Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/KY2Kqq50EsBzqEzuSriY8b34wHE.roa
File: KY2Kqq50EsBzqEzuSriY8b34wHE.roa (raw, json)
Hash identifier: ukOrdlJ1lKHk+aiCXRw/PlxzcWf4/VIMRxiEYNwalOI=
Subject key identifier: 29:8D:8A:AA:AE:74:12:C0:73:A8:4C:EE:4A:B8:98:F1:BD:F8:C0:71
Certificate issuer: /CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Certificate serial: 2F
Authority key identifier: 4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
Subject info access: rsync://chloe.sobornost.net/rpki/Sobornost/KY2Kqq50EsBzqEzuSriY8b34wHE.roa
Signing time: Mon 07 Dec 2020 15:18:50 +0000
ROA not before: Mon 07 Dec 2020 15:18:50 +0000
ROA not after: Thu 01 Jul 2021 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Validity
Not Before: Dec 7 15:18:50 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=298D8AAAAE7412C073A84CEE4AB898F1BDF8C071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:83:0a:60:2d:d2:e6:8d:0d:31:f6:96:49:
8c:04:f6:c3:5a:8b:97:96:f2:0b:c5:22:73:18:80:
a5:ac:1a:31:58:27:60:fd:d9:90:08:49:25:54:bd:
a9:20:1d:b2:04:88:2b:f8:82:7d:cf:7d:a8:87:56:
53:62:bd:67:1e:ec:ad:cc:3f:d4:41:71:6e:6c:d7:
61:bb:e9:1f:cf:7d:f0:66:9f:16:ff:2f:ce:b0:30:
f6:a5:25:a2:45:9d:43:22:0f:40:46:dd:34:7c:d7:
cd:af:67:14:9b:e6:46:57:1e:ea:fc:e2:0e:75:04:
d6:1f:69:5a:9c:7e:99:dc:c6:d8:d4:ff:45:c5:76:
b0:06:0f:d6:9e:8e:24:be:13:69:5d:4e:bd:5d:39:
00:a6:e5:ca:db:ee:46:a8:bc:66:d4:da:43:a2:f8:
23:7c:22:87:3d:b2:ed:d7:94:a3:89:3d:27:39:fc:
b7:9a:c3:01:43:8a:80:51:8f:2d:98:4a:22:23:55:
7b:f0:48:9d:55:c7:7c:59:eb:24:0b:09:1e:28:ba:
ab:96:97:c0:13:aa:03:73:bd:37:9b:c3:02:33:63:
8b:83:be:03:37:18:f6:59:e0:15:5b:d9:37:f1:c6:
cc:c8:57:63:ce:b0:db:b6:65:74:c2:f3:02:70:b5:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:8A:AA:AE:74:12:C0:73:A8:4C:EE:4A:B8:98:F1:BD:F8:C0:71
X509v3 Authority Key Identifier:
keyid:4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/Sobornost/S-JwasFtyBCwjL60AOFzgrLCWmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/KY2Kqq50EsBzqEzuSriY8b34wHE.roa
RPKI Notify - URI:https://chloe.sobornost.net/rpki/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
Signature Algorithm: sha256WithRSAEncryption
19:66:de:ec:80:4e:70:92:06:12:1c:bc:71:39:bf:61:00:f4:
88:c9:a5:97:f6:fa:61:5d:9d:28:c5:bf:68:25:8b:58:23:cb:
40:50:3f:aa:c0:8c:c5:c6:c4:5a:f5:d5:31:51:b3:2f:70:db:
0b:cd:7d:05:9b:68:cc:37:e8:77:52:cc:7b:4c:43:ab:ac:57:
7e:62:5a:a8:db:36:be:fd:f9:54:1b:7e:68:d2:4c:73:dc:28:
c4:38:7b:2b:68:7f:f4:05:30:3d:e0:44:4d:38:7d:c9:00:f0:
b8:c4:64:ed:83:c9:e4:68:af:ba:b2:d0:f5:46:72:07:54:63:
cf:eb:fb:9b:1b:9f:78:79:04:86:28:f5:57:e7:01:53:68:41:
77:52:75:0c:5e:da:c2:dd:21:cb:d8:fb:24:5a:f0:d7:44:f5:
f7:e3:94:3f:35:7f:f9:ac:14:fc:49:cc:1d:cb:0b:76:88:c2:
2f:f9:cf:e0:f4:d7:c4:5f:18:4a:2c:ee:21:73:5b:92:bd:f3:
6b:0e:3a:3b:5c:13:ec:ca:af:f1:39:b9:51:30:9a:11:d5:2c:
7f:35:15:32:f1:bd:46:6c:bf:64:8e:43:aa:6f:b1:25:63:69:
ed:7d:c9:93:68:9c:b5:eb:0d:d6:e6:aa:af:34:b6:b5:82:dc:
f4:a6:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org