Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/xVJCPfU616rtudigwKWwRItp3Xk.roa
File: xVJCPfU616rtudigwKWwRItp3Xk.roa (raw, json)
Hash identifier: l0E/RsBoQOVN0H5yQKzm0zoGyy6W0wNhkRKFgMJ0Ick=
Subject key identifier: C5:52:42:3D:F5:3A:D7:AA:ED:B9:D8:A0:C0:A5:B0:44:8B:69:DD:79
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0ADC
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/xVJCPfU616rtudigwKWwRItp3Xk.roa
Signing time: Fri 13 Dec 2024 23:55:03 +0000
ROA not before: Fri 13 Dec 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780 (0xadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 13 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=C552423DF53AD7AAEDB9D8A0C0A5B0448B69DD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:45:de:20:1e:91:1f:d2:2b:2d:61:88:e1:
7c:03:7c:64:02:2b:bd:c5:0a:48:12:54:57:7e:94:
83:05:30:0e:58:bd:e5:d5:47:79:78:fc:84:24:e1:
ca:9b:ef:48:0d:6b:49:83:b8:36:b5:5b:f4:2a:f2:
df:47:80:c8:64:8a:09:0c:ae:b9:d0:fb:2f:34:94:
15:d5:5b:c2:5f:08:50:88:16:d3:3b:89:8c:73:3e:
72:d7:4d:33:b3:81:ef:76:7e:1c:b0:8d:8d:fb:0d:
6e:05:9b:ca:53:46:0d:01:79:fc:ad:37:19:66:ac:
26:c1:2e:30:d6:90:d1:5c:94:fa:fd:f6:fc:09:d8:
ca:a3:ca:fe:9d:80:b9:df:1d:9a:65:49:3e:d9:cc:
df:57:e7:c0:b2:16:a1:f4:41:cf:d3:1f:56:29:92:
ef:d4:ab:3f:d4:59:a2:7c:72:54:55:ed:81:a0:87:
ac:c1:3c:62:78:a3:3c:3c:45:53:11:cc:70:4d:83:
28:9e:01:ab:68:88:78:5f:fb:79:e0:99:91:30:4f:
53:5d:16:1f:8f:84:3e:5b:6c:e3:19:58:01:b4:04:
79:b6:31:12:e2:e3:c3:7a:e9:15:c3:92:3a:d9:15:
57:cb:c3:71:b5:e3:60:51:8a:05:e6:ed:8f:38:0e:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:42:3D:F5:3A:D7:AA:ED:B9:D8:A0:C0:A5:B0:44:8B:69:DD:79
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/xVJCPfU616rtudigwKWwRItp3Xk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0f:b4:26:cc:0a:45:99:ae:0b:41:c5:80:f7:d8:66:d1:cf:
f1:d3:6b:0a:cc:e9:a5:af:09:e5:70:d9:6a:1c:b5:79:75:80:
18:e6:83:fd:72:cb:b6:d5:55:98:ac:0b:f8:f7:49:9d:f3:55:
28:19:75:24:98:35:e0:f4:b0:5c:a4:6b:9c:3c:c3:cc:41:9e:
bf:da:0c:ae:95:cc:b0:08:e3:2a:5f:2b:b5:a2:59:00:46:5f:
2e:fe:ac:f3:da:68:91:2c:49:1a:70:1c:0e:82:e0:72:c1:ca:
e5:26:34:d3:55:03:44:35:dd:08:de:b8:9f:d6:a5:c0:fd:75:
13:78:36:6c:75:23:9d:04:15:77:6f:8f:b3:96:be:96:84:d7:
74:82:2d:f0:ec:f2:46:fa:52:0b:3d:53:8e:63:03:4b:8f:32:
b3:9f:19:a9:19:dc:e2:05:a3:24:a8:ee:d0:6d:1c:a9:0a:92:
ff:20:82:65:1e:d8:32:b0:48:9f:2f:00:da:67:80:73:f2:fd:
0e:61:4e:3e:89:46:93:17:72:2f:41:ce:7f:74:b0:0a:37:05:
df:16:20:b8:36:c6:14:01:a4:09:b9:dd:40:b0:62:74:f6:dc:
d0:8b:1a:aa:5b:50:31:d1:97:dd:ba:e5:a7:f2:7c:85:8a:6b:
ae:38:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:40:04 2025 by rpki-client