Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/wZtahSFgXJKv9wY2HGsSIHuc_i4.roa
File: wZtahSFgXJKv9wY2HGsSIHuc_i4.roa (raw, json)
Hash identifier: fEBJYED4CwhvG0Vt8GBmCGqBQBMc/tw2poPBAf8IogI=
Subject key identifier: C1:9B:5A:85:21:60:5C:92:AF:F7:06:36:1C:6B:12:20:7B:9C:FE:2E
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A3D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wZtahSFgXJKv9wY2HGsSIHuc_i4.roa
Signing time: Tue 26 Nov 2024 07:55:02 +0000
ROA not before: Tue 26 Nov 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 26 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=C19B5A8521605C92AFF706361C6B12207B9CFE2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:a3:b7:0a:6f:90:a3:a4:88:28:d3:ed:ed:
75:cb:94:a0:31:13:12:72:ba:c8:70:f3:29:e7:0d:
be:d2:a2:95:85:88:43:44:83:42:51:00:cf:a7:11:
de:82:cc:e8:fd:79:13:7d:5c:ae:28:07:1b:8a:2f:
b6:43:a4:0c:5a:1f:5b:2f:5d:a5:3a:e2:49:a3:4c:
b3:ce:28:f0:35:8e:51:5c:f4:0d:8b:2e:86:d3:1a:
80:77:37:a8:41:56:b5:90:6b:b5:f8:7e:83:e8:2a:
e0:59:32:51:d2:30:02:41:27:e9:e1:78:cc:70:98:
e4:28:93:da:80:90:d0:a0:3a:74:31:0d:83:6b:39:
78:25:8c:85:6d:ab:50:9d:99:42:b6:d1:ea:d7:c9:
d4:7b:e8:32:1a:41:43:a3:4d:97:6c:27:b2:63:19:
4c:81:8f:5d:8c:07:c0:11:df:80:a1:b0:f5:ea:1e:
8e:51:fc:ff:0d:df:75:17:e6:6d:70:85:ba:ff:52:
76:41:fb:a2:22:8d:60:16:a3:bb:0e:0f:dd:0e:06:
4d:8c:5d:26:87:2c:06:c9:61:e8:24:14:c9:76:cc:
b2:7c:37:d3:1c:97:93:00:ae:3c:9b:d2:aa:b0:be:
1b:9f:15:4d:69:78:38:d4:59:44:2e:1a:be:ed:f8:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:5A:85:21:60:5C:92:AF:F7:06:36:1C:6B:12:20:7B:9C:FE:2E
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wZtahSFgXJKv9wY2HGsSIHuc_i4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e4:85:d4:bd:e0:ee:7c:5e:5e:45:10:cf:4d:68:74:a3:ba:
e1:97:e8:c0:fe:97:d3:1b:5a:c3:15:b4:0e:c9:35:53:a8:aa:
ec:92:c0:17:c8:aa:2c:bf:c0:96:7d:91:75:67:37:13:04:f4:
93:47:73:85:ba:f0:9a:b1:86:2b:2c:6c:e8:97:7e:b7:aa:45:
ec:0b:5a:a9:79:30:68:b8:57:21:3e:34:d1:17:bd:df:e9:73:
ef:8e:fb:90:10:ab:af:41:b8:e8:50:01:c8:2a:57:c7:7c:bb:
56:c9:d9:60:7f:70:52:61:bc:14:4e:ac:18:4c:29:d7:eb:af:
4c:81:10:ac:0b:a6:61:f9:80:37:2b:b7:93:d2:3a:a4:56:b9:
f1:06:53:14:52:f5:6a:17:1b:1f:95:f3:2b:3f:aa:56:bd:2e:
f8:17:e8:bf:be:a8:18:a9:1f:3a:1f:0f:f3:b6:7a:c7:74:83:
bc:cb:0b:1b:f9:b6:37:6b:a8:a8:35:51:b2:00:dc:dd:4f:5c:
7c:35:5f:d4:ea:11:71:e1:dd:d1:3a:2b:c5:4d:e5:91:ed:5e:
ce:af:7d:d2:50:6a:b4:e1:a2:57:cd:35:a4:fc:80:aa:28:04:
52:0e:92:b1:2d:1e:1b:ed:98:b5:50:af:6d:c8:5c:d5:e4:24:
1d:fa:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:38 2025 by rpki-client