Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/yqdx13NcFbqgQLf2wyn15DpH7iE.roa
File: yqdx13NcFbqgQLf2wyn15DpH7iE.roa (raw, json)
Hash identifier: C5v2tpbLuBG7bbUfLQn5w5AH870+BQOVOkr5l/U1ApQ=
Subject key identifier: CA:A7:71:D7:73:5C:15:BA:A0:40:B7:F6:C3:29:F5:E4:3A:47:EE:21
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B4B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/yqdx13NcFbqgQLf2wyn15DpH7iE.roa
Signing time: Thu 26 Dec 2024 07:55:03 +0000
ROA not before: Thu 26 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 26 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CAA771D7735C15BAA040B7F6C329F5E43A47EE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:7d:e3:4d:17:84:9d:92:26:38:9b:f1:48:
66:53:04:bf:ce:56:6c:23:dc:77:02:7a:08:d1:fe:
a1:f6:2f:1f:f7:26:c0:df:4d:73:af:79:fd:00:e0:
f4:ae:c2:ea:69:e8:c2:0b:ec:8c:68:15:e0:b8:9a:
6e:7f:6b:4e:2f:f0:f2:ae:5b:6f:a3:63:67:5f:fc:
8f:53:fc:d9:7a:39:3d:11:57:f0:c1:fe:1c:56:72:
9b:84:a0:33:8f:fd:3f:33:f7:e1:ba:92:25:d8:12:
0a:2d:e3:0a:c7:9b:52:2a:df:ae:e0:84:01:cd:99:
f0:87:db:28:7a:34:b5:42:b8:b4:2b:96:81:e5:3c:
af:3b:32:a8:4e:3c:9d:8d:56:d8:41:b6:fc:9e:59:
9e:e4:4b:38:e0:70:df:b4:44:37:2f:fc:71:5b:3f:
f3:77:47:2c:e5:e1:1c:98:82:a6:cf:40:8b:54:44:
85:20:61:3c:e1:da:bc:13:2f:cf:d5:17:a9:f5:5d:
01:e0:06:96:c9:ac:24:63:51:df:6a:51:95:f7:b9:
d0:8a:c4:7e:33:5c:90:7a:1f:13:7c:25:e4:a2:e8:
8d:fc:91:88:58:ef:03:93:e4:42:b4:80:4e:01:15:
01:43:f9:e5:60:2d:38:ca:49:74:cf:ff:75:77:8d:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:71:D7:73:5C:15:BA:A0:40:B7:F6:C3:29:F5:E4:3A:47:EE:21
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/yqdx13NcFbqgQLf2wyn15DpH7iE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f5:f1:65:c2:e8:fe:e9:0d:8b:94:8d:6b:2a:d8:90:fc:94:
72:43:21:ef:ec:9b:78:99:66:8a:0e:ba:44:2a:9e:c8:0c:e5:
b6:e6:c2:d9:ba:91:6b:6f:25:14:13:fb:b9:b2:4b:fc:3d:3a:
37:40:aa:09:50:9d:41:45:ec:60:5e:b9:68:1c:79:aa:1d:f3:
3d:bb:2e:45:d6:f3:ae:58:7c:83:0d:c8:17:d2:ba:2b:68:fe:
46:80:82:64:04:a9:85:ea:95:2b:93:6f:0d:a5:cf:1d:ee:63:
fd:89:78:f5:28:38:b8:5b:8d:67:c5:ae:15:cc:1b:71:55:3f:
0c:63:08:76:4b:79:be:bf:32:50:1c:0d:99:dd:eb:04:08:ee:
14:38:6d:d2:82:14:62:be:28:ff:72:eb:bc:e9:84:d0:48:ce:
f0:99:fc:34:6b:ca:99:96:0a:f6:51:c5:62:a0:25:67:f2:9e:
f6:6b:ff:38:c3:bd:05:0a:54:7f:85:46:4e:7c:1a:28:39:6c:
6a:29:01:9c:5a:75:32:eb:93:5e:c7:00:0a:7c:7a:8d:4e:b4:
f2:71:56:3f:84:d8:98:ff:92:7a:12:e5:0a:07:bc:a7:de:84:
65:a7:6c:c7:5d:23:46:89:37:02:09:92:71:01:79:9c:3e:77:
83:80:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:27 2025 by rpki-client