:
b5:84:8c:53:62:99:3b:32:51:06:9d:2e:79:b3:fb:79:49:32:
19:0f:57:e2:8d:50:28:19:10:df:b1:5c:62:1a:88:d9:fb:74:
78:e5:49:f8:f0:ad:f2:0d:07:bd:a5:28:f7:93:35:e7:6c:fe:
58:ae:ea:57:d3:b7:6d:e2:42:cc:a7:dd:2f:34:1b:f7:d5:43:
2f:89:13:54:5e:30:11:d3:8f:cd:54:51:d0:9e:46:1e:a5:9c:
50:66:0e:a0:8f:c4:78:0c:95:e0:27:20:fd:46:46:cd:76:d1:
de:de:bd:b4:05:da:c4:62:80:db:b9:c6:73:13:19:7c:2b:c8:
1d:20:9b:0c:0c:e6:06:0e:03:2d:02:c8:3b:97:e3:eb:c1:7e:
dd:78:06:95:19:3b:93:20:67:c9:36:25:29:63:66:b8:6a:6f:
6e:04:60:06:08:5c:56:a1:6e:cd:cc:49:d3:e0:f1:a2:fb:8a:
65:de:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:34:53 2024 by rpki-client on console-ams.rpki-client.org