Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/zNpUXNwcg4Z6t91eQ6-OGOY2zx8.roa
File: zNpUXNwcg4Z6t91eQ6-OGOY2zx8.roa (raw, json)
Hash identifier: +FuaKB347w4nfo2ZNlCO/3Bk6EWqXHX7UkW3wcwU4ZA=
Subject key identifier: CC:DA:54:5C:DC:1C:83:86:7A:B7:DD:5E:43:AF:8E:18:E6:36:CF:1F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B18
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zNpUXNwcg4Z6t91eQ6-OGOY2zx8.roa
Signing time: Fri 20 Dec 2024 15:55:02 +0000
ROA not before: Fri 20 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2840 (0xb18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 20 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CCDA545CDC1C83867AB7DD5E43AF8E18E636CF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:62:86:de:f9:2b:f9:a4:9e:a4:19:bc:53:
49:96:e3:48:5e:a1:f3:aa:23:20:cf:37:ec:72:41:
2d:45:1c:9b:ba:5c:78:10:81:56:7f:2a:4e:57:63:
b2:c5:c2:39:85:cb:70:bf:99:4e:0c:5a:2b:b4:76:
72:51:f5:4d:59:92:25:13:2f:1d:8f:5c:47:6b:63:
ee:55:13:6c:ee:77:69:27:67:52:2a:43:85:ef:96:
8f:ce:e2:06:ee:67:4e:c2:ae:10:c3:d8:18:0d:c8:
8a:3f:ca:32:16:7c:5a:a7:a6:69:08:38:0f:54:03:
bd:4c:81:67:72:3f:66:99:d5:3d:96:75:f1:b7:c2:
59:52:00:5d:79:31:d7:99:92:d4:5a:b3:b9:c9:10:
0c:41:1d:5e:a9:a9:50:2e:8b:df:93:58:1a:67:11:
0a:87:8e:4e:a6:5c:b5:e0:bd:61:b1:0a:54:24:a7:
53:7b:f0:5e:00:45:0b:53:37:93:d8:cf:99:d6:c5:
52:be:19:eb:c4:a4:91:3a:8b:70:11:b7:d1:a9:9b:
7d:68:a8:21:45:26:ac:d1:32:7b:94:e1:27:42:b9:
6f:c5:2d:cc:f4:49:2b:e3:14:97:91:83:c8:0d:91:
2b:e9:71:8a:9e:17:3b:bc:d9:ea:93:24:e2:1d:38:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:54:5C:DC:1C:83:86:7A:B7:DD:5E:43:AF:8E:18:E6:36:CF:1F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/zNpUXNwcg4Z6t91eQ6-OGOY2zx8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fa:41:b0:6c:eb:42:f3:8c:7e:e2:f8:76:28:b5:5e:b3:d5:
4d:36:64:17:8a:93:78:a4:f7:40:a2:31:de:f6:a3:40:e7:25:
a4:14:50:08:02:d1:7a:4c:41:36:7b:0f:eb:11:95:86:c2:b2:
ec:41:c3:93:24:e6:95:ca:aa:1b:eb:87:f3:83:3d:50:7c:d0:
fb:da:c4:f0:f2:fc:40:b4:45:1b:6d:4b:c6:bd:b7:3e:3d:88:
7d:db:a4:9d:87:cf:bb:08:b8:d1:22:31:90:2d:44:5a:38:5e:
6c:34:8b:b5:78:59:59:d0:ca:e6:73:c0:ac:1b:7f:4a:d8:24:
ad:62:77:c5:7f:a1:e0:35:16:15:b4:88:17:c9:08:a1:56:90:
2b:18:4b:a8:cc:7f:ed:3c:9f:67:0e:bb:44:c7:f7:78:17:2a:
36:1a:5e:c7:b9:6b:10:bd:6f:8d:02:13:54:f7:61:02:52:df:
28:6d:aa:16:d6:ad:e0:8a:a3:8d:34:22:1d:69:bc:41:39:0f:
45:29:26:53:2a:6e:99:e4:24:79:a1:70:6c:21:29:1e:b8:d1:
89:bd:06:81:bb:48:54:ea:4b:30:7e:79:ea:86:86:88:82:4c:
43:4c:3d:b9:0d:e2:79:be:88:b8:21:05:bf:44:9d:75:ae:ed:
28:02:a0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:00 2025 by rpki-client