Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/nlbAfi_xEzCqOAiFqwVC9V6j-j8.roa
File: nlbAfi_xEzCqOAiFqwVC9V6j-j8.roa (raw, json)
Hash identifier: Jh/u3M/VtJVGpNveNgsZag9rHGmL7R5X4qmiA63mDEQ=
Subject key identifier: 9E:56:C0:7E:2F:F1:13:30:AA:38:08:85:AB:05:42:F5:5E:A3:FA:3F
Certificate issuer: /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial: 02A0
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access: rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/nlbAfi_xEzCqOAiFqwVC9V6j-j8.roa
Signing time: Tue 02 Feb 2021 08:10:46 +0000
ROA not before: Tue 02 Feb 2021 08:10:46 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Validity
Not Before: Feb 2 08:10:46 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=9E56C07E2FF11330AA380885AB0542F55EA3FA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:73:ce:97:d5:67:8e:28:eb:65:b5:fe:07:
0f:85:84:e7:bd:b7:32:b7:2c:08:e1:69:1d:57:10:
22:4c:e3:b5:fe:5f:46:e9:98:d3:b0:4d:68:3a:a0:
cf:10:7b:96:c4:18:7f:4d:f8:05:c6:9b:d1:16:37:
b1:1a:98:62:06:e2:52:c3:cc:6b:35:ee:6b:94:bf:
09:ac:1c:ea:5a:71:33:8e:9c:d6:75:a1:1b:17:b1:
d3:3d:01:a7:8a:db:21:50:af:a5:e2:6e:00:ee:ef:
84:ca:97:d2:90:54:cd:2e:89:f0:dc:04:82:d8:2d:
5a:c6:3e:af:6d:0a:d7:b7:95:c3:c6:35:b4:cc:20:
c5:89:88:ba:27:9a:3d:b7:92:da:13:eb:6f:ed:bb:
a0:b3:a6:64:9b:fa:f2:6e:34:d4:f9:0c:05:11:cb:
09:4e:2a:ef:29:d1:a4:44:0f:81:d9:99:54:68:3f:
ec:73:a7:34:73:a3:cd:9f:42:a4:c3:f0:7b:86:7c:
37:40:0c:8b:dc:70:61:79:9a:9b:36:53:c1:57:cd:
c7:75:c0:db:71:fd:83:34:f9:b5:25:8e:ac:27:3c:
9f:58:67:66:1b:0c:18:b3:cc:2c:e3:33:18:d7:c0:
01:12:28:eb:a1:eb:31:cd:a4:e2:48:34:c6:ae:01:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:C0:7E:2F:F1:13:30:AA:38:08:85:AB:05:42:F5:5E:A3:FA:3F
X509v3 Authority Key Identifier:
keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/nlbAfi_xEzCqOAiFqwVC9V6j-j8.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
Signature Algorithm: sha256WithRSAEncryption
91:31:b9:90:19:7b:f9:9e:23:b0:76:0e:a0:66:cc:ef:cb:0d:
80:15:d3:39:80:87:14:5c:8d:16:ce:c6:a1:15:06:f9:ad:53:
c4:22:6d:dc:31:4c:f7:32:e4:d6:ca:07:12:97:e8:57:34:9a:
b3:2d:5f:d2:e2:30:7a:f5:86:bb:70:01:48:4f:dd:c8:7a:e5:
4a:ba:76:36:d4:08:72:84:b1:c2:b6:5f:48:2a:97:1a:10:aa:
e1:af:78:0e:75:c0:4b:f1:08:cc:0d:c7:ca:fa:68:4f:cf:37:
b5:cb:b4:e5:f2:ad:3b:f7:2a:6f:82:e7:ea:72:b6:92:63:d3:
47:4e:ff:a5:31:cd:3f:13:ea:e6:b5:12:ab:24:e8:1b:43:a9:
d7:21:36:18:9a:38:fe:f7:75:cf:79:71:34:94:a0:7a:6e:6e:
7d:0f:d9:ed:84:16:53:91:1b:8b:f4:6a:de:5a:30:72:09:25:
2b:78:36:ff:20:6c:e6:f3:f9:c0:f8:25:30:70:7e:28:45:4e:
95:44:0b:41:df:4a:50:49:f7:9d:cf:fe:79:07:57:1f:6f:7b:
35:af:f6:27:bd:04:30:e1:0d:80:58:46:f8:90:ec:2e:0d:d3:
21:d1:55:06:a8:80:1e:ab:b1:fc:e6:92:18:2a:4f:3f:44:9b:
27:a9:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org