Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/OlTLgPb5SvTjjZzflO4PoD02a6Y.roa
File: OlTLgPb5SvTjjZzflO4PoD02a6Y.roa (raw, json)
Hash identifier: FRUJfxA94tm2D30wr4KfAmKXeRY0/ey9r962fPNgsQ0=
Subject key identifier: 3A:54:CB:80:F6:F9:4A:F4:E3:8D:9C:DF:94:EE:0F:A0:3D:36:6B:A6
Certificate issuer: /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial: 3A
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access: rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/OlTLgPb5SvTjjZzflO4PoD02a6Y.roa
Signing time: Tue 26 Jan 2021 22:40:23 +0000
ROA not before: Tue 26 Jan 2021 22:40:23 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Validity
Not Before: Jan 26 22:40:23 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=3A54CB80F6F94AF4E38D9CDF94EE0FA03D366BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:da:26:df:55:6b:c9:f4:1c:ac:e7:05:23:
02:22:4e:2b:d0:25:6f:17:2a:5b:d7:04:58:88:9d:
47:8b:01:2c:1c:3c:b7:2d:0b:a9:a2:87:5a:53:1c:
99:68:2f:15:e8:ba:b2:be:7f:1b:36:4b:4d:42:f3:
0e:66:5f:39:8d:8c:f8:bf:15:5d:49:fa:87:7a:14:
04:c8:f1:80:3c:d9:48:82:3f:75:90:b2:1d:df:77:
f6:40:a6:c1:ea:f6:d5:e0:42:e4:a5:df:3b:ac:bd:
4e:31:ca:ba:f4:aa:2a:05:54:53:44:28:18:ad:1e:
f0:ae:40:6e:38:e8:2e:47:80:49:f3:e0:72:e1:45:
8c:f0:a5:79:4f:5c:bd:bb:3c:73:5f:b1:9d:9d:cf:
c9:24:96:a2:a4:d3:1e:21:23:b4:3a:9c:e9:0b:49:
cc:a3:9c:a4:40:5a:85:25:e9:50:4c:c6:47:c3:d6:
fd:29:df:79:b2:b7:f1:d3:c6:f7:10:91:6d:9b:61:
7b:1f:80:fd:03:73:9a:df:c1:48:34:2a:f1:1b:ec:
ca:f9:2d:26:6d:e5:ab:56:ea:62:88:27:c9:e9:5d:
e1:32:ef:a4:37:40:67:fc:78:4f:8c:31:13:62:39:
79:bf:ac:2b:2f:a7:c3:ec:9d:df:da:37:a3:44:71:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:CB:80:F6:F9:4A:F4:E3:8D:9C:DF:94:EE:0F:A0:3D:36:6B:A6
X509v3 Authority Key Identifier:
keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/OlTLgPb5SvTjjZzflO4PoD02a6Y.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
Signature Algorithm: sha256WithRSAEncryption
01:85:d0:ea:15:10:04:4f:9d:9c:68:c3:73:2c:83:c5:56:75:
a6:36:aa:9f:fa:d8:55:fc:bf:ad:25:ce:56:7b:f7:e4:08:92:
75:a0:f4:58:a0:b3:1f:87:c8:3a:fa:05:26:6f:d0:2f:8c:9a:
ea:ad:2a:02:9d:4d:9f:71:9b:94:12:00:ea:f1:70:f3:3a:4e:
58:2e:11:6f:23:2c:85:c2:b2:26:52:84:7a:df:1e:dc:54:de:
8e:d9:4a:a4:05:2f:65:7f:a2:90:74:02:06:ba:db:72:d9:2c:
83:94:e3:86:f4:00:e9:d6:20:53:47:27:0e:b7:e4:4c:b0:38:
4d:9c:76:f7:e7:ab:c9:9c:a8:86:14:08:19:32:8d:bb:e1:6f:
8b:1e:0a:87:10:83:9b:04:f4:28:0a:22:f4:f4:84:b0:8e:63:
cc:56:05:15:58:4d:22:98:11:95:07:c7:d9:93:b9:e0:73:a8:
17:94:d5:e4:90:b6:af:a7:94:5c:3b:78:fb:81:81:79:54:40:
9c:a6:d5:52:35:fc:12:b9:af:8d:ad:85:90:0d:64:90:59:3d:
c0:66:7b:c7:e9:a1:23:30:1b:34:9f:60:2e:f0:5d:72:58:fb:
26:b1:56:0b:a3:c9:87:bd:69:c9:a5:22:07:aa:12:e9:c4:17:
7e:9f:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org