Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/vxP7VlzULAaVYMjE_bpIoPvIJXU.roa
File: vxP7VlzULAaVYMjE_bpIoPvIJXU.roa (raw, json)
Hash identifier: 9r04mHw0Q93QbZOWrU5zEhbmP5i9foDB2gi1CMCpArw=
Subject key identifier: BF:13:FB:56:5C:D4:2C:06:95:60:C8:C4:FD:BA:48:A0:FB:C8:25:75
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AE8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/vxP7VlzULAaVYMjE_bpIoPvIJXU.roa
Signing time: Sun 15 Dec 2024 07:55:03 +0000
ROA not before: Sun 15 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 15 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=BF13FB565CD42C069560C8C4FDBA48A0FBC82575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:7c:20:32:23:18:94:65:bf:1e:df:47:59:
59:9c:65:24:be:1c:0f:be:3d:92:39:68:90:30:12:
cc:70:69:93:de:c4:ae:d3:6b:0d:38:0f:16:4e:0a:
d5:82:fd:b1:5a:97:ba:76:1c:af:9e:9b:b4:5e:22:
79:10:4c:f5:d3:e3:4e:69:d5:d2:58:2d:30:d4:70:
30:c4:8c:1b:cf:97:c4:63:40:b8:67:ed:13:12:79:
5f:59:c4:07:7e:ba:f3:d7:7c:60:4e:40:ec:4d:fa:
84:82:e1:95:11:63:62:5f:f8:1f:dd:23:71:0c:f9:
30:ec:64:d8:8b:a2:60:04:1b:ec:31:7f:0e:fe:83:
77:0f:b9:b9:b2:ce:08:71:81:2f:8b:df:8d:5a:cd:
2f:d4:6c:92:fb:a0:98:f0:7d:2a:77:4f:9d:82:00:
23:ec:4d:43:6f:8c:ed:c3:d7:57:3a:56:e2:59:92:
c2:52:7e:53:26:af:32:58:11:b1:ec:19:bd:3b:c4:
53:12:a2:d3:d7:6b:44:b3:1f:74:a0:8e:23:6a:31:
ad:6c:fa:61:e1:e4:5d:a0:f2:88:e6:62:89:dd:ef:
ef:b6:68:d2:b8:d4:b2:c6:82:ce:e0:0c:fe:71:24:
04:2c:49:e7:e3:32:56:ce:7d:3f:ac:8a:36:26:7f:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:FB:56:5C:D4:2C:06:95:60:C8:C4:FD:BA:48:A0:FB:C8:25:75
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/vxP7VlzULAaVYMjE_bpIoPvIJXU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
93:43:b2:75:d4:4d:bc:bc:14:17:cb:35:ff:05:bd:e0:04:93:
1b:3f:c4:73:69:b0:4a:4a:bb:ad:14:fb:56:6d:68:9c:54:5a:
4c:ae:21:6c:4a:d0:38:17:e4:c5:1f:35:43:7a:5e:e2:6f:3d:
cd:7d:04:8b:9d:9b:e5:f8:09:0c:1f:5c:25:11:5a:ef:bc:da:
9a:a4:fd:46:32:9e:ee:aa:a3:0b:87:fc:db:69:2f:86:10:05:
fa:35:62:fa:11:51:a5:59:f7:fb:f4:96:9f:ca:cd:93:ac:c9:
99:2e:95:1f:fd:72:26:4e:07:9f:fc:36:62:d1:33:b0:63:65:
9b:dc:ce:34:50:a6:18:c3:f1:3a:91:ba:ef:45:d3:2f:4d:d6:
b4:dd:4a:92:47:d3:28:0f:a8:36:65:39:4a:64:8f:eb:b0:ab:
21:f6:d0:03:4d:1b:92:8f:9f:a6:d1:61:6b:ac:a7:ad:ca:67:
6f:26:ef:fb:63:69:cb:09:47:70:34:14:13:c5:a9:52:5c:d1:
9f:db:f1:62:a6:5d:59:c5:34:88:5d:6f:37:88:84:8d:09:2d:
0e:e5:1e:44:cd:de:17:c3:52:7e:d5:7c:dc:b4:5a:a0:3f:98:
a2:05:b1:da:2b:3c:2a:6f:e9:3b:f2:1e:b5:16:14:ea:64:9c:
77:15:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:03:59 2025 by rpki-client