Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa
File: Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa (raw, json)
Hash identifier: DmHpfXFPwpt2PPJ/WB8IbDLZuzLWRi/uTuwyWpk2ZJ8=
Subject key identifier: 1E:3D:86:0B:E7:42:E9:28:C5:5F:AD:E8:CB:75:44:8F:17:C0:E2:50
Certificate issuer: /CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Certificate serial: 32
Authority key identifier: 4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
Subject info access: rsync://chloe.sobornost.net/rpki/Sobornost/Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa
Signing time: Mon 07 Dec 2020 15:19:49 +0000
ROA not before: Mon 07 Dec 2020 15:19:49 +0000
ROA not after: Thu 01 Jul 2021 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Validity
Not Before: Dec 7 15:19:49 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=1E3D860BE742E928C55FADE8CB75448F17C0E250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:ba:9b:a6:43:a7:e3:09:20:62:0f:fa:d3:
dc:36:9e:f8:19:fa:ca:87:c9:ec:ff:e4:7e:9b:4b:
11:8f:fd:57:44:8a:b3:14:5b:0e:e3:ca:32:57:9d:
ea:ba:b9:a7:6f:ab:6e:b7:84:d0:61:30:f1:a4:08:
68:4f:a3:f7:d4:e9:2e:95:ec:a5:61:d1:20:62:9e:
1b:ab:73:a1:d4:96:98:e2:c5:cb:6d:b7:8c:d9:26:
7b:77:99:bf:9c:19:52:2a:0f:70:9a:76:d1:45:b6:
40:c9:84:88:85:5b:75:24:68:2b:25:cd:83:a9:c9:
84:21:11:17:5f:4c:ee:72:2f:8c:a9:20:57:0b:75:
5e:35:e6:aa:78:1c:b4:e6:79:3a:4b:56:0f:65:bb:
72:f7:76:67:31:85:e3:ab:ea:ee:f8:54:c9:f9:81:
6c:8b:34:8c:f1:e2:8c:bd:c1:1d:d5:c7:bd:6b:74:
b5:73:58:70:96:c5:a4:3c:bc:66:d8:ab:a7:53:f9:
27:9e:0b:cd:8e:cc:4b:78:00:9a:c9:2b:f0:5c:9d:
b4:75:53:40:ea:4b:81:0a:f0:d4:29:fe:fa:a1:71:
63:22:b4:e4:55:9b:4d:c9:80:06:b8:06:98:4d:ec:
a1:7e:90:5a:b8:9e:10:f1:49:54:69:e4:9e:2f:d7:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:86:0B:E7:42:E9:28:C5:5F:AD:E8:CB:75:44:8F:17:C0:E2:50
X509v3 Authority Key Identifier:
keyid:4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/Sobornost/S-JwasFtyBCwjL60AOFzgrLCWmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
Signature Algorithm: sha256WithRSAEncryption
ad:28:42:ce:c8:58:47:ca:88:e1:c2:2d:52:41:0a:93:20:c3:
f1:d7:46:02:8e:8f:7e:26:18:47:de:11:3a:9f:4c:cd:1f:34:
79:fa:05:5c:e7:ce:76:7e:13:44:d4:3c:75:d7:9c:d7:38:bf:
b5:26:26:1d:d0:61:92:a4:d7:dc:1c:c0:1d:94:d1:63:3a:29:
eb:54:e0:aa:9b:06:d9:bc:03:d9:e6:2b:44:08:f4:bd:e4:b1:
f8:b2:66:ec:04:e6:a5:08:5d:10:14:59:43:0e:70:6b:0a:51:
f4:d2:59:41:5d:48:01:42:67:7e:12:6b:3f:62:2c:c7:78:6c:
75:70:1e:e7:f3:27:08:b5:87:80:04:aa:3c:b4:e7:77:aa:83:
b1:a0:6b:ab:61:22:c7:7d:3d:5c:f8:65:c1:b9:55:8b:34:10:
03:38:7e:8a:fc:45:fa:3d:ca:da:42:18:34:b9:27:98:b6:c3:
70:bc:5e:76:90:5c:4a:04:af:1a:91:9f:c8:fc:93:e0:eb:3e:
05:5b:70:f4:f8:01:41:68:58:f2:a3:06:c8:92:b3:c6:ec:c9:
bc:72:ab:e6:41:32:98:e2:3c:95:d7:05:a7:60:f6:4d:1d:b7:
25:a4:c7:bb:0c:fd:b5:62:14:ec:1f:d7:6a:66:c0:1e:17:66:
cc:0c:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org