Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/wt2CdQFzvhjDvt8uj_JMu9ZPB68.roa
File: wt2CdQFzvhjDvt8uj_JMu9ZPB68.roa (raw, json)
Hash identifier: Jz7SpXda0+HpSckvbAFJqNpuwgy5PJeVtBDSYUKcLvs=
Subject key identifier: C2:DD:82:75:01:73:BE:18:C3:BE:DF:2E:8F:F2:4C:BB:D6:4F:07:AF
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C5D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wt2CdQFzvhjDvt8uj_JMu9ZPB68.roa
Signing time: Sat 25 Jan 2025 15:55:03 +0000
ROA not before: Sat 25 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 25 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=C2DD82750173BE18C3BEDF2E8FF24CBBD64F07AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:1c:e8:5f:81:1f:a3:d0:af:e3:b1:06:ef:
62:8a:29:8f:51:a1:e1:c9:02:29:53:fd:ba:65:02:
48:94:1d:ad:3b:fc:e9:16:19:38:ad:b2:9f:6c:12:
f5:0e:8a:0d:3a:f2:bd:aa:ca:70:44:e7:fe:26:f5:
e5:c4:88:0e:4b:11:ed:6a:bd:59:b5:73:66:eb:19:
f8:3f:26:30:03:21:fb:5a:19:36:dc:cb:2f:70:0d:
f4:11:1a:d0:03:db:8f:5e:b6:d3:a7:dc:bd:95:84:
af:06:51:67:35:a3:a9:ee:2e:b6:2f:a5:26:17:b5:
d7:f0:f1:e3:1f:ba:e6:c6:60:31:09:67:b2:52:8b:
6e:03:13:9d:5a:1e:8e:ce:cd:01:d6:fc:8b:d2:46:
e6:a2:d4:2c:75:53:e9:f9:03:4b:d9:c6:52:37:f1:
d5:34:68:d6:0e:74:7a:de:df:0f:4f:de:55:f2:46:
6c:72:2f:3b:ac:db:61:29:c5:cf:89:b3:e1:fc:16:
bf:0f:7e:3c:27:96:25:b8:0a:e6:b6:f3:86:c1:c2:
e9:e6:35:2c:1f:ce:5f:ec:46:1b:60:16:e1:a1:b0:
e5:ca:89:3b:d5:38:bd:9b:73:59:c9:18:08:37:58:
5e:d3:4e:0a:ec:02:11:56:88:4d:a4:2a:c5:45:09:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:82:75:01:73:BE:18:C3:BE:DF:2E:8F:F2:4C:BB:D6:4F:07:AF
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/wt2CdQFzvhjDvt8uj_JMu9ZPB68.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c5:d3:01:fb:bc:6e:d4:a6:b5:23:3a:5a:b3:59:60:19:ee:
10:6d:bb:b3:68:e1:43:f9:c4:3b:89:b8:72:66:6f:88:d0:17:
79:96:da:97:09:e0:8b:c6:8c:dc:4d:d6:90:16:66:02:b9:2c:
c7:d8:dd:4a:5c:c7:1c:95:a0:9f:2a:be:34:33:0b:dd:09:45:
1e:25:80:35:fd:c5:15:a7:c8:36:6e:b6:99:d5:b5:21:36:fd:
53:d2:b2:10:30:94:e3:24:73:42:16:eb:d0:3a:d2:08:0f:a8:
22:bb:a7:06:1c:35:9b:0d:5f:68:2f:d8:87:c5:0f:a9:b2:a2:
ed:99:23:49:08:dc:ae:08:91:82:22:59:4d:30:d8:98:c6:3a:
d9:93:a2:13:3f:86:3d:2c:a7:5f:05:d4:a1:69:10:ed:da:4e:
00:3f:c2:f5:bb:84:26:73:84:74:6e:22:a4:48:54:71:f1:12:
e2:ba:93:27:f5:b0:1b:49:48:7c:01:97:1a:95:50:c1:d6:05:
76:8e:21:46:b7:32:26:0d:af:dd:88:98:9d:74:43:d5:22:3c:
a0:cc:bb:50:b7:64:bd:56:df:41:ee:d1:39:42:52:dc:0a:6b:
44:58:6a:27:10:81:23:3c:f8:26:45:f2:e5:7e:9c:61:9a:60:
52:0e:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:09:46 2025 by rpki-client