Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/elQ592rH-KzUL2QHSqcFAfV_ZME.roa
File: elQ592rH-KzUL2QHSqcFAfV_ZME.roa (raw, json)
Hash identifier: 5C1B5H2bvzuqKv1RUZ5r/MvgqQSbQi8WlfbC+eWBlXI=
Subject key identifier: 7A:54:39:F7:6A:C7:F8:AC:D4:2F:64:07:4A:A7:05:01:F5:7F:64:C1
Certificate issuer: /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial: 9A
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access: rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/elQ592rH-KzUL2QHSqcFAfV_ZME.roa
Signing time: Wed 27 Jan 2021 22:40:25 +0000
ROA not before: Wed 27 Jan 2021 22:40:25 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Validity
Not Before: Jan 27 22:40:25 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=7A5439F76AC7F8ACD42F64074AA70501F57F64C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:06:f1:ea:9d:8e:be:4c:b7:f0:8a:e4:99:
57:ce:d3:9c:c1:d3:76:8b:c1:8e:df:92:a5:d3:02:
f3:82:07:68:de:75:6d:bb:2b:09:90:0d:13:34:4b:
c3:6f:06:79:40:54:83:d4:68:71:bf:b6:20:d0:2d:
5d:91:2d:84:b0:e7:26:bb:92:ad:d6:4c:93:ff:5c:
ec:50:ca:68:eb:2e:f7:82:ed:7e:59:3c:5e:c4:ce:
66:3e:f2:db:e1:9e:a1:0e:b4:0f:64:ff:82:da:a6:
b3:69:60:29:19:a6:e2:58:63:5e:7e:2b:de:7b:d1:
36:92:b5:d6:15:a1:57:b8:45:cf:de:0a:65:b9:a9:
f2:77:7e:69:5e:01:76:85:56:02:24:09:cf:23:88:
b8:21:e8:e5:81:b1:09:22:91:6b:08:b3:4f:fb:85:
50:65:02:1f:3d:f6:43:36:96:35:08:4b:8a:c7:2e:
3c:c5:ac:59:ff:e4:0a:fb:e5:41:a1:a1:0a:c0:77:
84:41:57:2b:13:a4:8a:01:6d:34:f8:e8:a3:45:56:
76:01:5f:b1:fc:d9:ce:c7:5d:b7:b2:9b:bc:3d:a4:
26:6e:33:06:ff:6f:7d:28:a6:d9:65:0c:f2:8f:23:
4e:87:d5:3c:1b:fb:90:25:0c:42:51:11:b9:7d:f0:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:54:39:F7:6A:C7:F8:AC:D4:2F:64:07:4A:A7:05:01:F5:7F:64:C1
X509v3 Authority Key Identifier:
keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/elQ592rH-KzUL2QHSqcFAfV_ZME.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
Signature Algorithm: sha256WithRSAEncryption
23:76:01:2f:b1:66:52:f9:1b:7a:5d:6c:7b:28:14:42:24:89:
9b:6f:17:56:9b:15:94:45:63:82:46:d1:c7:62:bb:e1:9f:b7:
d9:c7:15:53:d0:47:a5:8f:9c:32:af:bb:aa:19:29:60:d7:2e:
8a:75:79:4c:f6:29:84:1a:13:56:5e:42:77:75:41:80:df:ec:
9b:2b:45:8f:d5:af:67:14:84:45:3d:4f:ff:eb:73:f8:81:73:
a3:20:52:74:f5:92:40:13:51:3d:71:3d:d8:b9:73:a6:b9:0c:
ee:e4:3e:63:91:e5:64:f0:38:fa:74:79:73:63:73:6e:42:08:
9c:cc:34:de:80:dc:76:fd:c0:56:5b:8b:43:3d:68:09:ea:58:
0b:ea:82:6f:48:76:28:61:44:90:33:66:00:36:08:36:ed:71:
50:e3:08:6d:25:12:93:2a:f6:91:a4:a9:51:30:89:af:47:cc:
db:08:d7:fa:d6:72:6c:fb:96:47:ac:f0:dc:3a:f7:f8:a1:b5:
00:42:05:ec:be:41:06:9f:5d:f0:f3:af:41:a4:e8:10:93:aa:
8a:57:bc:cc:f9:4b:4c:bd:15:5d:5a:46:54:47:fe:56:0b:26:
b6:83:16:dd:10:29:77:6d:10:1d:cb:76:7f:81:21:4d:65:a6:
07:b7:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org