Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/euv64En05073B5-r95s2Uu_UwJg.roa
File: euv64En05073B5-r95s2Uu_UwJg.roa (raw, json)
Hash identifier: XiuUZ8UmidXN8hBLSaaK/0y/A/0mIPPIW4YyRcs2pUg=
Subject key identifier: 7A:EB:FA:E0:49:F4:E7:4E:F7:07:9F:AB:F7:9B:36:52:EF:D4:C0:98
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 0218CD
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/euv64En05073B5-r95s2Uu_UwJg.roa
Signing time: Tue 17 Jun 2025 00:12:29 +0000
ROA not before: Tue 17 Jun 2025 00:12:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:b240::/29 maxlen: 29
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 18:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137421 (0x218cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 17 00:12:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7AEBFAE049F4E74EF7079FABF79B3652EFD4C098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:db:fa:73:78:3b:71:bb:e0:a4:03:63:88:
8a:8b:4c:c0:41:a1:aa:17:40:28:eb:d0:f7:40:26:
37:6e:32:31:cf:27:56:fb:45:c1:1d:fe:71:95:ee:
26:7e:62:a7:e6:0d:63:bf:3c:dc:c7:cd:28:41:a8:
26:bb:a4:b8:1c:7c:43:66:71:33:c0:7f:b5:ab:34:
fb:9b:52:ab:f5:d0:fc:4d:39:f3:75:93:bc:6e:ed:
db:ca:8a:d5:29:f8:eb:52:85:c1:c1:83:f0:d8:40:
ad:b0:cc:57:c3:06:26:6f:27:8c:8a:90:2e:aa:4b:
93:3d:98:5e:cb:92:a6:cc:12:99:90:d3:71:66:b2:
da:ad:94:b7:31:80:88:c8:dc:af:36:75:4a:9d:5c:
3b:c2:6f:f3:41:7f:65:9a:d2:43:a5:be:62:b5:bd:
08:f2:e2:d2:cd:23:29:a5:67:2e:a1:9e:2f:c3:52:
3d:ff:21:33:cf:1c:7b:7e:a9:da:9a:85:e3:9c:7b:
51:c1:ea:7f:09:d3:2d:03:77:49:80:ee:cc:98:d1:
61:e2:17:55:2c:10:ec:69:57:be:37:61:22:f5:c0:
d1:c9:90:10:16:7d:c3:36:33:ca:94:f5:be:d2:04:
7f:a6:bf:a9:82:6d:68:25:a1:64:c3:4e:bd:1e:11:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EB:FA:E0:49:F4:E7:4E:F7:07:9F:AB:F7:9B:36:52:EF:D4:C0:98
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/euv64En05073B5-r95s2Uu_UwJg.roa
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b240::/29
Signature Algorithm: sha256WithRSAEncryption
31:ca:71:be:e7:e6:00:36:9f:90:62:92:9c:7a:68:d5:7c:c9:
92:40:ef:71:7d:22:d9:61:3f:79:f4:50:55:d7:c0:7e:74:ee:
a9:11:54:df:9e:7a:d0:67:d3:99:ce:18:c2:25:cb:22:70:0a:
cd:74:84:0c:8a:b8:ee:a5:53:6a:44:e6:b8:9a:76:06:f9:0f:
91:9f:12:78:74:d9:8f:5d:48:2d:40:ff:b5:b9:a5:e3:a9:c4:
f2:ae:5a:c7:d9:57:2d:e0:c8:d6:8e:f2:ed:d4:7e:8c:98:14:
89:54:77:ce:9b:65:cc:21:df:ce:85:dd:c9:9d:1e:94:b5:fe:
77:91:66:7b:2a:93:71:31:54:79:da:0b:87:91:b7:ae:54:6f:
fd:2f:f6:0e:af:27:76:21:f6:e2:ea:73:df:73:0b:a9:5e:df:
40:a7:e3:f4:8a:03:3f:04:b9:36:1c:92:ed:6a:25:75:63:0c:
57:6f:50:fb:60:d3:28:03:02:d8:b8:bf:5c:55:82:8a:73:a1:
3f:f9:b2:bd:04:86:12:72:8e:dd:f1:03:73:46:30:f9:a0:14:
40:43:41:a1:2d:5c:f2:67:ba:fe:a6:22:d9:e7:5b:e8:cf:94:
41:38:a3:b4:90:23:8d:35:b8:cc:67:32:ab:8e:37:5c:0d:5a:
7e:24:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:31:47 2025 by rpki-client