Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/v1IFInY0x9vmx4vhVvXrDZ8xlTU.roa
File: v1IFInY0x9vmx4vhVvXrDZ8xlTU.roa (raw, json)
Hash identifier: iQ1CkqPQfppMEC+F8PqdJXabb64+LK0jARmmxX2Dsn8=
Subject key identifier: BF:52:05:22:76:34:C7:DB:E6:C7:8B:E1:56:F5:EB:0D:9F:31:95:35
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AFA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v1IFInY0x9vmx4vhVvXrDZ8xlTU.roa
Signing time: Tue 17 Dec 2024 07:55:03 +0000
ROA not before: Tue 17 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 17 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BF5205227634C7DBE6C78BE156F5EB0D9F319535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:76:f6:95:6e:88:f3:9c:70:ad:ed:d7:8a:
ac:7c:9b:42:0b:7c:a8:77:c1:ac:6c:a3:a9:8a:56:
3f:8c:fd:83:dc:1e:47:82:10:af:3c:79:72:6b:ba:
0d:0e:0f:d6:1d:fd:7e:26:56:86:88:d1:00:2f:d9:
39:61:c0:ca:28:b2:43:24:8e:dd:58:92:68:82:18:
3e:88:67:aa:f3:81:2e:98:77:07:7e:a0:1b:99:e3:
c4:69:6a:7b:85:1b:a1:a6:73:30:ff:29:1a:a7:7b:
bc:83:ad:cb:24:45:b1:26:cb:64:be:d9:29:42:38:
97:42:db:b3:4a:90:f7:72:2f:70:44:20:6f:5b:ad:
3c:7c:44:7c:03:88:f3:5f:6b:27:aa:ff:4d:28:46:
78:5f:dd:1e:82:4b:86:b6:8a:6a:42:60:7a:73:fb:
72:6a:f6:ed:25:31:17:bb:ee:bc:7c:03:d6:6f:eb:
08:7d:a5:c0:30:7d:c7:a5:89:3c:a4:eb:6a:45:34:
0a:fd:a7:d5:84:d0:18:e3:2f:10:27:90:a2:fb:c0:
66:86:ff:6b:5a:08:76:6d:ac:72:83:eb:74:fa:37:
ad:2a:b2:ee:63:bd:81:06:d4:21:b0:ea:9a:6f:1d:
1c:04:8a:f0:32:e4:f4:72:c1:29:b0:49:80:15:98:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:52:05:22:76:34:C7:DB:E6:C7:8B:E1:56:F5:EB:0D:9F:31:95:35
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/v1IFInY0x9vmx4vhVvXrDZ8xlTU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2d:74:33:16:0d:9e:94:24:26:c3:42:45:dd:b5:3c:a8:88:
ad:09:eb:10:48:96:91:52:eb:ba:af:cf:b2:08:87:ab:d3:44:
20:b5:a0:0f:f2:01:f3:18:63:41:44:62:1e:a1:9e:22:dc:12:
fe:03:c9:a7:87:ca:98:90:8a:3a:e8:8d:36:d7:53:78:c7:54:
59:61:23:38:a8:cb:81:9e:4e:25:b9:9f:34:53:d4:e1:a0:2d:
9d:1b:c4:65:ff:b4:bb:24:85:13:97:cf:b3:31:b1:dc:05:af:
fb:54:97:1c:55:55:7a:b0:66:91:e4:19:10:95:b3:c2:5b:23:
95:e2:33:14:e5:25:c8:ad:a9:a3:54:31:1e:dc:bb:46:4b:92:
27:b2:88:7b:b3:1d:a2:81:d5:80:6d:c9:67:8d:f3:8d:52:a4:
0d:55:ff:e6:6e:e4:e2:6d:cf:3a:25:c5:33:69:f9:a3:a2:8d:
cf:51:5d:92:34:9c:2e:f3:1a:46:a9:35:66:05:e8:0c:55:53:
82:8b:91:12:fd:12:04:8a:40:a4:40:d3:79:6b:b2:79:d8:68:
b5:23:c5:73:32:b8:61:f4:18:3b:d5:11:88:91:d7:9b:48:da:
c8:32:9d:bc:83:c4:5f:5f:3a:51:15:bb:f8:99:cb:e2:7b:c5:
5f:7f:0f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:12:16 2025 by rpki-client