Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6soiuxrATumeIlK0bjdnQ-i_pSo.roa
File: 6soiuxrATumeIlK0bjdnQ-i_pSo.roa (raw, json)
Hash identifier: XxfWCx0jI+OOTUTinc+ix6O/E0Ip6F4n2/9vOrg0Maw=
Subject key identifier: EA:CA:22:BB:1A:C0:4E:E9:9E:22:52:B4:6E:37:67:43:E8:BF:A5:2A
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C93
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6soiuxrATumeIlK0bjdnQ-i_pSo.roa
Signing time: Fri 31 Jan 2025 15:55:02 +0000
ROA not before: Fri 31 Jan 2025 15:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3219 (0xc93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 31 15:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=EACA22BB1AC04EE99E2252B46E376743E8BFA52A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:af:f2:23:4d:42:e1:28:5e:10:6e:d8:18:
33:33:40:7d:7e:65:ad:7e:ab:5e:f6:c5:60:9f:e9:
10:18:04:47:78:60:f1:06:d7:d7:64:8a:1c:4e:16:
fe:fb:05:b7:45:f1:e8:cf:3a:47:d0:f2:1c:c9:cf:
8e:e1:27:1f:d6:2e:de:c3:1e:38:4a:b6:c8:8f:be:
d1:26:7c:63:a5:fc:34:52:ca:b0:37:b6:7b:e5:91:
14:74:d6:83:08:04:ed:f6:a5:e1:8c:c3:42:9e:5c:
4c:24:d4:d8:e2:c7:70:6b:16:a6:b2:01:22:b3:e9:
a7:c0:8b:68:f0:95:47:59:de:d8:2d:49:d3:3d:f0:
fd:d9:62:8d:ba:5c:a1:eb:a2:f5:b3:e1:42:31:fe:
25:2f:d3:f0:61:00:8b:59:0a:64:3b:42:b5:86:85:
90:eb:48:1c:b7:20:b7:51:de:74:3e:1f:2e:0b:1c:
ef:78:cc:e4:8f:ea:a3:a3:28:5c:ef:27:67:b5:a8:
db:30:e1:ff:70:20:35:03:f0:6d:33:a1:22:cd:07:
46:b2:68:2f:9e:79:06:f6:c8:99:a3:dc:ff:6f:1b:
ed:f8:2c:b9:5b:66:26:5c:b4:c4:ef:21:c0:91:0e:
79:16:15:19:aa:f5:5e:dc:bb:80:4e:e9:d8:aa:16:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:22:BB:1A:C0:4E:E9:9E:22:52:B4:6E:37:67:43:E8:BF:A5:2A
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6soiuxrATumeIlK0bjdnQ-i_pSo.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:6c:58:30:6b:b1:1b:dd:99:2a:de:0a:47:ce:31:75:b5:b2:
53:1c:34:57:41:6a:47:df:61:12:a7:f5:ce:d1:48:e6:d5:1a:
81:04:9c:5c:b2:8f:b5:90:5c:3e:d2:63:38:35:e5:28:bd:34:
03:cb:3d:f3:dc:d3:00:5e:2a:b9:fa:ea:6e:88:3d:f9:3a:20:
25:00:6d:34:f5:85:c6:16:76:03:f2:31:f7:6b:8a:0e:7f:b4:
aa:a3:58:0d:db:82:d7:50:7f:89:86:0f:37:2b:f3:82:e2:bd:
16:c5:1b:09:b7:6b:54:53:d0:14:08:aa:b9:81:a6:ee:5b:dc:
2c:be:f1:ca:67:7d:d8:3e:9f:a0:9d:3f:fb:8e:fd:b7:5d:5c:
dd:a3:95:83:ab:c6:ac:81:9f:2a:3b:91:98:a6:e0:3c:63:5e:
c2:62:e4:c3:69:94:da:76:4a:57:79:1b:b9:42:0f:67:ae:ca:
1f:c3:93:bf:66:36:5b:d8:33:43:24:45:88:5b:49:ac:c8:24:
86:00:d3:18:64:85:46:ce:7f:f8:c6:cc:97:0d:c5:80:32:ac:
3b:9e:fb:bf:5d:6f:ef:a3:c0:f6:52:b3:4f:b9:59:47:0a:03:
23:4d:2c:f0:8f:54:97:fc:6d:bf:1f:4c:d5:ed:96:14:81:e1:
81:c3:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:44:57 2025 by rpki-client