Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/vqeLn7rTcYpBt20sXjAp-kul0Zo.roa
File: vqeLn7rTcYpBt20sXjAp-kul0Zo.roa (raw, json)
Hash identifier: ee9Taol1fKLSYHbACCMZ5EgNEhRd1KLVty5nfpxj4NE=
Subject key identifier: BE:A7:8B:9F:BA:D3:71:8A:41:B7:6D:2C:5E:30:29:FA:4B:A5:D1:9A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A4C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/vqeLn7rTcYpBt20sXjAp-kul0Zo.roa
Signing time: Wed 27 Nov 2024 23:55:03 +0000
ROA not before: Wed 27 Nov 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2636 (0xa4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 27 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BEA78B9FBAD3718A41B76D2C5E3029FA4BA5D19A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:7b:43:63:89:c8:8b:23:3f:3f:59:23:dd:
4b:75:cf:b7:77:4b:7c:b5:88:b1:8b:ad:54:c0:b0:
ae:42:d1:cf:44:17:a2:fd:cf:86:0b:d0:47:f2:1c:
bb:16:b6:29:22:3a:22:26:d3:bf:ac:a0:69:42:ac:
9f:5f:2a:02:22:74:49:a3:9b:b1:c3:a0:bf:b6:07:
ba:fe:79:81:df:68:55:fe:6d:6b:39:e6:06:b8:74:
82:db:f7:ba:95:ad:0e:5f:b7:83:5b:22:34:aa:16:
7f:a4:41:8f:d4:18:58:49:17:91:c6:ba:2a:d4:eb:
a3:17:07:72:ac:44:76:87:3c:77:65:09:35:95:dd:
0d:41:07:35:df:78:c5:83:72:b0:f4:40:f5:89:81:
e4:1a:c5:63:b4:a9:68:57:d6:41:2b:14:6c:95:18:
ce:3c:b0:3f:24:0f:e4:21:e0:fd:b8:d1:f5:d5:ed:
64:5f:29:f5:62:5e:18:cd:35:01:2a:c9:91:46:47:
55:2d:c3:19:38:e8:e8:fb:3b:53:9d:ea:51:cd:d2:
8d:db:ff:ae:0e:b4:99:cb:19:b5:70:f4:6e:3e:48:
aa:30:be:da:1c:ea:cb:a2:58:d4:b5:04:a6:8e:34:
5d:b2:4f:92:e1:d1:90:84:e9:58:c7:e8:36:10:f2:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A7:8B:9F:BA:D3:71:8A:41:B7:6D:2C:5E:30:29:FA:4B:A5:D1:9A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/vqeLn7rTcYpBt20sXjAp-kul0Zo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:47:26:5d:bb:c7:61:a3:99:1f:ef:36:78:4d:6a:02:92:c1:
be:be:14:ae:fd:d9:58:24:cc:13:eb:23:7b:e2:6f:c7:8d:a6:
c5:30:27:03:15:ff:a8:d8:01:c6:21:48:33:e0:46:60:34:d0:
02:fa:48:44:82:0a:82:9d:0f:d2:e6:c8:f9:15:a7:a3:7d:6e:
1d:ad:be:6a:c4:57:ed:99:1d:6d:3d:8c:ba:33:bf:7a:23:5e:
f9:ef:89:3a:cd:39:eb:a4:35:98:4b:9d:c2:c9:c1:7b:eb:25:
e8:5c:0c:bb:55:43:28:6d:29:0f:43:12:2b:50:c1:e3:dc:3a:
b1:fc:f7:e6:2f:f0:76:53:a0:6f:d1:16:39:e8:fe:95:b1:55:
4d:85:f7:2c:f8:58:f2:3a:39:e7:24:b7:96:77:4c:46:cc:b2:
81:0c:51:ed:4d:37:94:26:af:ee:a9:73:b7:3f:68:b1:25:e9:
4b:e9:6c:13:0a:72:5e:f7:ca:42:5e:c4:3d:4c:a3:5b:83:1f:
49:2d:0a:f0:69:4f:a6:4d:fa:44:61:b6:4f:c6:e5:b5:51:02:
38:29:9a:04:af:ed:1c:5f:4f:5c:09:1c:28:55:18:9d:b2:dd:
e8:69:12:49:e5:df:ff:d5:ca:e9:86:24:b3:ef:97:0d:8e:6a:
fa:e3:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:44 2025 by rpki-client