Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa
File: zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa (raw, json)
Hash identifier: qLS98wDD6uBYR/1xGuHLGjRWrS9SRA1uwPUMSp/TaYE=
Subject key identifier: CC:89:58:37:EB:43:2E:E1:23:D0:10:F0:65:28:B9:3D:2D:5E:20:32
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 0218CD
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa
Signing time: Tue 17 Jun 2025 00:12:27 +0000
ROA not before: Tue 17 Jun 2025 00:12:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 2a0e:b240:118::/48 maxlen: 48
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 12:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137421 (0x218cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 17 00:12:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CC895837EB432EE123D010F06528B93D2D5E2032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:7a:93:85:84:6a:e7:c9:6b:5e:b0:65:c8:
48:9a:cd:ea:b3:b4:1d:2c:d0:bd:a2:5b:36:d8:69:
ed:32:b3:6f:f2:24:68:cf:cf:80:e7:b9:3a:09:0e:
79:47:e6:c5:70:0f:2e:e7:95:24:38:6a:fd:78:3f:
f5:fd:9b:50:37:4e:4d:29:4b:b8:97:7b:82:13:ef:
48:ae:61:8d:e7:f2:0a:4a:74:93:0f:e4:66:e9:09:
b9:65:54:cc:9e:69:d3:47:13:25:50:02:fe:db:a2:
75:c6:b3:09:cd:6d:c1:2d:c3:7b:6d:5a:fe:4d:91:
1e:ac:2d:94:77:41:04:e7:45:81:99:2a:ed:78:37:
1e:89:9a:79:60:fd:81:4d:36:40:7b:74:df:28:da:
be:63:db:75:04:d9:22:58:82:96:36:a7:1b:26:fa:
0e:9e:9c:91:bb:32:6b:6e:d7:21:0e:c2:e2:a1:bc:
35:bf:38:55:89:32:9b:04:de:4a:c4:d7:cc:e5:47:
a7:83:50:fc:30:73:ad:7c:52:1c:6b:db:43:5a:ac:
63:4d:48:6c:a5:21:10:b2:02:59:39:f8:a2:eb:97:
67:b7:6e:fb:ce:0d:19:87:63:ea:95:fb:fc:00:01:
3f:75:dc:16:ad:af:ce:99:fc:40:79:f4:f7:8a:49:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:58:37:EB:43:2E:E1:23:D0:10:F0:65:28:B9:3D:2D:5E:20:32
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b240:118::/48
Signature Algorithm: sha256WithRSAEncryption
37:58:59:0d:1d:28:60:aa:cb:a8:15:19:20:bc:be:a8:e5:31:
26:3b:53:d5:63:2e:84:4c:61:e9:49:35:21:10:d2:4b:e4:9e:
ff:cc:97:8d:c4:8d:24:3e:5a:10:fe:84:8b:c9:04:52:f2:a5:
cb:3c:d3:7d:45:c9:eb:37:7b:e8:16:15:8d:c1:77:1c:f6:c5:
3a:62:ae:35:f3:dd:3d:dd:ac:b0:d8:0f:86:f1:79:09:d1:2a:
6f:4c:84:8c:5d:6c:8c:65:1f:ce:b8:06:c8:30:02:27:9a:a3:
9f:d8:56:20:0e:0d:f4:ec:c1:0e:74:7e:d9:f8:49:7c:d9:1a:
4e:f1:35:3c:42:fc:74:4b:dc:6c:71:a9:e5:24:f1:af:09:fc:
c5:bc:50:79:a8:a8:e5:df:63:8d:8e:cc:0b:b0:f6:0f:94:38:
f4:fe:f0:68:b0:54:da:08:96:56:e3:b3:b2:39:06:e5:63:fb:
3b:7a:09:3d:a2:65:38:e4:32:0e:c8:32:d9:17:59:bf:21:c9:
77:8e:f5:e8:93:b1:c3:e3:2b:8e:f7:83:c6:6d:50:be:32:cb:
97:3d:51:26:68:5e:16:38:68:be:5f:1d:3c:22:c3:a5:88:6a:
ef:3f:63:b2:e3:a5:9a:d9:23:a3:b6:b5:56:4c:89:11:26:82:
27:a4:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:54:41 2025 by rpki-client